
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: 1PORNea2L0bWS7/Ww+6QdSVEd06YYu2XHmIBpYu+nyw=
Subject key identifier: 93:C6:79:5A:47:32:F2:CD:D2:8E:48:80:62:A6:67:44:D2:F8:68:60
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019FA82B3BD45F2103FC30902E75088E9F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 10:00:33 +0000
Manifest this update: Tue 28 Jul 2026 10:00:33 +0000
Manifest next update: Wed 29 Jul 2026 10:00:33 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: CDX1YSQAApKMXHIkiisa9bDKVB7cSXmLogX0zhjPQ+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:3b:d4:5f:21:03:fc:30:90:2e:75:08:8e:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Jul 28 10:00:33 2026 GMT
Not After : Jul 29 10:00:33 2026 GMT
Subject: CN=93c6795a4732f2cdd28e488062a66744d2f86860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:22:85:ff:e4:2d:63:c4:35:4c:2d:1c:92:
e2:89:2b:e3:d4:05:2f:40:13:97:92:c5:80:7c:13:
83:13:4e:6c:02:0a:2c:b5:68:79:dd:e9:f2:1f:b6:
ca:b5:03:ab:6a:1d:17:39:6e:47:79:d6:41:15:ab:
d7:22:e8:e1:06:17:af:c6:7f:15:67:85:3d:63:3b:
8c:f5:6f:a0:a2:f7:e1:10:c0:f4:b8:96:3a:01:81:
c0:83:51:03:a8:7c:27:87:da:f7:65:8e:5c:18:26:
9e:1a:34:c3:0c:2e:be:18:84:c1:2d:b2:d8:2d:a1:
3d:6c:76:ab:39:44:dc:6a:89:7b:25:8d:1a:88:f1:
7e:36:41:4d:2e:1a:7f:cd:fe:02:32:0c:ec:26:50:
a4:12:8f:43:43:54:ca:ab:c6:65:3f:01:2e:f4:c6:
f4:db:ee:7a:dc:5d:90:c3:9f:ce:ab:20:e0:d5:84:
6e:64:cd:b4:75:4c:fa:95:96:5b:03:1a:f0:df:09:
50:da:9f:04:13:a9:94:6f:a4:cc:5e:0f:9c:57:42:
9e:19:b2:78:29:8e:8c:a9:48:c8:49:d3:e3:cf:8f:
cf:98:23:b6:38:b1:d1:ab:b3:be:7a:ed:9a:ac:20:
d0:c6:05:26:50:32:45:14:7c:c6:0d:43:10:e7:e2:
c9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:79:5A:47:32:F2:CD:D2:8E:48:80:62:A6:67:44:D2:F8:68:60
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b1:2a:73:14:e4:9f:49:29:b0:b6:81:f4:24:20:4c:60:6a:
f6:63:0d:28:cd:a9:f2:49:f0:ab:9d:b7:f5:47:52:06:69:03:
fe:03:4c:f8:da:87:4f:58:63:5e:70:e1:7a:da:5f:71:aa:9a:
62:29:19:a3:e1:f1:9b:38:19:d8:b3:a0:8c:5a:92:9a:cb:96:
bb:cd:ad:a4:fb:21:cb:32:60:59:48:9f:c7:7a:c4:9a:12:4d:
20:6c:7b:52:a9:37:77:f4:59:ff:dd:1f:d2:07:1a:f7:7f:c9:
2c:67:6a:eb:a6:10:e3:71:5b:15:c0:16:2b:2d:d4:6f:7f:1d:
c4:a8:54:66:3e:ac:bc:27:c8:3e:e5:96:38:ea:91:03:5d:0e:
4b:99:65:66:c0:b5:f9:25:22:4f:b8:b9:4e:de:45:52:ee:7b:
8c:72:a4:d8:a1:4b:28:dd:8a:e2:d8:46:b8:45:c8:ed:ed:b2:
8b:06:26:91:70:09:e6:34:5c:f4:38:22:ba:a1:df:bd:a3:96:
71:d3:45:cd:8a:68:5c:d7:ee:ab:41:fa:27:69:3b:b2:6e:88:
8f:3b:83:70:46:6f:47:9b:ef:0f:c6:70:f8:29:06:21:48:98:
89:9c:53:eb:94:73:24:14:e2:47:52:cc:fe:f0:e3:d0:28:38:
11:fa:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:41 2026 by rpki-client