Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
File: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft (raw, json)
Hash identifier: i6AIvFPh5tEPtX5XvdZV0xHDhAVApCrcZrSyxKMng7g=
Subject key identifier: BA:18:FD:52:8A:BD:24:46:87:6E:0F:C3:29:43:53:A4:16:81:10:3D
Authority key identifier: DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
Certificate issuer: /CN=db11520db30e58560013baee6106ca245f194a4a
Certificate serial: 019F8F7F2B876CBA0AD960B904F6CCD9FC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:43 +0000
Manifest this update: Thu 23 Jul 2026 15:01:43 +0000
Manifest next update: Fri 24 Jul 2026 15:01:43 +0000
Files and hashes: 1: 2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl (hash: 7i0yAHmzTcCqLDj/DqwZ4XBrPS9vq2soKlVXihD1bhE=)
2: dBY5jgdb1cJO1dq6Xs-mG5OrVlI.roa (hash: n7M2DLVhupTXknxIXP5S/bJ1i2MjgUBbOoeKbEgGiQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:2b:87:6c:ba:0a:d9:60:b9:04:f6:cc:d9:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db11520db30e58560013baee6106ca245f194a4a
Validity
Not Before: Jul 23 15:01:43 2026 GMT
Not After : Jul 24 15:01:43 2026 GMT
Subject: CN=ba18fd528abd2446876e0fc3294353a41681103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:ba:40:a5:51:76:ea:ec:96:95:af:5d:b9:
7b:4c:d9:b2:f1:d8:d5:5f:d8:ad:59:0c:79:87:b0:
d3:fd:37:c8:ae:8e:0b:02:58:35:fe:64:ba:72:37:
5c:8e:cd:71:8b:c3:f4:18:4e:5a:7e:67:87:d4:ef:
97:4a:b0:52:59:e4:79:e9:f3:25:44:5f:0b:f3:af:
85:f2:08:d4:97:76:6f:a3:2e:51:a3:23:b0:38:64:
7a:43:8f:f6:8f:9a:0c:90:d6:bf:73:ef:39:cc:8d:
45:d0:23:de:b1:44:49:c8:82:6a:20:38:cd:42:22:
aa:c0:6c:96:cb:11:13:1b:37:6c:ce:b1:24:19:1e:
41:fa:09:63:bb:4d:4d:b2:d6:d7:f3:fe:64:77:9e:
ce:81:89:48:a5:e3:68:c4:2d:be:d1:39:ed:02:3b:
df:4e:25:10:a8:f5:eb:08:90:76:c1:9e:4e:3b:a0:
4f:28:1c:7a:a0:bd:52:99:10:71:71:bf:20:1c:e1:
f0:20:c5:af:d6:35:ed:f5:60:e7:00:b1:c8:54:03:
4e:9d:f3:f2:6f:98:b2:8a:03:cd:ce:7b:cd:64:f2:
79:4a:0f:38:a5:6b:fc:9f:68:ae:56:23:96:be:f8:
01:5f:c8:eb:34:61:16:35:b7:57:38:ad:90:4b:89:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:18:FD:52:8A:BD:24:46:87:6E:0F:C3:29:43:53:A4:16:81:10:3D
X509v3 Authority Key Identifier:
keyid:DB:11:52:0D:B3:0E:58:56:00:13:BA:EE:61:06:CA:24:5F:19:4A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xFSDbMOWFYAE7ruYQbKJF8ZSko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/2xFSDbMOWFYAE7ruYQbKJF8ZSko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d3:44:56:34:1b:11:14:cd:1d:bf:0c:c7:6b:98:7f:71:d5:
2d:8c:77:65:3c:3e:0b:51:21:97:4c:bd:6f:01:8e:43:58:f9:
dc:9c:fb:ae:df:0a:70:48:bf:79:ae:24:63:c4:3a:03:04:72:
d5:de:6e:09:2b:3f:eb:02:69:98:d5:c8:53:ff:de:4a:95:bc:
bd:39:b8:9a:65:a1:ad:b5:fc:72:4f:5a:c4:98:b7:a0:f5:f4:
27:ce:f6:63:92:1d:05:51:88:a5:91:b8:f5:4f:df:01:86:e4:
66:38:85:cc:ff:b6:e6:8d:9f:3a:87:06:ab:37:19:cd:86:91:
1e:70:a7:e8:5b:13:06:4e:ab:06:aa:19:9a:db:24:93:8f:8a:
61:bf:54:f5:b7:ad:a9:98:c0:fb:76:f7:4a:6a:24:d6:94:fd:
77:54:29:4f:c2:a5:1e:63:6c:2a:be:01:6d:cb:ec:ab:14:e0:
91:36:fb:a9:5e:d3:1e:28:c2:da:f3:d5:c1:73:90:62:73:63:
3b:8e:71:68:d6:08:2a:f1:42:ab:3f:26:0a:f0:8d:56:b5:1f:
94:a0:cc:a4:f3:67:57:8f:fc:66:62:75:0c:6e:98:97:d5:07:
9a:7c:46:67:86:47:d5:d4:7b:ea:9c:df:fb:5f:46:5a:ee:8e:
b0:1a:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:13 2026 by rpki-client