Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
File: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft (raw, json)
Hash identifier: IpvACcLl8Xp6kFtlCJrujyT9EHEshVBlTpSyXJ9TVSw=
Subject key identifier: 2A:77:2B:C5:6A:80:8C:F3:78:CD:E0:D0:99:05:16:66:AD:AC:27:62
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Certificate issuer: /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial: 019FAA50D59E03C33DCEC19E173AB66DD1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
Manifest number: 12E4
Signing time: Tue 28 Jul 2026 20:00:52 +0000
Manifest this update: Tue 28 Jul 2026 20:00:52 +0000
Manifest next update: Wed 29 Jul 2026 20:00:52 +0000
Files and hashes: 1: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl (hash: NVXO1ecdTneViCsIzWPITV+pGOXwSY5I6Xql5pswjAY=)
2: AoMLPhZExe6a-acTOonY5G6p87o.roa (hash: GlOEB6CrWza06BRV4TlREAMAdwdF9KjOr3x10SdKDlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d5:9e:03:c3:3d:ce:c1:9e:17:3a:b6:6d:d1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Validity
Not Before: Jul 28 20:00:52 2026 GMT
Not After : Jul 29 20:00:52 2026 GMT
Subject: CN=2a772bc56a808cf378cde0d099051666adac2762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:4d:05:44:44:9e:57:0c:49:7c:46:92:d8:
fb:2b:2d:36:e5:ef:c9:be:4b:7c:ca:85:80:a4:ac:
19:79:f1:bc:66:70:64:3c:73:6c:1c:60:5b:33:29:
e8:c8:29:40:19:6c:a9:f5:db:82:ae:16:d0:f4:80:
9d:c6:b3:36:72:2c:a1:72:0f:49:24:cf:3c:54:c4:
e2:a0:b9:98:b9:b5:ce:31:2d:05:4a:61:bf:36:01:
83:97:18:d4:15:f4:f2:eb:b8:28:cc:74:f6:86:f7:
2e:1b:4a:e1:5a:2d:33:55:fb:43:fb:7f:1f:23:d5:
9d:cd:24:6a:63:6a:88:57:0b:19:3b:92:bc:63:12:
ac:13:f3:41:a6:9f:d2:c2:6a:05:f4:aa:7e:a6:a3:
60:b3:29:5f:c0:a1:af:d8:c6:cf:08:c2:04:57:1a:
73:ee:9a:17:63:6e:d3:98:21:43:cb:a1:cb:fd:4c:
70:c8:12:5f:a0:51:c3:dd:e8:6e:ef:21:aa:1e:6e:
65:fc:c2:3a:11:0f:66:d6:da:89:52:45:78:07:cc:
74:5f:64:5c:d1:ca:de:05:45:c7:a2:ae:98:87:a0:
45:45:15:d9:3a:b9:4e:c4:0c:6a:a0:ab:18:5e:5a:
e4:c4:02:31:a0:dd:6c:a6:12:18:d4:48:72:1e:b1:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:2B:C5:6A:80:8C:F3:78:CD:E0:D0:99:05:16:66:AD:AC:27:62
X509v3 Authority Key Identifier:
keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:5d:90:49:57:39:f3:46:e5:d0:01:e3:21:99:69:40:96:
06:e8:75:b4:b5:ce:a5:c9:0d:0d:d3:18:6f:9a:29:3d:f4:34:
f4:e6:83:31:36:e8:17:54:4a:2f:96:fe:fe:a7:c6:25:8a:59:
b4:3d:a8:9f:5b:a7:47:43:25:1e:fb:66:06:30:5f:27:d9:93:
63:f1:fc:73:8a:ef:d4:18:65:81:0b:79:92:28:4d:dd:02:e9:
6b:b1:53:67:22:a9:da:8c:34:ec:95:73:a9:6a:41:9a:04:ef:
80:d3:49:51:e0:79:2b:55:7f:b4:9c:d8:98:d2:18:63:70:cf:
39:48:02:15:2a:bc:de:0a:e9:81:fc:c3:93:00:b8:29:2b:75:
bc:05:fa:36:a3:6e:73:09:46:22:05:67:03:d5:69:a7:c9:72:
83:24:c8:d4:a9:7e:2b:10:35:3d:8d:40:e1:c8:f9:2f:09:5e:
3f:a7:30:e6:a7:ee:51:cc:a8:33:03:77:a8:71:8c:2c:26:4c:
3a:81:2a:2e:f2:3d:b6:58:04:a0:b3:74:1a:fb:6f:2e:4b:c5:
ee:42:c1:90:4d:77:43:65:94:5a:41:b0:59:49:90:1c:0d:bb:
92:2a:b0:5c:6b:2f:4d:9b:99:a4:4d:4f:e8:1e:9f:de:23:28:
40:d1:92:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUNWeA8M9zsGeFzq2bdGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTBkMDRiZjU3ZmE0ODY4ZTY5OTk3YzgzYjNhZDc3MWZk
NTBhOWQwHhcNMjYwNzI4MjAwMDUyWhcNMjYwNzI5MjAwMDUyWjAzMTEwLwYDVQQD
EygyYTc3MmJjNTZhODA4Y2YzNzhjZGUwZDA5OTA1MTY2NmFkYWMyNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjlNBUREnlcMSXxGktj7Ky025e/J
vkt8yoWApKwZefG8ZnBkPHNsHGBbMynoyClAGWyp9duCrhbQ9ICdxrM2ciyhcg9J
JM88VMTioLmYubXOMS0FSmG/NgGDlxjUFfTy67gozHT2hvcuG0rhWi0zVftD+38f
I9WdzSRqY2qIVwsZO5K8YxKsE/NBpp/SwmoF9Kp+pqNgsylfwKGv2MbPCMIEVxpz
7poXY27TmCFDy6HL/UxwyBJfoFHD3ehu7yGqHm5l/MI6EQ9m1tqJUkV4B8x0X2Rc
0creBUXHoq6Yh6BFRRXZOrlOxAxqoKsYXlrkxAIxoN1sphIY1EhyHrEj8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCp3K8VqgIzzeM3g0JkFFmatrCdiMB8GA1UdIwQY
MBaAFNqQ0Ev1f6SGjmmZfIOzrXcf1QqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgt
NTFhZDljMzgyYThkLzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgtNTFhZDljMzgyYThk
LzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRJdkElX
OfNG5dAB4yGZaUCWBuh1tLXOpckNDdMYb5opPfQ09OaDMTboF1RKL5b+/qfGJYpZ
tD2on1unR0MlHvtmBjBfJ9mTY/H8c4rv1BhlgQt5kihN3QLpa7FTZyKp2ow07JVz
qWpBmgTvgNNJUeB5K1V/tJzYmNIYY3DPOUgCFSq83grpgfzDkwC4KSt1vAX6NqNu
cwlGIgVnA9Vpp8lygyTI1Kl+KxA1PY1A4cj5LwleP6cw5qfuUcyoMwN3qHGMLCZM
OoEqLvI9tlgEoLN0GvtvLkvF7kLBkE13Q2WUWkGwWUmQHA27kiqwXGsvTZuZpE1P
6B6f3iMoQNGSuw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:25 2026 by rpki-client