Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
File: 2rdA9mZfmYP1QGHcoWUCYa1vITg.mft (raw, json)
Hash identifier: mTnBnq9vv2bvbhgSp3ivTG/2f804RnBUxCo27Bb3lSE=
Subject key identifier: 51:4A:9F:E6:9A:E7:ED:EC:B8:22:A0:C5:90:FF:C0:F9:C1:62:F6:BE
Authority key identifier: DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
Certificate issuer: /CN=dab740f6665f9983f54061dca1650261ad6f2138
Certificate serial: 019F17C29D87A4F3B2B94BCDFDDEDEAA055A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 09:00:57 +0000
Manifest this update: Tue 30 Jun 2026 09:00:57 +0000
Manifest next update: Wed 01 Jul 2026 09:00:57 +0000
Files and hashes: 1: 2rdA9mZfmYP1QGHcoWUCYa1vITg.crl (hash: NHN8VVXoqNdWT57r3dfdkY96YzLUpFFyS7VH0V0qkfs=)
2: IjS_Z548A1wrkDIKm6AdtHOccVA.roa (hash: JU+oT+c79S5oj+ahHVZBp2hptfq1X1r2tYhHwQ3xdZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:9d:87:a4:f3:b2:b9:4b:cd:fd:de:de:aa:05:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab740f6665f9983f54061dca1650261ad6f2138
Validity
Not Before: Jun 30 09:00:57 2026 GMT
Not After : Jul 1 09:00:57 2026 GMT
Subject: CN=514a9fe69ae7edecb822a0c590ffc0f9c162f6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:a7:6a:46:5e:a9:4b:bb:5f:fc:45:2b:33:
1d:4b:9c:48:73:08:39:a6:33:91:63:9b:d6:ef:9f:
ef:07:05:02:60:eb:16:17:58:31:fa:ac:7b:b8:b4:
8a:eb:3b:91:08:79:d7:69:ac:fb:14:5f:85:04:f8:
01:7b:51:c9:7e:96:c5:e0:a2:3a:f2:ee:23:0b:b5:
d0:29:81:74:ef:8b:9b:cf:ae:55:e0:60:3e:a3:78:
63:1b:f0:a6:7f:a2:63:a8:78:fe:b9:4d:86:ad:1e:
47:42:be:ce:14:1b:96:70:d6:c6:b2:b0:fb:6a:d6:
15:63:13:cc:02:db:3a:68:6a:7a:fe:f5:0a:03:f8:
12:a3:3d:47:c9:e5:df:63:23:84:64:8c:07:db:22:
e7:73:7b:72:75:65:f0:53:6c:e2:15:e6:7d:ca:2a:
b4:70:da:43:b6:3f:dd:66:e8:98:dd:aa:cd:a0:7c:
75:bb:b3:b7:73:b9:9a:2b:f7:f4:7e:0c:ec:b3:0e:
4e:f6:be:44:08:74:5f:28:2c:6e:66:5d:e5:ca:b6:
65:e7:9d:0f:e4:4a:27:17:53:35:ce:17:c4:6b:d1:
da:03:d9:3a:d0:a0:45:a6:a3:27:8d:3a:89:ab:e6:
b0:e7:6f:2f:9b:81:61:8e:47:7e:31:b3:9c:ea:1a:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4A:9F:E6:9A:E7:ED:EC:B8:22:A0:C5:90:FF:C0:F9:C1:62:F6:BE
X509v3 Authority Key Identifier:
keyid:DA:B7:40:F6:66:5F:99:83:F5:40:61:DC:A1:65:02:61:AD:6F:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rdA9mZfmYP1QGHcoWUCYa1vITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/135cf4-086f-4516-a3eb-1b7c92a61df6/1/2rdA9mZfmYP1QGHcoWUCYa1vITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:50:3d:0e:99:7a:97:3a:2d:ca:8d:d5:7e:4a:90:98:15:2a:
15:ba:d9:d4:74:fc:92:78:b6:cf:74:45:ce:fa:71:b2:94:55:
34:b1:de:4f:a5:82:02:a4:e5:27:94:12:47:2c:3d:7c:f8:27:
69:80:3e:2d:1a:9a:42:8c:25:8f:c2:77:8d:38:95:6a:16:3f:
05:b1:37:08:99:3a:87:b2:b2:89:50:15:92:35:4b:d6:c7:f5:
2f:2f:7d:e7:fa:78:57:a3:59:bb:f3:1d:ec:f2:d8:91:3d:d6:
a0:fa:ce:e2:8a:b6:9c:07:0b:ba:4f:53:0c:64:5c:33:92:74:
19:1b:8d:f1:8d:85:df:a2:50:26:dd:30:3a:8d:91:e4:49:cd:
47:df:ca:5f:24:70:b0:4e:7a:9d:f3:ef:70:ec:71:90:2a:1b:
e8:7a:b5:ae:2d:a3:93:79:83:43:93:48:b8:cc:8f:ee:f1:a5:
34:c5:97:d3:1d:2b:8d:69:9f:51:6b:3b:58:6e:46:00:95:47:
34:20:68:be:06:27:d1:2e:50:0d:ec:36:55:c6:af:8c:d8:d0:
73:2a:7b:45:a2:04:26:aa:7f:87:4e:7c:46:79:48:9a:c8:ba:
12:44:a8:5d:df:bf:91:e0:2c:8a:78:a3:df:61:28:b5:54:60:
a2:3b:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:59 2026 by rpki-client