Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: 6Ub/uyVDaMf2zZ9wF2N+lqJ/gGQsvz5e61isaDbXJXs=
Subject key identifier: 6A:A8:A5:0B:77:24:65:45:04:89:1A:CB:1A:89:4D:A9:98:A4:06:01
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019FA9074A39020C575B2DFEF2A448DA9E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0B32
Signing time: Tue 28 Jul 2026 14:00:54 +0000
Manifest this update: Tue 28 Jul 2026 14:00:54 +0000
Manifest next update: Wed 29 Jul 2026 14:00:54 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: mcF9vFkEUw/EgmbRJwpvyUApZp+yWVZFVZGwjpjLH1E=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:4a:39:02:0c:57:5b:2d:fe:f2:a4:48:da:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jul 28 14:00:54 2026 GMT
Not After : Jul 29 14:00:54 2026 GMT
Subject: CN=6aa8a50b7724654504891acb1a894da998a40601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:9d:1c:ee:0e:68:eb:1a:1d:53:ce:88:b4:
6e:19:21:52:d3:87:28:25:12:6d:8d:c9:28:99:13:
3f:7e:93:69:b1:9c:b1:75:ba:35:af:50:07:10:0a:
94:41:e9:19:02:6e:13:a4:c6:75:77:b8:f5:ab:ad:
6c:2a:1f:8d:9d:58:98:33:4d:00:e8:ab:40:c2:6f:
11:9f:63:4f:bf:91:bc:72:d0:da:46:15:ac:86:b2:
90:50:c9:1e:40:cd:81:d8:4e:2c:a1:3b:6f:c1:21:
74:5d:48:9b:6e:26:a1:d6:24:5d:f2:c3:62:43:99:
7d:b7:12:51:15:8a:1b:5d:d9:ba:1d:4b:73:12:ad:
7c:5e:94:dc:b4:95:18:60:06:7c:e9:d9:10:11:70:
ec:af:81:94:73:8b:34:a7:ed:e0:a0:7f:28:8d:a1:
ce:fc:b2:ce:33:b5:b9:76:8c:6f:ef:59:a2:57:9d:
f6:87:1d:3c:41:90:f5:e5:70:67:ff:d2:8e:90:27:
34:d3:9f:b0:fc:2f:12:02:01:40:de:69:09:97:af:
6d:d8:10:42:2c:5a:5e:05:25:cd:61:f3:86:78:5b:
84:81:9b:9c:f4:33:da:0a:cc:92:52:6f:c6:bd:e0:
a5:3d:5d:40:77:6c:6c:6b:b3:9a:32:7f:77:70:c8:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:A5:0B:77:24:65:45:04:89:1A:CB:1A:89:4D:A9:98:A4:06:01
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a9:f5:4d:fd:01:14:33:54:be:2e:68:0d:15:fb:7d:01:4c:
3e:f2:c1:c9:1a:1a:99:52:76:d0:85:9e:e1:8d:d0:39:33:69:
b5:1a:c2:e9:ef:18:8b:db:bf:89:03:60:fc:93:0d:f7:21:49:
2d:4d:93:03:97:9d:8c:d0:3a:78:35:de:86:88:d3:55:01:ca:
4c:f6:d4:b8:0d:ce:ad:84:8d:81:69:d4:14:e0:c9:6a:e5:e3:
3f:27:f2:3c:48:f2:d7:dd:62:3d:c5:34:4c:12:49:4a:b2:1f:
01:b1:e6:38:97:29:8a:8d:d0:0e:2f:83:c9:47:79:e5:d8:fc:
8b:c4:a3:b9:91:97:53:16:07:09:f1:33:01:eb:5a:0f:66:76:
bf:3c:97:59:b3:9f:5d:cd:bf:85:bd:03:49:cd:0a:41:84:a9:
46:16:b3:e4:96:91:c9:60:03:ad:1e:00:20:8f:4d:66:67:ba:
89:a6:2a:df:57:04:f0:78:be:89:35:31:c4:4d:ed:6c:2f:56:
3e:df:bb:cd:25:dd:35:bd:5a:9b:e2:a4:86:f7:72:b0:7f:99:
7d:9b:63:96:b8:82:30:8f:97:e6:9a:d1:d8:15:c2:98:42:3d:
9c:40:bc:e4:d7:2c:06:ba:5c:31:ac:e4:a0:0c:a8:08:b2:2e:
3a:ba:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:32 2026 by rpki-client