Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: pk5IPrg+x/6TiKM1aEZZkNi3/HSVi7+UOXlceEsZ4UE=
Subject key identifier: F6:1A:61:47:44:C7:A7:49:BC:87:B1:6C:01:4F:3C:6C:C7:9F:4B:20
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019F178C5BEDF87A756B1A7C15C30C0AF94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 125A
Signing time: Tue 30 Jun 2026 08:01:42 +0000
Manifest this update: Tue 30 Jun 2026 08:01:42 +0000
Manifest next update: Wed 01 Jul 2026 08:01:42 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: QfGf2eC6PogGROHxSmhmnFpvVmKV6SEEPidrLyYrNVU=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:5b:ed:f8:7a:75:6b:1a:7c:15:c3:0c:0a:f9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Jun 30 08:01:42 2026 GMT
Not After : Jul 1 08:01:42 2026 GMT
Subject: CN=f61a614744c7a749bc87b16c014f3c6cc79f4b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:58:3f:dc:75:81:0f:97:56:eb:77:85:93:
b6:e1:bb:18:06:15:c7:7a:dd:ef:be:b8:90:3c:13:
b5:31:04:ce:42:36:d4:d4:88:f2:ca:3c:91:c2:d3:
b3:85:22:8b:d9:89:d9:a8:5b:eb:f2:6f:e6:4d:9e:
73:fb:92:84:b0:d6:3c:56:1d:7c:df:c6:b0:18:c1:
1a:7c:22:9d:c3:a1:16:07:36:4b:a7:08:3e:36:48:
20:32:ee:e4:e7:21:7b:6b:4e:e3:4f:61:99:4e:0c:
08:89:5c:1a:07:bb:2d:bb:b1:2b:a5:1f:1a:dc:50:
29:4e:15:3b:d0:ed:ba:fb:ac:53:7f:9f:36:ca:7f:
a2:d8:bd:c7:d4:42:61:fd:9c:b8:9c:5c:7e:5a:13:
22:23:50:63:5d:9b:be:86:c5:52:e5:c1:a6:9f:38:
97:96:fa:4f:75:65:aa:14:ea:0c:61:cd:63:7a:c9:
67:b3:aa:34:e8:1a:e5:0b:ce:65:3d:df:c8:7f:24:
68:18:bb:5f:3a:74:9b:11:c1:d9:73:36:ff:38:9a:
ae:dd:38:7a:98:22:10:bb:d3:53:e3:38:e5:e1:05:
25:c1:58:d5:bd:13:91:45:07:0f:47:95:ad:88:c8:
32:dc:7e:df:01:21:39:84:bf:54:8f:46:a5:11:7c:
47:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1A:61:47:44:C7:A7:49:BC:87:B1:6C:01:4F:3C:6C:C7:9F:4B:20
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:46:06:8f:e3:05:d2:2e:70:db:93:68:4e:fb:7b:eb:a4:5d:
f9:3b:92:3f:4c:bf:7a:14:62:95:98:80:af:e0:d5:15:dd:18:
93:ec:01:a2:b3:a2:99:92:c1:13:b5:40:aa:6f:ef:3d:49:ee:
ed:59:f7:f9:6d:ee:7d:41:18:77:68:b3:d5:d8:96:8d:64:6c:
dc:ac:f8:dc:8f:99:be:1e:81:d3:c9:5b:c0:84:18:be:fd:8d:
f6:b3:bc:3d:75:a4:f8:e4:1a:76:43:ce:fe:b4:b2:5a:61:72:
e2:fa:7c:2a:aa:64:07:52:81:3f:a9:25:79:c2:6d:f9:6d:65:
9e:f8:fa:e2:d2:14:8f:56:0a:d2:d3:7e:f6:05:4f:79:bc:57:
58:03:6b:33:c2:a4:9e:58:c6:5a:2c:7f:db:4a:a8:1d:70:90:
2d:42:47:bc:26:5b:5e:90:66:b8:fa:81:2b:9c:68:84:2a:64:
17:e2:3e:ce:a6:27:e3:2f:e8:a4:47:dc:f3:f8:a3:e2:3c:e1:
a1:3b:48:48:c6:ba:22:81:1b:d7:04:a2:3c:a9:af:14:a4:30:
54:22:ce:a4:7f:ea:1c:bb:1e:51:4b:18:66:ae:d1:86:49:bf:
6d:06:ac:18:46:47:0a:84:45:90:4c:2c:2d:40:6e:13:32:bd:
c0:30:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:32 2026 by rpki-client