Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
File: 2x1uukY7dWSr-uk4tG7UcYfeDsA.mft (raw, json)
Hash identifier: sBIDdjLH1g3fZCSrLGALIcrf+u9uJghrjW63HS8lNjc=
Subject key identifier: 5E:A6:B7:AD:19:C6:F8:D3:FB:98:5F:FB:15:3F:04:2F:7F:83:8F:D1
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 019FA974B4AA28F1D3CEE85CA11BCCF4C5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
Manifest number: 0D03
Signing time: Tue 28 Jul 2026 16:00:25 +0000
Manifest this update: Tue 28 Jul 2026 16:00:25 +0000
Manifest next update: Wed 29 Jul 2026 16:00:25 +0000
Files and hashes: 1: 2x1uukY7dWSr-uk4tG7UcYfeDsA.crl (hash: NcppzeN0txw6vOL/GLPTwRtXWDCT795oQBVd7+J+tKI=)
2: 3oec_TyMXwngpMvuUxwQnKRoElI.roa (hash: TFcbDBit8LDG31OcoB8NyufVnMw0bC4YlIBYjbX5HV4=)
3: RkmzIDwv2MgHZyKYScrBn60mQH8.roa (hash: w8dH9EMpt6cAmLFLrxm/+tA+56apr6HKvXBTw5qDHJ0=)
4: hEnie4lAKWMfLCKJsCCZKZxiu1g.roa (hash: LVdc2gIDM4zgTqHBAYOGjuQI7H2q3tdcKwkXIssuGwo=)
5: nmUEueZ47VwZ2p45WO9IB9LwnHc.roa (hash: 7G7DGRCra0g7DJS2A+f3DeEW4sjpq81WtiS6g/X3UCM=)
6: sFonxK-Y58VpBEBeRzqHkdF8ojA.roa (hash: 3844hgTnl1FX+Rx774ovA6z2yPS2q62u+c8Vt6GI/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b4:aa:28:f1:d3:ce:e8:5c:a1:1b:cc:f4:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Jul 28 16:00:25 2026 GMT
Not After : Jul 29 16:00:25 2026 GMT
Subject: CN=5ea6b7ad19c6f8d3fb985ffb153f042f7f838fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:74:a9:4b:40:92:8f:f3:55:dc:32:0d:d7:1f:
87:07:1c:6b:a0:a1:49:68:3c:f8:84:87:2e:1e:5e:
73:7c:24:78:b0:57:94:ba:11:9d:51:f1:b0:f0:c1:
f7:8a:1b:2b:1e:66:c7:2b:64:10:27:cd:78:85:20:
73:ea:5a:78:92:c1:db:2f:0b:06:97:40:7a:3a:56:
c6:41:ab:69:be:28:51:74:bd:28:31:fd:11:98:5c:
dd:7b:86:28:56:76:17:89:3a:d5:36:84:e6:08:9d:
08:ab:cd:4c:56:22:c5:e9:04:56:1b:85:1f:95:74:
21:e9:2f:d3:0c:22:c7:73:f7:e7:3d:2e:38:19:36:
18:22:98:d2:01:d9:ca:5f:f4:fd:28:d2:cb:36:b0:
6e:1b:d4:ce:58:ce:cd:42:5e:0c:05:76:dd:19:82:
3a:1e:59:f2:8e:ee:03:7c:8a:da:7e:0c:ca:d3:43:
ae:9c:06:a5:c6:29:8f:ba:f0:d6:14:7f:fc:59:6e:
81:03:05:0b:6e:df:71:69:c1:1c:6c:74:f6:37:0b:
af:e3:a5:9b:6c:94:2e:c0:5d:d5:8a:de:64:5f:ce:
db:b9:58:f5:dd:eb:6b:fe:88:a3:7e:55:3c:9f:fa:
00:a1:a6:b7:05:3e:a5:85:7d:56:35:ea:0f:2f:e0:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A6:B7:AD:19:C6:F8:D3:FB:98:5F:FB:15:3F:04:2F:7F:83:8F:D1
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cb:5b:2c:71:43:bd:2c:49:24:41:87:3c:59:80:df:29:8c:
63:e6:59:86:dd:a6:10:bc:39:0a:37:5a:8f:15:e3:0c:e2:ef:
55:56:e0:5e:7a:4d:2b:7e:ee:30:14:53:3d:91:87:9e:d7:37:
a4:91:ce:81:3a:59:c9:56:0e:1b:9e:1a:74:4f:1d:76:51:af:
97:f0:0d:d1:d9:83:20:2c:ae:0c:32:62:18:34:b7:df:49:dc:
10:1c:a5:2e:a0:58:fb:ac:b9:29:53:93:7f:12:f7:2c:78:7c:
b9:fc:c4:e3:3e:f8:a4:0e:5d:29:42:e3:dd:18:2d:18:b4:88:
13:36:45:e4:7e:77:9b:7f:51:4e:7d:83:7e:e5:95:02:f4:69:
31:f7:3a:1f:36:1f:8d:72:77:1e:e4:a7:2f:03:7d:68:8a:43:
b2:0c:cb:f0:e5:26:55:c9:2c:45:f2:b1:15:c5:53:19:64:46:
53:48:6c:14:5e:d0:f0:ea:0a:90:13:3d:60:b9:f8:d2:79:1d:
8f:fa:da:a6:1f:63:ba:a0:53:72:78:fe:75:02:78:c3:7a:7c:
31:cd:07:f0:6a:4f:99:f1:d3:00:9d:2f:fe:12:d0:f0:0e:19:
0c:f6:17:c4:c3:2f:cf:58:35:57:5d:af:05:c4:b3:42:e1:02:
08:83:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:52 2026 by rpki-client