Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: 0KK4n8g8dz0JFMCqgyYBJuIfyb0zGqOR2/VZ7cEi3hg=
Subject key identifier: 92:51:73:15:F1:67:B7:03:62:C9:CA:5B:B1:FB:09:4B:58:F4:4A:F5
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019F19440EC6D5FE66782935EF9A495896DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 1915
Signing time: Tue 30 Jun 2026 16:01:58 +0000
Manifest this update: Tue 30 Jun 2026 16:01:58 +0000
Manifest next update: Wed 01 Jul 2026 16:01:58 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: HnasbczHP3pygaYxk5Hiiz2lcS77l+li0b3tTDTY0Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:0e:c6:d5:fe:66:78:29:35:ef:9a:49:58:96:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Jun 30 16:01:58 2026 GMT
Not After : Jul 1 16:01:58 2026 GMT
Subject: CN=92517315f167b70362c9ca5bb1fb094b58f44af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:72:80:7c:c5:bf:56:9f:d1:2b:38:cd:bf:
e1:dd:9a:f8:84:49:88:53:cd:a2:3b:ac:99:b7:0b:
87:4f:ba:5b:a8:58:ae:f1:d2:5d:9f:4a:59:77:3f:
2f:53:69:26:8c:c5:52:86:55:83:75:1d:d7:fc:74:
9d:44:c7:2c:81:bd:c5:9a:02:0d:ef:f7:a8:8b:8b:
22:81:9e:d9:41:bf:70:e6:26:67:a9:5d:08:35:cc:
08:c6:a6:d2:e2:67:5f:1a:1c:b1:a3:bd:66:fa:17:
3f:a4:72:19:89:cd:d6:d5:c3:3c:bf:80:8d:26:ff:
1c:3a:4e:9e:80:40:cb:7a:e5:fc:c7:b4:15:18:dd:
dc:4e:73:36:bb:89:2e:1f:db:04:d1:43:82:29:09:
59:14:d4:2c:16:53:02:12:72:15:91:ec:d3:b6:78:
37:fd:89:8e:7d:22:11:9c:7b:13:16:bc:9a:99:e5:
dc:a5:ff:34:35:64:46:fd:b7:4f:81:e9:73:bd:44:
33:40:47:e5:21:ba:24:c2:78:83:bd:a7:49:d4:cb:
cf:cd:6f:77:87:09:f9:cc:24:82:f6:16:8f:a1:d2:
9b:5f:cb:04:35:ef:1d:f3:e3:79:f7:c1:56:5f:90:
58:21:9f:b4:4c:e2:10:43:62:35:2e:de:ac:b9:d9:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:51:73:15:F1:67:B7:03:62:C9:CA:5B:B1:FB:09:4B:58:F4:4A:F5
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ad:b0:65:2a:a6:6c:4e:48:71:cc:7e:4c:ee:fd:a0:e2:b9:
36:69:96:b3:c1:ce:b5:57:14:c9:2e:13:d1:1f:e8:0c:3c:d3:
9b:dd:2d:69:3c:26:8c:8e:99:01:77:49:18:63:1f:de:41:06:
32:69:f1:0e:3e:9b:93:d3:34:5f:88:ba:c9:ba:56:39:bf:20:
77:91:71:a8:83:5a:c7:f6:9f:47:c0:24:34:37:ae:ba:3b:76:
88:ee:5b:92:54:bb:38:1a:39:9f:a8:55:2e:cb:ee:8d:08:8c:
9b:05:7a:20:51:41:e5:60:a1:b6:d4:6c:51:2f:23:48:aa:e0:
0b:47:4f:12:1c:12:65:67:d7:9b:60:39:44:b1:8b:0c:ce:32:
10:1e:af:71:0f:3b:40:30:e3:8e:37:b2:44:41:48:69:92:f3:
d8:d8:34:ca:24:91:7e:74:ed:a2:d9:fb:4a:4e:00:b3:b9:fc:
ac:6a:04:75:48:d0:56:4f:de:df:a8:66:5c:53:a1:d4:83:9f:
0f:03:87:c5:a7:e4:58:5c:96:cd:8d:f2:7f:b8:29:fe:0f:e4:
d2:61:03:14:92:89:ec:bd:18:20:4e:6c:9f:2e:2c:33:19:eb:
56:b2:20:e1:ca:6d:e2:98:a6:bc:f5:b3:bd:70:67:67:b7:b9:
71:be:1b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:01 2026 by rpki-client