Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.mft (raw, json)
Hash identifier: BdN+nbxJMJbOC3WPfdlGxSeuuktt3vcLzmp42BxFzZQ=
Subject key identifier: CE:66:99:E4:0B:58:3D:6C:CB:B8:81:C4:66:2F:2F:D0:42:9E:41:C2
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019F82D4E49343F7E31A94219CFADBB39B9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
Manifest number: 1154
Signing time: Tue 21 Jul 2026 04:00:17 +0000
Manifest this update: Tue 21 Jul 2026 04:00:17 +0000
Manifest next update: Wed 22 Jul 2026 04:00:17 +0000
Files and hashes: 1: 2iDN05uSq0ol30Boqq292O8hl4w.roa (hash: /yvDilMky3xNO6oMx1wmAxjj1Dh8TVWdR92wXw9xSFU=)
2: 2sMmMqqRVCU8bc0jMemtaSC2vcw.crl (hash: fLRDsavSgJEIPENQRjbLFbJbnFj5Yy7YaZV3H/rBdao=)
3: UpZ-DRH2FLqKcZot9WnKKGPDaxI.roa (hash: Z2/3lO45yvIZPeXxsjAynXOHDKVBDLOjLTwLnTbPDbU=)
4: YU-dNj0P1RSXNpgu-NfjfVOGIXI.roa (hash: 5xF+3ALjS9ETnu2nZD1BWStkHokbMoA1FcBVvhuzz4g=)
5: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (hash: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d4:e4:93:43:f7:e3:1a:94:21:9c:fa:db:b3:9b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jul 21 04:00:17 2026 GMT
Not After : Jul 22 04:00:17 2026 GMT
Subject: CN=ce6699e40b583d6ccbb881c4662f2fd0429e41c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:f9:05:98:b2:17:0b:67:d0:eb:2d:bd:1c:
d8:59:dc:3e:03:6c:62:28:6c:ad:c9:de:30:5d:7f:
de:74:92:7f:bb:b8:86:41:f7:8c:1b:9b:c2:69:20:
28:d9:f3:40:09:14:41:c7:c1:32:95:f1:bf:55:0a:
5b:02:43:30:5b:43:15:40:a7:19:85:44:8a:c5:a4:
98:5b:06:5e:f9:fe:77:50:c5:82:50:97:90:fa:6e:
7f:69:87:83:17:1b:ae:6e:a5:7e:ee:9f:ea:4c:aa:
ec:63:8a:5d:86:2c:42:ce:c2:19:55:cf:31:0e:2c:
f3:bc:bc:d0:3d:1e:1a:f9:7c:86:00:2a:59:9f:af:
f3:3d:33:ce:6a:53:a4:63:6a:dc:61:d5:14:3d:e4:
03:0e:cb:07:79:9d:55:30:63:6c:41:94:9b:af:9f:
c6:43:aa:1b:9b:cb:f2:24:37:cd:3b:81:e2:1c:21:
e9:67:5c:d0:7c:eb:6e:19:54:a7:fd:ef:58:f0:9e:
a5:3c:a9:84:bb:c6:b6:b6:4f:77:ce:e9:76:0d:f0:
5e:b9:80:c7:02:03:c6:fd:63:63:d2:69:47:42:10:
1a:a1:53:9b:6e:98:1a:60:e9:b5:28:b3:a3:0d:18:
ca:8b:06:04:a6:86:66:30:a9:6a:90:35:38:34:b6:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:99:E4:0B:58:3D:6C:CB:B8:81:C4:66:2F:2F:D0:42:9E:41:C2
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:a2:38:9d:94:54:b9:8b:b4:4f:9b:e6:fe:fc:5e:2f:57:fc:
d1:0c:5b:06:18:aa:3f:ac:dd:b3:83:75:d6:3c:f9:91:e6:b6:
cc:60:ea:fe:c2:e1:e2:15:b4:49:22:0f:c4:47:d2:b4:51:25:
80:76:ee:50:aa:48:69:71:72:ba:1e:15:fb:47:37:7f:db:07:
1e:5f:5a:c8:45:14:f1:a2:50:28:aa:41:b1:cf:27:a5:10:af:
7e:6a:ec:26:f5:14:5b:70:97:16:e6:e5:ce:e4:f1:78:f6:67:
87:df:e8:01:96:5c:1f:94:87:e6:ec:e8:4c:e2:56:a4:57:b6:
b6:6a:2c:aa:88:e4:3e:bb:62:e5:4c:88:67:1f:08:6f:3d:cb:
9a:b8:6b:b2:59:57:81:90:f7:fd:5f:b3:a3:a6:9f:76:3d:65:
7e:54:c5:d7:4e:d5:a7:81:7b:ac:69:c0:92:8a:c2:e8:00:c6:
ef:88:f8:3e:ad:33:b8:76:08:cc:a3:d4:32:21:f0:85:95:90:
e7:2e:22:57:42:bf:0d:a5:6b:f7:b6:9c:2c:30:86:16:81:82:
f5:f2:c8:90:96:bd:36:af:c3:6d:f4:b3:f7:7b:e6:c2:b1:82:
4e:bd:12:92:32:9d:5a:b9:d2:8c:04:73:23:01:0e:1b:e0:0b:
aa:3f:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:56:04 2026 by rpki-client