Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
File: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft (raw, json)
Hash identifier: t0lxZBrmFeVLjzSZKY7GubLhWzzrvL3X/Vpvm0dA9aM=
Subject key identifier: 9B:EE:E6:6B:5A:34:21:FA:23:68:93:67:C1:88:44:EF:44:0E:7A:02
Authority key identifier: D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
Certificate issuer: /CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Certificate serial: 019F86441AD3EFEFA76F1521724F35FF187A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
Manifest number: 01B0
Signing time: Tue 21 Jul 2026 20:00:37 +0000
Manifest this update: Tue 21 Jul 2026 20:00:37 +0000
Manifest next update: Wed 22 Jul 2026 20:00:37 +0000
Files and hashes: 1: 2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl (hash: Hs2LU1rY2juuxw4P74Poyq+Oyx3Onx11gscXkxkD7ZY=)
2: xiQvAVPOWmMsMsIO6z5gVHt7Q-Y.asa (hash: bYzR5NTvsD3Rkdru+CrJJqIOX0ZfMuE7+skUItcA04Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:1a:d3:ef:ef:a7:6f:15:21:72:4f:35:ff:18:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cfcaeaa703bd10093bb3a05e17d55e31072537
Validity
Not Before: Jul 21 20:00:37 2026 GMT
Not After : Jul 22 20:00:37 2026 GMT
Subject: CN=9beee66b5a3421fa23689367c18844ef440e7a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:cf:f7:91:d8:de:1e:b1:e3:5a:8b:dc:7d:
75:08:fa:fc:c3:5f:96:dd:8b:51:c7:45:b3:a0:e0:
4c:cc:49:2a:cd:e5:3f:f4:c6:5c:a3:f9:52:f3:3c:
4a:88:f1:15:c8:d4:95:0b:b1:d4:d9:00:91:04:26:
7f:d1:44:8a:dd:f2:0f:c5:95:04:bf:29:fd:39:ec:
dd:7c:04:7f:9b:de:33:1d:60:d1:a0:2d:04:33:2a:
ea:80:37:68:66:66:20:a7:40:d5:e5:83:4d:77:22:
50:e8:d9:fd:6e:a8:b5:97:ae:2d:40:53:81:62:31:
34:28:8f:2e:c8:4d:9a:a4:fb:90:cd:ec:79:c4:2e:
20:99:c1:f7:89:b0:bf:ca:6e:33:72:3f:5b:c2:e3:
fe:40:83:66:bd:45:a5:cf:82:65:d0:45:17:48:6c:
d8:90:6a:16:26:3c:d4:58:db:8e:4f:7e:f1:66:c2:
1d:e0:ee:70:be:72:78:41:e1:c3:af:96:be:fc:43:
c4:a9:9f:6f:79:45:c2:12:3f:bb:13:1e:60:5f:05:
da:0f:90:86:2c:63:b0:0b:9a:70:f5:26:48:0c:44:
2f:1e:18:f0:81:5e:9b:33:e1:d3:b1:22:dd:05:c2:
2b:d6:33:69:e4:54:7c:a7:f1:01:99:ed:5a:e1:79:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EE:E6:6B:5A:34:21:FA:23:68:93:67:C1:88:44:EF:44:0E:7A:02
X509v3 Authority Key Identifier:
keyid:D8:CF:CA:EA:A7:03:BD:10:09:3B:B3:A0:5E:17:D5:5E:31:07:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2M_K6qcDvRAJO7OgXhfVXjEHJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d3ae28-3993-4a7a-b292-881444c30afa/1/2M_K6qcDvRAJO7OgXhfVXjEHJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d4:0b:04:d7:7a:72:64:4d:e0:fd:96:17:04:3b:75:35:63:
