Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
File: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft (raw, json)
Hash identifier: ovR0+EZNDZOdyVw/dEJ6h7uKePfUd1PyknJNOPpZgms=
Subject key identifier: F7:C6:57:30:86:4E:5C:52:61:E3:83:0B:C1:71:65:8C:06:B3:6F:63
Authority key identifier: D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
Certificate issuer: /CN=d886f55b45a068985743450b7ae50f4ca73d6109
Certificate serial: 019FA0E0113B0B05EACB720D370E1C7E0A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:01:06 +0000
Manifest this update: Mon 27 Jul 2026 00:01:06 +0000
Manifest next update: Tue 28 Jul 2026 00:01:06 +0000
Files and hashes: 1: 2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl (hash: mmLfXQQCmb5B3i3exXc7DQblBwGY6yjKyabPyX+TSLA=)
2: Re3ZeOa3iPxJ1UGOr1s23OQohOY.roa (hash: KPC+Yho2dQqrDOutkpVTQuErt//lueC69aRryj2hiHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:11:3b:0b:05:ea:cb:72:0d:37:0e:1c:7e:0a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d886f55b45a068985743450b7ae50f4ca73d6109
Validity
Not Before: Jul 27 00:01:06 2026 GMT
Not After : Jul 28 00:01:06 2026 GMT
Subject: CN=f7c65730864e5c5261e3830bc171658c06b36f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:af:81:af:d4:b6:b3:47:b2:18:15:dc:4d:
7e:ac:ce:5f:e9:4c:51:4a:22:95:be:71:ad:93:56:
9d:25:89:18:d0:c4:7c:1f:88:bd:f3:79:61:35:de:
2e:36:2b:4e:20:17:b7:84:41:e0:3d:7f:ce:d8:4b:
24:26:1d:3e:af:d9:79:80:c7:29:5e:c9:c0:0b:24:
b0:75:85:95:8f:fb:ea:bb:68:72:b4:4e:f0:d5:84:
51:79:91:c5:88:20:ce:df:5b:1d:49:29:be:d6:ca:
c2:d5:f9:7c:6b:14:f1:07:0e:12:20:79:42:54:65:
11:97:57:bc:81:ec:21:99:96:47:be:52:f1:ff:23:
65:b2:8a:44:7e:b0:13:c3:fd:dd:37:f9:19:77:b3:
a0:53:19:3a:d2:09:35:31:79:e5:cb:ab:3d:ae:5e:
df:74:c2:0b:aa:04:66:ab:58:a9:16:8c:ad:10:77:
63:10:af:d0:7a:eb:41:5b:4d:60:ff:9b:80:f4:a0:
30:84:89:32:9a:c4:b7:30:f8:2f:ab:81:03:fa:03:
de:d3:63:79:fc:08:82:08:35:e9:47:35:01:03:45:
54:68:b0:7e:f3:2e:df:8a:92:9f:53:bb:88:7b:f8:
c2:c8:43:f6:41:3e:2e:8b:96:1a:af:4f:78:4a:db:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:57:30:86:4E:5C:52:61:E3:83:0B:C1:71:65:8C:06:B3:6F:63
X509v3 Authority Key Identifier:
keyid:D8:86:F5:5B:45:A0:68:98:57:43:45:0B:7A:E5:0F:4C:A7:3D:61:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c1a042-102f-4c12-937f-9d585e14b762/1/2Ib1W0WgaJhXQ0ULeuUPTKc9YQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:99:29:fc:38:85:69:a4:3d:06:97:31:bd:e7:7d:e0:9a:
30:bd:74:ab:b9:e4:d2:12:78:18:82:02:2f:3a:ad:b0:e2:b7:
e3:90:a5:7d:ba:f3:6f:20:4e:f5:84:cf:39:64:b6:1e:2c:c0:
2d:01:a5:0b:3c:a8:e8:16:6f:e8:df:0c:04:98:46:ff:bc:91:
2a:c1:d5:70:69:af:f7:0b:a3:be:ff:9b:92:95:68:c6:7a:ca:
3c:53:f0:a4:29:fd:2d:92:91:1a:57:1b:8d:5e:13:fb:5f:f2:
47:13:e6:81:2e:a7:dd:cc:10:57:cb:48:07:f1:16:22:48:ce:
42:ba:a2:14:04:5e:ab:ef:9f:9e:75:6c:1a:89:61:56:c6:0d:
3a:13:b3:e7:6b:31:7c:48:d5:e6:b5:3b:e3:56:5b:49:45:d0:
c0:44:60:4d:7c:93:27:b9:85:3c:02:f0:33:b0:eb:fb:41:8e:
18:6e:66:b4:6d:63:23:bf:7c:27:a7:13:71:3e:0e:65:a9:77:
7c:ae:29:bc:fe:4a:c7:be:b8:ac:86:e0:2e:59:c6:53:e4:09:
b5:fe:04:64:d3:fc:42:63:87:17:62:d6:29:e5:4d:84:f0:52:
ce:68:39:81:8d:d7:4c:82:7d:b0:69:d0:f7:cd:e6:34:0b:05:
b3:2a:9d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:06 2026 by rpki-client