Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: 7nls9F3xEL3YHWfbovE6CM/pxRqIIT8l2Yhr3bjvyDA=
Subject key identifier: 20:18:AF:76:60:A3:0A:92:6D:1E:62:71:9C:8B:CC:28:04:2F:4E:B6
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019FAB2CC80E12FCFE6E1F37ABAA4AF8396B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 0441
Signing time: Wed 29 Jul 2026 00:01:06 +0000
Manifest this update: Wed 29 Jul 2026 00:01:06 +0000
Manifest next update: Thu 30 Jul 2026 00:01:06 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: W1Jq4yHeTp9+m7bJF6vDm4882ANOdjZL9EaCkCCjMLo=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c8:0e:12:fc:fe:6e:1f:37:ab:aa:4a:f8:39:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Jul 29 00:01:06 2026 GMT
Not After : Jul 30 00:01:06 2026 GMT
Subject: CN=2018af7660a30a926d1e62719c8bcc28042f4eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:f0:da:99:fd:12:3a:d7:8b:8a:ce:82:3d:
8b:6c:73:7d:75:19:7b:33:43:a7:05:d5:e9:10:ad:
5c:00:46:d2:0c:38:09:4b:e3:28:ea:e6:69:a3:e1:
bc:4f:c3:cc:4f:f6:11:21:f0:fd:38:53:1a:4c:4e:
32:02:ad:bd:f1:8e:a9:80:02:19:14:05:cc:b9:1d:
e2:68:91:77:c9:e9:55:9b:4e:a9:d7:39:d6:69:d0:
45:d6:82:87:49:03:15:8a:53:ca:45:e9:95:ed:b8:
01:74:64:1e:97:bc:99:2a:4b:5e:58:2e:4d:79:af:
ce:7b:ce:fd:3d:60:99:a7:f2:14:88:ac:fb:27:68:
48:0a:2f:f9:12:56:19:52:c5:77:a3:4c:bd:62:c7:
2f:ab:3a:1e:a3:2d:93:6b:db:10:78:bb:97:fb:f1:
7f:18:74:94:16:d2:4f:2d:60:98:cc:9d:23:35:e0:
45:17:9c:68:fa:12:45:74:4a:f1:b3:63:2b:1e:3b:
54:17:2e:c0:53:2c:38:ab:61:44:3d:7a:9a:d8:9f:
88:b8:5b:16:91:5b:31:56:b4:de:eb:e3:58:52:5a:
56:6e:a1:f9:f5:54:50:2e:7e:45:78:8c:25:28:64:
23:c9:38:c8:db:46:80:dd:83:39:8c:5f:3c:ac:ae:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:AF:76:60:A3:0A:92:6D:1E:62:71:9C:8B:CC:28:04:2F:4E:B6
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:22:71:f4:16:ed:3e:31:68:1c:e6:1f:d3:8c:fb:37:06:
83:8c:b7:d4:68:44:45:3e:c4:69:90:f4:55:79:92:f9:77:0a:
a3:8f:d4:e2:6d:40:a3:0f:a3:9f:79:59:8b:db:79:da:e8:20:
0b:c2:84:96:3f:c2:0b:8c:d6:a6:97:42:f8:16:dc:40:cb:00:
3f:cf:7f:8f:26:3f:01:2e:88:b5:66:82:73:ee:01:e1:18:a3:
d3:bf:95:47:16:e9:6b:4f:f9:ea:4d:86:fc:76:5b:c2:16:ca:
98:82:d1:7c:ae:db:13:c6:cd:31:cf:60:2c:57:42:df:94:45:
36:90:b9:52:ce:f8:b6:56:78:88:05:c2:55:98:d8:6f:ed:86:
75:1f:32:a7:bf:60:c4:e7:b3:cf:3d:9d:d5:1c:2c:70:2a:12:
85:53:25:1f:96:6f:61:63:8e:2e:ab:03:5d:9f:41:9f:0a:be:
a4:e3:b3:7e:fa:7e:cd:f4:ee:1a:c4:0d:e1:5d:0e:bf:5d:d8:
a4:bc:47:ca:c3:f5:9c:37:67:6f:7d:e4:52:b7:89:d6:10:be:
d1:ea:e3:45:5b:7a:b3:32:a0:4d:1b:05:b2:23:f0:ed:b7:98:
da:a9:4a:e2:c7:4c:79:09:bf:b4:0b:2d:e6:59:73:fa:85:cb:
cf:84:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:06 2026 by rpki-client