Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
File: 2SytEfEthtGJUcvXUe5RJPcYlR8.mft (raw, json)
Hash identifier: 7eEFXrEl51fSwwou9Ty4rS77lpfdLlIHx/YrXiiEBgw=
Subject key identifier: 29:41:A6:94:E0:E5:2B:32:6C:B3:53:57:5E:21:3F:47:AA:EA:15:B8
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 019FA906C973112010692C7214DA176AF1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
Manifest number: 1377
Signing time: Tue 28 Jul 2026 14:00:21 +0000
Manifest this update: Tue 28 Jul 2026 14:00:21 +0000
Manifest next update: Wed 29 Jul 2026 14:00:21 +0000
Files and hashes: 1: 2SytEfEthtGJUcvXUe5RJPcYlR8.crl (hash: HUdoUVkh8cyP4vu3FQCaC1zSGJXNVIKa7HQN/usZK9M=)
2: X2kxHzFf9SkgMnpmfkJZYLt9vk0.roa (hash: sNneS9lKJ0Lh8P/blujhVvydwSLEvO0xfwmrcUBYvIU=)
3: fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (hash: xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:c9:73:11:20:10:69:2c:72:14:da:17:6a:f1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jul 28 14:00:21 2026 GMT
Not After : Jul 29 14:00:21 2026 GMT
Subject: CN=2941a694e0e52b326cb353575e213f47aaea15b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:6f:90:d2:87:de:83:d6:48:48:20:26:6c:
48:7e:52:9e:16:1f:93:ea:59:0b:41:a9:fd:ea:4c:
54:89:6c:bc:da:15:7e:47:1c:1c:e6:b7:6c:46:6e:
6c:7a:82:d3:e0:33:61:b0:03:5d:1b:37:7d:c1:de:
66:87:89:4e:d5:16:ed:4e:30:19:c2:fd:91:15:15:
a5:1c:85:a7:7f:50:6f:9a:2b:7a:bc:1b:f5:83:8e:
2e:b7:c6:2d:33:05:4d:d5:2a:96:2f:0a:8b:c4:a0:
ee:38:ee:8c:26:0e:bc:19:f2:74:21:e7:41:9c:ac:
00:38:6f:30:ba:84:6e:85:bf:48:30:2d:41:b4:9b:
d5:e4:15:43:39:6f:85:2f:50:55:95:f7:14:e5:4f:
a7:8a:b9:ab:77:2e:84:8a:ef:fc:83:0f:bd:0e:14:
39:7a:42:10:4f:60:94:04:ae:3a:59:67:5b:a4:08:
88:c0:84:be:b1:8e:a5:aa:42:b2:ad:e8:cf:5d:fd:
ba:c5:69:29:65:33:6f:a0:ed:5b:8b:63:f0:fe:d2:
d1:43:d8:ee:78:75:da:6b:9a:80:76:54:f5:64:2f:
5d:d8:07:66:89:55:04:0d:15:40:6c:0e:c0:7c:0f:
f8:59:6f:b5:3a:8b:a7:ca:e6:b4:11:c4:1d:da:ac:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:A6:94:E0:E5:2B:32:6C:B3:53:57:5E:21:3F:47:AA:EA:15:B8
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:76:d5:94:f6:9d:8b:e9:97:92:69:ad:1c:b5:ae:e5:a1:ca:
90:e2:19:47:61:f3:5d:79:67:4e:cf:83:0d:4e:87:cb:81:85:
f5:24:5c:56:8e:19:71:92:83:cb:16:03:c5:54:5c:a6:19:64:
fc:57:70:0b:24:fa:a1:61:f5:0c:85:62:3b:92:a1:76:00:2f:
c2:c2:1e:5e:54:32:bb:bf:bb:98:28:af:5b:10:63:7f:9f:fd:
b4:b8:a0:59:2a:de:a6:53:e8:f2:d1:a5:cb:58:6b:14:e2:0d:
d6:5b:bd:68:10:de:2f:b7:8e:45:d1:eb:80:5a:02:99:74:bc:
c4:17:62:6c:c4:25:ac:aa:46:6f:b4:b3:53:c4:9a:48:c4:c6:
68:0e:69:66:20:bb:a6:5b:b0:e7:61:7a:ea:93:62:e9:fa:49:
76:84:d0:58:46:fe:ff:35:79:bf:12:42:e4:e2:94:11:f3:cb:
86:8f:0c:82:43:90:57:45:4b:34:12:c1:0f:85:83:f4:70:d2:
83:f4:9f:d1:58:84:59:02:c9:77:3a:35:d4:99:74:e1:84:63:
aa:54:c8:37:e5:34:c4:55:f2:22:33:d4:2e:43:23:da:81:37:
43:4a:c3:0d:a9:e0:77:cf:03:77:7a:a8:11:a4:f6:34:86:ff:
88:12:49:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBslzESAQaSxyFNoXavHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmNhZDExZjEyZDg2ZDE4OTUxY2JkNzUxZWU1MTI0Zjcx
ODk1MWYwHhcNMjYwNzI4MTQwMDIxWhcNMjYwNzI5MTQwMDIxWjAzMTEwLwYDVQQD
EygyOTQxYTY5NGUwZTUyYjMyNmNiMzUzNTc1ZTIxM2Y0N2FhZWExNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8BvkNKH3oPWSEggJmxIflKeFh+T
6lkLQan96kxUiWy82hV+Rxwc5rdsRm5seoLT4DNhsANdGzd9wd5mh4lO1RbtTjAZ
wv2RFRWlHIWnf1Bvmit6vBv1g44ut8YtMwVN1SqWLwqLxKDuOO6MJg68GfJ0IedB
nKwAOG8wuoRuhb9IMC1BtJvV5BVDOW+FL1BVlfcU5U+nirmrdy6Eiu/8gw+9DhQ5
ekIQT2CUBK46WWdbpAiIwIS+sY6lqkKyrejPXf26xWkpZTNvoO1bi2Pw/tLRQ9ju
eHXaa5qAdlT1ZC9d2AdmiVUEDRVAbA7AfA/4WW+1Oounyua0EcQd2qywfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClBppTg5SsybLNTV14hP0eq6hW4MB8GA1UdIwQY
MBaAFNksrRHxLYbRiVHL11HuUST3GJUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMt
MWIwM2ZkYmEwYTI0LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOWJkOTEtNWUxOC00MjEzLTgwNTMtMWIwM2ZkYmEwYTI0
LzEvMlN5dEVmRXRodEdKVWN2WFVlNVJKUGNZbFI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXbVlPad
i+mXkmmtHLWu5aHKkOIZR2HzXXlnTs+DDU6Hy4GF9SRcVo4ZcZKDyxYDxVRcphlk
/FdwCyT6oWH1DIViO5KhdgAvwsIeXlQyu7+7mCivWxBjf5/9tLigWSreplPo8tGl
y1hrFOIN1lu9aBDeL7eORdHrgFoCmXS8xBdibMQlrKpGb7SzU8SaSMTGaA5pZiC7
pluw52F66pNi6fpJdoTQWEb+/zV5vxJC5OKUEfPLho8MgkOQV0VLNBLBD4WD9HDS
g/Sf0ViEWQLJdzo11Jl04YRjqlTIN+U0xFXyIjPULkMj2oE3Q0rDDangd88Dd3qo
EaT2NIb/iBJJPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:19 2026 by rpki-client