Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
File: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft (raw, json)
Hash identifier: r2NMIjkXF6d/fwD7jNKFi23z0SkSb13ji2eFxzd4vkI=
Subject key identifier: 7E:29:D0:92:EC:73:8E:17:3C:57:32:2F:8A:12:D7:4C:F6:7C:BE:73
Authority key identifier: D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
Certificate issuer: /CN=d97a77930122879a766470df8d660c98442a9932
Certificate serial: 019FA29756CA9FFF6CB2A4094C4C31CFA662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
Manifest number: 04A8
Signing time: Mon 27 Jul 2026 08:00:54 +0000
Manifest this update: Mon 27 Jul 2026 08:00:54 +0000
Manifest next update: Tue 28 Jul 2026 08:00:54 +0000
Files and hashes: 1: 2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl (hash: GlnYIHGA4lKxuFNEtYZ/WXoFKq6QbA+yEvHkTpLytc4=)
2: g5qpXHQ9YaIQcSP18I2z298mHVU.roa (hash: OPcErLNEwIQeoOOXzCBshI4BboTsjuLPiVED3RVYlVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:56:ca:9f:ff:6c:b2:a4:09:4c:4c:31:cf:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d97a77930122879a766470df8d660c98442a9932
Validity
Not Before: Jul 27 08:00:54 2026 GMT
Not After : Jul 28 08:00:54 2026 GMT
Subject: CN=7e29d092ec738e173c57322f8a12d74cf67cbe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:3a:9e:a4:e6:ac:de:b1:e4:23:2d:56:4b:
23:03:a2:1e:5a:6d:cb:72:71:ea:e4:80:76:2a:3b:
59:db:7f:7f:2d:0d:5f:c3:d3:2b:42:a2:08:be:ab:
3a:43:f3:35:ce:31:ed:75:ea:2d:ac:ab:5f:e0:07:
10:6b:de:a5:f8:6b:da:5a:1f:f7:6e:de:7c:a0:a8:
7e:00:06:e3:7e:4c:a8:23:d8:ca:b7:ea:bb:ee:38:
79:44:91:fd:39:83:6a:96:f4:0f:ab:a3:2a:30:c0:
dc:d9:b8:4a:70:5a:4f:8b:da:a7:b6:71:8a:3b:85:
f2:cb:4f:e3:4a:ae:8d:fc:a1:6c:d9:87:d4:e3:f5:
e3:ce:ae:66:4c:4e:41:63:d7:5a:d0:cb:cd:56:e3:
60:2d:cc:b1:24:39:da:4c:db:74:fa:0a:a8:15:3b:
9e:51:8a:9e:70:f7:2e:67:20:57:cd:57:eb:ae:dd:
29:6b:ba:fb:0d:21:cc:ca:43:56:61:95:e0:ca:c9:
82:93:1c:fb:99:df:10:54:f5:19:89:d2:e3:d0:dd:
8a:d8:04:63:ae:28:50:60:8b:fd:d9:64:a9:07:f7:
07:0d:96:45:47:f0:1c:55:ba:64:a9:86:eb:cf:0a:
5b:2f:6d:c1:06:14:81:52:c9:8a:8c:ca:9a:e1:2e:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:D0:92:EC:73:8E:17:3C:57:32:2F:8A:12:D7:4C:F6:7C:BE:73
X509v3 Authority Key Identifier:
keyid:D9:7A:77:93:01:22:87:9A:76:64:70:DF:8D:66:0C:98:44:2A:99:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2a4922-434b-47b1-b304-cd459a65721b/1/2Xp3kwEih5p2ZHDfjWYMmEQqmTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:45:77:da:39:a2:e1:81:7d:5b:75:58:4b:65:64:8d:79:20:
49:8d:a4:de:7d:58:3c:47:33:64:46:c7:6f:54:d3:5f:2b:f1:
eb:38:5e:d7:6b:2d:4b:7c:a1:fd:ff:11:c3:5d:82:60:fe:22:
04:90:42:9c:e2:f2:4d:24:06:23:79:e9:cb:ba:51:98:8b:2f:
77:9f:55:d1:11:f2:2b:e5:fe:13:95:84:80:59:28:11:8d:a8:
d3:78:30:65:b3:03:45:66:1b:ed:51:f6:81:7e:da:f3:f2:a7:
7f:66:25:3c:28:3d:e8:60:35:c9:d8:88:ad:5b:6e:c3:b5:ff:
c3:cd:b1:d4:66:96:5b:4d:ec:ba:76:47:25:9d:d5:e8:c5:91:
0f:58:44:6e:a6:55:ac:26:ae:04:8c:83:1e:ed:fc:4a:1b:39:
76:77:68:e6:d3:94:6c:7b:f6:cd:5d:8c:c3:53:6c:b6:13:13:
a2:28:24:39:49:f5:d0:64:d8:4e:a6:00:02:bb:4a:a2:42:6c:
08:2c:b8:30:98:03:07:20:17:ea:02:f2:81:c0:11:cb:5d:a4:
5a:00:96:1e:de:ba:04:d9:b7:83:f3:60:5d:65:9f:19:55:6d:
b7:ca:02:f6:ff:85:5e:f9:25:4c:55:cc:21:5b:a5:4c:9c:f6:
76:0d:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:52:56 2026 by rpki-client