Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: 2zwTPe1vfFk9QYxeJreaW/uvOWvkfdtjA00m0PCyhA4=
Subject key identifier: 5B:FD:86:78:E6:80:50:CF:FF:B2:03:BE:25:B9:5E:70:C9:3D:4F:0B
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019FA974B95AD327050F344377DD3AA09DB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 1168
Signing time: Tue 28 Jul 2026 16:00:26 +0000
Manifest this update: Tue 28 Jul 2026 16:00:26 +0000
Manifest next update: Wed 29 Jul 2026 16:00:26 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: n0A+ilHMDAl/BviP1eHQGZuoLIwGxk+ToUWnlCKPEKg=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b9:5a:d3:27:05:0f:34:43:77:dd:3a:a0:9d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jul 28 16:00:26 2026 GMT
Not After : Jul 29 16:00:26 2026 GMT
Subject: CN=5bfd8678e68050cfffb203be25b95e70c93d4f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:b1:12:6b:29:00:fc:ac:b7:2a:09:71:5d:
4d:69:fe:ad:24:e4:46:a2:5f:65:39:fe:08:19:68:
1a:b4:1e:5c:80:91:91:df:a3:cd:34:f9:64:b0:53:
16:89:fa:ec:91:cd:ec:52:aa:39:db:ca:28:54:ea:
3d:f3:8b:64:31:46:83:11:b5:4b:cc:fc:aa:bb:f0:
fe:9b:ae:f5:8d:75:39:63:6e:b2:79:bc:8f:75:2e:
8d:2e:83:8a:82:fb:f9:0f:6a:33:5b:27:4f:50:4e:
d7:87:bb:3b:ae:dc:53:96:dd:c8:ca:6e:06:56:4c:
8a:e5:9c:24:77:37:56:13:d6:3c:28:27:53:96:a4:
b3:c8:a5:2b:b0:68:cb:b9:b4:65:1f:6b:8a:c2:93:
b8:56:f9:b1:36:71:fa:d6:28:25:5c:43:4d:ae:56:
25:b8:2c:01:6e:84:fd:df:f4:c3:02:bb:56:55:ce:
b0:5e:1a:b0:e9:62:52:6b:6e:aa:c9:d5:6a:ae:af:
9e:62:5d:2a:22:c7:fe:a6:1a:2a:05:ed:35:0c:49:
83:b4:3b:54:c5:63:fc:d0:01:10:7a:9f:a2:e6:e7:
9f:59:b7:84:f7:db:8e:9a:4a:7f:7c:62:e3:c5:17:
5d:14:ce:a4:9b:57:35:d3:0d:0d:1d:58:36:72:06:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:86:78:E6:80:50:CF:FF:B2:03:BE:25:B9:5E:70:C9:3D:4F:0B
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e6:e6:43:85:0f:b1:1f:5f:fb:01:c8:67:4d:eb:63:b2:8d:
15:db:85:48:11:67:64:60:bb:e5:00:88:3f:67:1e:a5:8f:c6:
86:e7:f1:2e:43:b3:55:da:6e:0c:2c:6a:4f:78:88:0f:87:a9:
73:0b:8f:d3:3d:4a:a8:4d:8d:6d:e3:ed:81:f2:4e:83:ca:ec:
24:c6:30:3c:97:55:fb:4a:b9:d8:52:7f:da:b9:53:ea:e3:75:
ef:53:c0:4e:dd:a8:4a:92:e3:3e:a3:9d:f5:5f:83:df:b3:9f:
56:49:ee:96:e1:73:1c:c6:15:c5:69:e4:85:08:12:ed:b4:ee:
6a:54:25:41:8d:9a:63:5e:34:f6:b3:67:f0:78:7a:11:98:24:
7e:58:eb:39:f5:fb:cd:63:a5:ce:5a:16:9c:9e:5f:eb:fe:28:
a8:4c:3b:20:56:ca:89:af:8c:9b:b4:93:e7:1d:24:ed:1b:3d:
cb:7e:8c:ed:fb:61:88:d5:21:7c:14:da:0c:57:72:fb:36:e5:
6a:37:0d:62:be:cf:d1:2e:a9:3a:13:6a:08:8f:b6:c7:7d:ad:
6e:7b:0c:29:1b:99:8d:f9:8e:0f:89:55:bf:32:d2:d1:96:4e:
d8:87:58:c9:3e:da:7b:e9:88:1d:f2:2e:88:51:7c:83:3e:6f:
d9:f5:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:37 2026 by rpki-client