Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
File: 2xTnpr6Xzsb1vBpninbqbRYZwwY.mft (raw, json)
Hash identifier: DW+ZbJO17z2f6sKS3pLdEsninW+NVDS5jRiHfPelOcA=
Subject key identifier: 4C:DA:2B:D1:9C:89:1E:28:5F:3B:65:16:0F:D6:1F:7D:D0:FC:3D:AE
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 019F91DB192EFB7B1CA8D750DE7402642F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
Manifest number: 178A
Signing time: Fri 24 Jul 2026 02:01:22 +0000
Manifest this update: Fri 24 Jul 2026 02:01:22 +0000
Manifest next update: Sat 25 Jul 2026 02:01:22 +0000
Files and hashes: 1: 2xTnpr6Xzsb1vBpninbqbRYZwwY.crl (hash: 2XUEWy7HwSTEFkfbRA1IMkk9gOIityNrZxPLF66G71U=)
2: hJR5NdWu4-Lv4WFC0Lu_BxFdjI8.roa (hash: N6VCG9vXtUWHshJ3njO134sBkm0kEo7esti0M/kqZCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:19:2e:fb:7b:1c:a8:d7:50:de:74:02:64:2f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jul 24 02:01:22 2026 GMT
Not After : Jul 25 02:01:22 2026 GMT
Subject: CN=4cda2bd19c891e285f3b65160fd61f7dd0fc3dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:db:82:97:51:6e:72:d1:1a:fd:f8:18:10:
83:61:c1:7b:0a:2a:d7:89:64:0d:1a:27:b5:8b:50:
00:b4:f4:7f:a2:4f:67:21:78:7d:0b:80:7b:39:8a:
fc:70:64:55:d5:81:c0:d4:ed:cc:3f:ec:bc:7c:ef:
d9:ba:84:18:d6:9d:f9:8e:3a:f1:5d:87:ea:16:c2:
b0:42:d4:f3:ca:f0:a9:aa:bc:3c:8a:72:7c:ef:ab:
1a:fc:1f:27:f2:3d:ff:43:d9:39:53:cf:9d:13:dc:
30:9a:ef:e3:05:c4:29:27:b9:74:70:e9:39:a3:a1:
d1:26:d4:35:3a:25:13:c4:2f:f1:62:d3:2b:12:0b:
49:9d:23:c4:a4:f1:48:56:9c:b7:ba:fd:05:44:ac:
86:35:9d:8e:f7:b3:41:a5:53:2c:f7:da:41:dd:60:
34:8a:ef:20:9c:77:bb:68:da:a1:38:8d:de:44:b8:
d2:c3:08:db:44:32:3b:d8:e5:6c:c6:f3:b3:cd:37:
e7:3c:26:ff:90:c2:6d:3a:24:43:61:db:16:8f:69:
d9:54:f2:eb:0a:39:b4:f6:2d:9c:d3:58:b4:13:b7:
87:3f:9b:b4:dd:a7:98:3a:20:a5:b5:15:e7:d1:75:
21:57:bf:ba:73:85:95:1c:fc:62:42:99:13:e4:40:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DA:2B:D1:9C:89:1E:28:5F:3B:65:16:0F:D6:1F:7D:D0:FC:3D:AE
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:49:19:fc:2c:bd:dc:5d:01:ed:4c:40:d3:28:bb:5a:57:b2:
77:56:47:a6:75:c8:3d:28:e8:0c:4f:85:e7:7b:5e:16:1d:18:
22:cb:c9:e1:bf:29:cc:2d:f9:57:63:c3:9d:cc:2d:cd:f0:64:
42:5d:23:61:0e:0a:01:cd:4a:96:99:3b:86:b2:fd:22:26:6f:
a2:94:95:15:f0:e3:96:5a:2f:db:c8:aa:34:7b:90:a7:47:bc:
e3:21:08:73:b6:95:d2:97:c2:ba:08:cb:9a:1b:56:c4:a0:df:
a7:d4:32:e0:d0:76:8c:09:9f:d5:bd:8c:2d:34:99:22:65:2a:
03:d1:9a:8c:c5:6d:86:50:13:09:c4:31:c1:9b:da:cb:a8:b3:
3f:b5:5c:e8:08:ad:cd:2e:eb:b4:45:de:fb:bd:ac:13:a0:01:
d6:77:ba:f0:64:38:02:46:45:b3:f8:3c:33:76:50:51:00:89:
07:f2:c0:3f:00:a7:de:c7:0f:0f:39:0d:cf:20:f2:47:52:97:
2f:43:c6:3e:52:0b:67:4d:a4:20:27:5c:db:f2:e2:00:41:ca:
37:f9:ef:f9:b2:13:1d:25:9f:0b:0e:0d:e5:87:5e:fd:6e:01:
7b:47:95:75:c0:ac:d5:f8:21:65:af:d1:86:66:d6:eb:79:83:
a0:66:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:57 2026 by rpki-client