Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: mmK2Ey8VAikcvMknlnMEe+HjQ4VnS4z00qVUMz8RiM0=
Subject key identifier: 05:BD:04:E6:15:8E:8D:21:2D:7E:5D:5C:45:8E:A9:DF:7B:FB:29:F5
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019F86E8EB6EE08ADB08A7CCD03120E2A33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 19C2
Signing time: Tue 21 Jul 2026 23:00:39 +0000
Manifest this update: Tue 21 Jul 2026 23:00:39 +0000
Manifest next update: Wed 22 Jul 2026 23:00:39 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: 9ONKrg4oZG/glE5B/j2Xn9in9gT/NE+p8OoUIpY++to=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:eb:6e:e0:8a:db:08:a7:cc:d0:31:20:e2:a3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jul 21 23:00:39 2026 GMT
Not After : Jul 22 23:00:39 2026 GMT
Subject: CN=05bd04e6158e8d212d7e5d5c458ea9df7bfb29f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:2c:07:b5:48:89:27:af:da:90:37:22:d5:
0e:8b:e5:59:d2:89:0d:e6:53:29:c3:17:31:9f:d0:
9b:75:b2:6b:32:db:81:4f:5c:4d:ca:a8:e3:ed:b2:
59:d5:ce:89:53:ed:8a:fc:77:db:c1:bd:7f:fb:7f:
67:d9:d6:d1:ca:6e:47:6f:c9:87:fb:92:de:88:7e:
c5:43:6d:89:ae:bb:7a:f7:57:07:83:31:8d:3a:cf:
31:9b:27:ee:7d:21:a3:62:50:f8:c7:95:6b:2a:9e:
80:c0:38:8d:00:e7:57:20:5e:f3:07:e4:a2:a4:1c:
97:f2:1e:7c:e5:79:43:70:3d:33:9b:db:de:03:c3:
13:2c:a8:2e:b4:05:3c:8b:e9:5e:c4:fb:50:05:1b:
90:43:08:6c:d2:53:63:09:fe:03:72:be:d2:28:87:
d6:1b:de:8d:5f:64:ea:7c:8f:c1:00:1e:d6:b3:b3:
fd:07:b6:77:4b:c4:e7:da:ad:43:c4:bf:90:bb:4f:
03:c1:61:fe:ae:28:8d:b8:14:a8:2e:2c:52:21:e6:
c6:3c:98:03:bb:7e:a3:b9:48:2f:8d:08:03:f8:10:
09:1c:bd:55:94:73:07:05:61:ee:29:a7:fb:3c:be:
86:25:52:da:91:10:a3:9d:51:44:a4:a8:4a:44:d7:
36:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BD:04:E6:15:8E:8D:21:2D:7E:5D:5C:45:8E:A9:DF:7B:FB:29:F5
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f1:2d:f3:1a:1b:10:ea:fe:9e:7d:28:d1:9f:2d:d0:bd:87:
20:ad:17:a1:43:4c:d9:5b:be:85:9b:de:f5:59:8c:54:f3:b2:
ab:3c:57:e0:ff:2f:db:cf:57:77:34:3d:cf:2a:7b:99:07:3c:
8e:1d:f3:c6:2f:23:34:05:5f:29:bb:08:b1:17:82:d0:e2:79:
ba:9e:79:48:4a:05:d6:06:4c:57:6b:c5:12:57:be:bf:25:ae:
03:85:73:6c:6f:83:54:b7:42:b2:64:71:79:6b:22:00:b6:82:
1f:78:df:5a:cd:42:50:cd:f1:84:f0:6f:5f:e6:74:33:1c:34:
ed:3b:7c:b1:9f:ab:71:31:17:4d:42:2c:a6:9b:b0:26:94:66:
9e:4e:d9:ae:66:eb:e0:59:92:65:b4:55:b4:a3:75:84:56:20:
78:bd:2a:00:d1:e6:91:b0:bc:ab:90:72:d3:0e:18:e1:c7:b6:
a3:73:80:4d:de:a9:8e:0a:c4:22:69:22:41:e1:fa:13:a7:13:
53:c9:5b:c9:d5:23:29:9e:15:ea:ca:dc:f3:de:fb:8f:bf:0a:
e3:d6:ee:a9:bd:44:e9:07:ad:f5:af:4a:4d:97:35:61:c5:70:
a1:41:5f:7f:14:ea:e9:5e:5a:9b:e2:00:16:90:84:a5:c2:40:
f2:6e:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:45:52 2026 by rpki-client