Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File: 2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier: fonJRLX3gtGBtXEDHg+RtXDKdS1odfNCubJAsw0pWfM=
Subject key identifier: 15:8A:B3:2E:1D:BB:32:C6:22:25:79:42:22:40:56:8B:41:B4:18:D6
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial: 019FA93DEF5DC3559BE16BCC62ACDD68899B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number: 0D56
Signing time: Tue 28 Jul 2026 15:00:36 +0000
Manifest this update: Tue 28 Jul 2026 15:00:36 +0000
Manifest next update: Wed 29 Jul 2026 15:00:36 +0000
Files and hashes: 1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: At3pQyogi97AjUwUfRsKAw9Z4j/owIY+hxxx8koErgg=)
2: DaHppUozY1kCYvwX88wtsnmWINM.roa (hash: ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=)
3: HtCMzIedr8Uyc-ZY1tVjU5QJcKU.roa (hash: I9957InTODSplYXK+6SDN/CVJ6zGM65GrDjFyU/wtKc=)
4: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (hash: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ef:5d:c3:55:9b:e1:6b:cc:62:ac:dd:68:89:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Validity
Not Before: Jul 28 15:00:36 2026 GMT
Not After : Jul 29 15:00:36 2026 GMT
Subject: CN=158ab32e1dbb32c6222579422240568b41b418d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:28:c5:78:f1:be:29:3d:2c:36:8b:e4:8c:13:
c7:3d:c6:33:3c:36:bb:3d:17:27:ed:67:42:69:5a:
17:e3:9e:06:2d:05:15:b4:00:cd:a8:71:e1:32:fe:
c9:db:ca:d1:47:5f:67:41:42:a8:8c:59:04:ad:6f:
90:c8:fb:7c:96:3d:ea:5d:09:6f:72:42:ce:ec:f8:
27:e4:7b:72:65:5f:ed:c6:33:aa:07:26:43:22:63:
9d:b4:9e:b3:09:af:3c:77:82:9e:e9:e8:79:dc:a8:
55:26:3e:3b:80:8b:2d:fb:c9:07:80:cb:39:06:9e:
e0:78:28:8c:d3:8b:e2:7d:54:d7:99:2c:92:13:c1:
18:84:ea:07:d1:fe:b0:80:19:0e:bc:ab:72:36:ca:
e6:ac:29:13:99:78:b7:5e:db:b1:f7:c4:ba:57:37:
6b:92:b9:85:b6:e1:16:65:52:0a:48:90:50:13:cc:
de:a4:02:18:18:62:09:b9:ef:d1:2c:d6:ee:70:0b:
62:9e:b9:8a:6b:11:79:54:6f:2f:bc:3a:63:cf:4b:
40:c4:73:bb:2e:f6:a3:61:cf:35:12:cf:30:5b:8a:
1f:db:43:f8:83:f7:59:ba:57:b5:e8:75:bd:b2:73:
95:1b:91:49:4c:f7:d7:e8:3a:b1:6a:f0:f3:b5:25:
cd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8A:B3:2E:1D:BB:32:C6:22:25:79:42:22:40:56:8B:41:B4:18:D6
X509v3 Authority Key Identifier:
keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cc:86:48:ca:c8:b9:c5:b0:2d:df:d4:4e:be:33:01:b0:cb:
d0:92:36:15:bd:c2:b0:68:04:eb:a8:b3:d2:0a:96:96:8c:e8:
e2:90:87:2d:ec:d7:a2:fd:f7:0c:13:2d:6b:c4:3e:48:36:7a:
4e:01:8c:24:bf:25:05:fd:57:e0:09:20:b6:ed:70:6f:ca:34:
c7:dd:a6:1a:cd:0f:f5:60:11:5b:1b:a4:d4:b7:f2:3d:ad:58:
3c:c8:0e:69:9d:11:2c:63:c9:62:05:97:7a:2d:99:7c:c0:75:
92:11:78:40:28:63:09:6d:49:ce:af:ed:85:9c:31:a2:9d:33:
3b:59:e9:15:1b:42:e8:72:47:0d:15:02:cf:04:c6:10:b0:a0:
c4:bd:13:b1:3b:b8:bc:16:3a:df:ea:bc:7e:d7:09:db:24:b6:
5a:a2:84:27:e3:22:ec:7e:3d:9a:fa:d0:c0:b7:52:1d:1e:ec:
e1:5c:5a:85:98:8f:bb:fa:a6:cf:0e:d0:2a:b6:ed:42:74:f8:
cc:f7:0a:73:30:70:93:60:9a:21:88:10:d3:e9:64:cc:40:15:
3d:af:ad:51:2a:a4:d6:9d:4f:fa:c8:63:3c:70:1b:67:83:d8:
da:1a:70:21:ca:82:b7:f7:19:60:02:6b:c1:2e:14:14:dc:d1:
e6:54:b8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:54 2026 by rpki-client