Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
File: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft (raw, json)
Hash identifier: aNRIFiasQB39xGMH8t1evZXASwbh0seGbJJKGqeADPg=
Subject key identifier: C2:A7:B5:1F:09:03:35:01:5A:B2:3F:A3:86:32:61:FB:4D:66:BF:47
Authority key identifier: DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
Certificate issuer: /CN=dab1c03088ebfe553812b31547c03c90a25d8771
Certificate serial: 019F17F96F9527CF3173FF63C306DCE4ED11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 10:00:50 +0000
Manifest this update: Tue 30 Jun 2026 10:00:50 +0000
Manifest next update: Wed 01 Jul 2026 10:00:50 +0000
Files and hashes: 1: 2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl (hash: GK2T1LYI/ZKMOuTf7l8H0oA4ma0EcVxVBnWXv31SwPM=)
2: W2Gz6ifGiND8Axz7q4cy7E7chc4.roa (hash: O8D/QbXtAPcFwsQckWa6FLpbYcW8abs0F11OgUi2pCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:6f:95:27:cf:31:73:ff:63:c3:06:dc:e4:ed:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab1c03088ebfe553812b31547c03c90a25d8771
Validity
Not Before: Jun 30 10:00:50 2026 GMT
Not After : Jul 1 10:00:50 2026 GMT
Subject: CN=c2a7b51f090335015ab23fa3863261fb4d66bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:5d:f8:dc:c8:f8:35:fc:65:35:63:ec:48:
28:6c:a8:c5:e6:d3:9b:60:ae:52:e5:c0:e7:06:5f:
7c:c4:90:f7:1c:5b:96:20:a9:f2:d3:8c:df:5e:da:
86:fb:ad:c7:fd:bb:3b:a6:e4:7a:9b:4f:1d:b1:d0:
b9:9a:e7:8a:71:ee:14:60:31:9f:6b:21:ce:b3:0a:
aa:84:03:1f:17:fc:7b:9a:ec:22:38:98:14:92:31:
42:6a:e0:5d:7a:de:b1:91:e4:ab:d8:14:1b:f7:f8:
13:99:84:70:a8:00:04:a1:bc:df:2b:23:21:c8:62:
ee:c6:5b:a1:5b:06:62:c3:c9:27:f8:2e:97:0d:c1:
ea:3c:01:fd:66:72:21:23:94:56:e7:cc:e0:5e:4e:
ba:cf:b1:45:21:b2:af:bc:86:88:71:e6:a0:da:23:
21:da:84:99:6f:e8:df:ea:74:24:80:ba:97:da:45:
bd:47:18:dd:d8:79:ec:72:fe:23:b0:6f:96:22:7a:
9f:2c:78:22:ce:35:0a:53:01:8d:4c:90:bf:27:24:
1a:f3:db:ec:74:df:b2:1b:7d:da:51:fe:80:e7:4d:
07:2e:cd:ed:b8:80:96:02:37:0a:79:71:2b:a9:1f:
fa:03:de:c4:19:6d:10:a7:17:5f:84:7d:30:1f:a1:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:B5:1F:09:03:35:01:5A:B2:3F:A3:86:32:61:FB:4D:66:BF:47
X509v3 Authority Key Identifier:
keyid:DA:B1:C0:30:88:EB:FE:55:38:12:B3:15:47:C0:3C:90:A2:5D:87:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rHAMIjr_lU4ErMVR8A8kKJdh3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/36c2aa-2e24-44fb-9e0a-b72398070823/1/2rHAMIjr_lU4ErMVR8A8kKJdh3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:26:4d:3b:00:30:31:30:7a:95:a1:39:b7:e3:68:97:1f:fc:
6d:6b:23:e7:87:5f:83:5c:52:d6:a4:16:6d:15:ec:6e:1a:51:
a3:90:b8:50:59:eb:a2:57:89:9c:cb:63:68:f2:2f:a8:64:57:
18:58:f3:26:f8:2c:81:b3:01:7e:a2:ab:41:85:be:97:e1:9d:
f2:21:29:88:4a:bc:55:7f:a0:da:f2:b6:e3:e3:b4:8d:42:06:
67:99:76:fb:7c:7e:99:08:48:61:01:63:a8:bc:20:ed:56:d7:
5d:92:b1:2c:82:e9:be:8c:61:62:ce:4f:b5:02:62:3d:1f:9c:
d2:50:2d:a1:70:ce:f4:99:98:e5:29:3f:7a:d9:3b:2b:51:6f:
36:5a:ea:94:49:9e:23:e1:97:a2:cf:55:ea:0c:0e:b5:cb:56:
eb:53:d6:e0:c0:f6:1f:ba:b4:d3:67:90:43:73:78:4d:ae:67:
7b:cc:65:dd:75:c4:58:45:0c:aa:44:a3:37:08:82:fa:3f:78:
e2:99:a3:19:b1:1b:de:b7:03:a1:61:43:2b:a9:92:e4:72:a6:
b3:59:6d:57:cf:46:2c:ef:cf:34:38:bd:05:55:da:1b:f6:c2:
b0:9e:1e:d8:db:e4:7e:b2:36:b1:9e:75:24:73:05:cf:13:72:
93:e8:60:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:18 2026 by rpki-client