Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File: 2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier: GXJY/W7eHtissRnJAGlQXdSZ7a29Szxf272OZIE5gKo=
Subject key identifier: 6F:24:CB:A0:B5:D6:F0:4D:C9:FD:89:9B:E9:ED:25:D9:01:39:48:B2
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer: /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial: 019FA93E2E2F9C6110230729D6BA1F341B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number: 0440
Signing time: Tue 28 Jul 2026 15:00:52 +0000
Manifest this update: Tue 28 Jul 2026 15:00:52 +0000
Manifest next update: Wed 29 Jul 2026 15:00:52 +0000
Files and hashes: 1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: Qy+iJbjbCnq5MbhVF6vdz52uxCil5kiEVJcP/KzPQsw=)
2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:2e:2f:9c:61:10:23:07:29:d6:ba:1f:34:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Validity
Not Before: Jul 28 15:00:52 2026 GMT
Not After : Jul 29 15:00:52 2026 GMT
Subject: CN=6f24cba0b5d6f04dc9fd899be9ed25d9013948b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:13:08:8b:66:2f:92:43:e9:f3:ce:3b:ba:e3:
ab:7e:b9:5f:d1:71:44:43:06:10:63:9e:78:da:c9:
c0:49:9e:ea:e9:72:71:2e:a4:0a:f9:39:74:6b:2a:
08:fe:d3:f1:9f:7d:46:18:fc:2d:43:85:cf:98:6c:
9c:6d:1f:17:22:99:4a:ab:d3:88:4a:3a:6f:1d:1e:
06:bc:45:44:4d:a4:e2:53:8e:af:97:85:8e:a5:e0:
d7:53:29:d1:99:6a:7a:3a:35:1c:a1:e1:8f:e7:69:
25:31:b6:c5:fa:15:b4:75:f6:e9:ac:e0:f2:e5:61:
6e:4a:2a:59:65:1d:3c:de:d1:dd:9f:c3:50:c0:a2:
a5:06:3c:2b:d1:86:3c:0a:2c:3d:87:a7:5b:72:cc:
99:49:35:8a:42:52:00:68:d9:98:fd:95:84:b3:dd:
17:d9:32:c6:6d:52:8c:32:01:38:74:c7:c3:29:f6:
f8:f9:b8:cb:82:3b:e0:3b:bf:f1:98:88:36:1e:36:
f5:37:cb:a1:35:b1:cf:06:43:e4:92:ae:20:31:5d:
60:7a:b9:33:ab:f4:75:32:7f:86:d0:fd:45:9a:78:
bf:65:38:a8:68:a9:67:05:bc:5f:c4:ee:0e:f6:5a:
7c:4f:4d:22:e8:74:59:90:7d:d3:7a:f1:2a:fc:2f:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:CB:A0:B5:D6:F0:4D:C9:FD:89:9B:E9:ED:25:D9:01:39:48:B2
X509v3 Authority Key Identifier:
keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ba:30:87:2a:1a:1b:3d:b3:5f:37:80:b9:04:f1:6c:25:62:
23:78:bd:24:a0:39:fa:db:06:f4:d6:17:72:33:50:80:f9:75:
b1:37:ae:18:2d:7e:57:ac:e7:36:28:3d:7f:c8:45:db:40:5f:
b9:41:87:f2:0a:60:c1:0c:27:bf:a2:de:a2:18:0b:5c:61:48:
13:dd:3f:7f:58:f7:b9:83:3f:f9:d8:83:03:68:19:af:10:c3:
22:9d:d3:a0:46:68:fd:ef:08:e0:30:1e:d7:1f:a8:20:f6:8a:
ce:62:78:dd:fb:31:e5:5e:81:f6:e9:99:fe:c3:ff:31:39:1a:
59:2d:2f:a6:a0:fb:6c:13:59:fe:09:25:3d:29:35:9d:a9:0c:
ce:87:45:97:9e:2b:af:a2:b3:e9:57:f1:da:cd:a8:1b:af:3f:
f2:46:33:1d:b2:0a:dc:95:9a:e3:f0:e2:26:5f:a7:9d:c7:42:
5a:90:90:16:c0:6e:13:ce:e5:0b:21:3d:87:23:be:3b:13:aa:
85:49:6c:a4:9c:8a:a7:df:82:89:6f:a5:8b:45:88:e5:0a:86:
40:38:c5:c9:ea:06:10:cc:ae:67:ec:f9:1d:36:f9:b2:ca:e0:
2b:ee:dc:28:80:08:76:be:8c:d3:5c:26:ce:d2:a9:8e:bc:75:
ad:00:d1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:29 2026 by rpki-client