Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: BZz6Fh9TqRKq0FivBCV/arezmgqcpFECKK4PolMcFBQ=
Subject key identifier: 67:41:45:E2:D1:70:0C:A6:A9:D1:DC:83:CC:C2:18:59:38:DC:49:A3
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019F927F44CA3BA6BA104F86075DAA67703B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:41 +0000
Manifest this update: Fri 24 Jul 2026 05:00:41 +0000
Manifest next update: Sat 25 Jul 2026 05:00:41 +0000
Files and hashes: 1: 1Um9zAoKWKjpG5CWSpYj20EG4Ds.roa (hash: xf3GX9aUpJiglVQBqVGTd7FNq7qYdy4WLmcmBZNQV+Y=)
2: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: cHXNH1cRbQtegn24C64Xlj7IyAAKBY8TxNCb4nPHTGI=)
3: MzTCg6RlvrZqr-ataKMVV1O3e5c.roa (hash: xDOMJIkLwjQY+zuYlnyDdnhzWqp89fIYV7R0xToj6hQ=)
4: lPNiIoO-88xgrf-h9aWewkSLHYA.roa (hash: KjhtgxSjZ4mC2ErfPJ5twpfop8Y+K4GDpR14iBVhcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:44:ca:3b:a6:ba:10:4f:86:07:5d:aa:67:70:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Jul 24 05:00:41 2026 GMT
Not After : Jul 25 05:00:41 2026 GMT
Subject: CN=674145e2d1700ca6a9d1dc83ccc2185938dc49a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:9d:b1:cf:26:c9:1f:67:9d:28:f7:fa:fd:
6e:f4:13:ac:be:8c:af:ec:4c:49:a1:f5:e0:8d:6c:
9b:d7:9d:16:c3:8f:6a:af:88:51:d5:34:b4:31:90:
22:ca:c8:5e:74:38:0d:5e:47:3d:3f:a8:c6:0d:32:
42:f1:39:24:e2:cf:20:e3:bb:7d:80:23:24:ff:9c:
ef:93:52:29:3e:0d:e2:de:85:55:2c:52:6e:95:bc:
d6:b1:e5:d5:52:16:bf:bb:2b:23:dc:ab:31:30:e2:
4c:b6:f2:86:42:8f:35:f2:e8:dd:b3:1d:97:be:b4:
35:71:17:f0:c1:f4:0a:4e:48:84:90:a7:0e:c3:49:
78:7f:4d:e2:da:31:85:19:c5:e6:85:c5:de:44:54:
da:20:05:28:ef:5b:f5:28:71:e5:6e:53:5c:02:ce:
ad:45:69:cf:9a:82:00:db:7e:c3:0d:6d:02:a5:9a:
57:53:d5:76:95:f4:ed:03:38:61:6d:5d:db:d2:60:
ed:f9:35:2f:1f:c3:4e:21:0c:b0:ba:07:28:c4:0d:
7f:e8:38:85:37:67:b9:09:f8:61:17:99:76:e7:36:
14:38:7d:5a:2e:4d:b3:5a:df:4c:d1:54:73:cc:54:
e8:ae:49:c4:1c:84:af:c7:23:77:0e:9a:34:f6:58:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:41:45:E2:D1:70:0C:A6:A9:D1:DC:83:CC:C2:18:59:38:DC:49:A3
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9a:83:b0:03:b3:c2:1c:43:1f:a3:1d:96:10:bb:0a:02:0f:
87:98:3a:1c:ff:32:ca:0a:94:a3:cf:dc:bd:a7:b2:4d:b5:96:
d8:9b:3b:d7:ae:80:c4:fd:56:01:f5:52:f5:fb:42:a6:3e:f2:
14:74:71:61:44:7d:12:bb:a9:2c:c1:e1:a8:56:39:22:74:af:
75:5d:06:de:4d:89:49:7e:61:45:1b:2d:79:00:dc:28:af:1c:
73:84:04:cb:6e:a6:8e:58:c5:18:93:66:a9:ee:f1:de:9e:74:
fd:84:4a:43:6e:30:ab:e2:26:3e:48:2f:6f:1e:9d:bc:5c:f8:
48:bd:78:89:dc:72:6f:c8:4f:40:2c:e6:7d:08:84:d5:8a:2f:
e0:4e:b1:b3:6f:3f:08:4e:f9:b1:76:a3:16:26:6b:42:07:60:
85:2e:dd:cc:3b:45:35:c7:b9:b3:58:78:b0:23:f6:fd:fd:ff:
71:d5:dc:d0:6b:2a:8b:4f:cd:28:6d:6c:63:52:a5:0f:c3:22:
76:1c:ae:ba:08:d5:38:61:a0:5b:92:3b:e2:36:e0:4c:1b:74:
90:0f:8a:ea:5c:6f:bc:be:31:b5:4b:76:b9:a4:53:cd:49:68:
45:ec:bb:5e:a7:c0:d9:22:10:8e:83:0c:b3:9e:2b:2f:2e:04:
70:93:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:33 2026 by rpki-client