7a:dd:d5:d1:4a:67:9b:5d:a3:22:57:bf:78:5b:c9:b3:2c:64:
d9:51:c7:14:29:7d:22:e9:b0:38:bc:52:0c:67:78:f3:98:05:
f8:63:9c:4a:d2:b5:2a:4a:d2:1d:27:d9:1f:fb:4c:5a:fd:57:
49:a5:ce:b0:cd:9a:7d:72:c6:ac:72:77:94:25:66:f4:37:50:
e2:08:49:26:df:f9:91:cb:79:b7:93:d5:72:2f:eb:64:50:d8:
db:97:e6:38:f7:f9:52:44:5d:49:48:c3:75:47:cb:b0:30:74:
2e:1b:f6:12:3f:dc:dd:e1:85:fd:d4:30:83:73:85:be:97:03:
3d:2e:71:3d:93:e5:0e:28:9d:8d:42:e2:dd:ac:e5:43:ec:f6:
82:b2:c5:9e:cb:70:ff:b0:db:67:f4:f0:ca:77:48:2d:16:61:
0d:b2:b6:21:4c:6e:f7:3a:f1:79:18:7d:d1:28:f4:4f:7e:fb:
f5:5e:70:7e:4f:fa:78:63:f2:d6:be:09:f3:be:07:d5:b9:75:
b0:e0:2a:03:10:cd:2e:3c:97:f4:0b:ab:1b:e1:51:3e:78:55:
61:71:1a:1f:69:60:20:43:0a:2f:08:47:58:f1:6f:b7:f7:c4:
7d:ce:0e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRBrT7++nbxUhck81/xh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Y2ZjYWVhYTcwM2JkMTAwOTNiYjNhMDVlMTdkNTVlMzEw
NzI1MzcwHhcNMjYwNzIxMjAwMDM3WhcNMjYwNzIyMjAwMDM3WjAzMTEwLwYDVQQD
Eyg5YmVlZTY2YjVhMzQyMWZhMjM2ODkzNjdjMTg4NDRlZjQ0MGU3YTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pDP95HY3h6x41qL3H11CPr8w1+W
3YtRx0WzoOBMzEkqzeU/9MZco/lS8zxKiPEVyNSVC7HU2QCRBCZ/0USK3fIPxZUE
vyn9OezdfAR/m94zHWDRoC0EMyrqgDdoZmYgp0DV5YNNdyJQ6Nn9bqi1l64tQFOB
YjE0KI8uyE2apPuQzex5xC4gmcH3ibC/ym4zcj9bwuP+QINmvUWlz4Jl0EUXSGzY
kGoWJjzUWNuOT37xZsId4O5wvnJ4QeHDr5a+/EPEqZ9veUXCEj+7Ex5gXwXaD5CG
LGOwC5pw9SZIDEQvHhjwgV6bM+HTsSLdBcIr1jNp5FR8p/EBme1a4XkpIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvu5mtaNCH6I2iTZ8GIRO9EDnoCMB8GA1UdIwQY
MBaAFNjPyuqnA70QCTuzoF4X1V4xByU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1fSzZxY0R2UkFKTzdPZ1hoZlZYakVISlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kM2FlMjgtMzk5My00YTdhLWIyOTIt
ODgxNDQ0YzMwYWZhLzEvMk1fSzZxY0R2UkFKTzdPZ1hoZlZYakVISlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kM2FlMjgtMzk5My00YTdhLWIyOTItODgxNDQ0YzMwYWZh
LzEvMk1fSzZxY0R2UkFKTzdPZ1hoZlZYakVISlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9QLBNd6
cmRN4P2WFwQ7dTVjet3V0Upnm12jIle/eFvJsyxk2VHHFCl9IumwOLxSDGd485gF
+GOcStK1KkrSHSfZH/tMWv1XSaXOsM2afXLGrHJ3lCVm9DdQ4ghJJt/5kct5t5PV
ci/rZFDY25fmOPf5UkRdSUjDdUfLsDB0Lhv2Ej/c3eGF/dQwg3OFvpcDPS5xPZPl
DiidjULi3azlQ+z2grLFnstw/7DbZ/TwyndILRZhDbK2IUxu9zrxeRh90Sj0T377
9V5wfk/6eGPy1r4J874H1bl1sOAqAxDNLjyX9AurG+FRPnhVYXEaH2lgIEMKLwhH
WPFvt/fEfc4O0g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:03:45 2026 by rpki-client