Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
File: 2sTLURUIAqQBjMJWrSn1RyBnXtU.mft (raw, json)
Hash identifier: 06rgavGSsIkqWW12zXBx2WNVFbWIDxcQbPK6FcU9JvA=
Subject key identifier: 4F:28:F6:96:E2:04:2E:E0:87:AD:C4:9E:4D:72:49:54:E6:35:B0:6A
Authority key identifier: DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
Certificate issuer: /CN=dac4cb51150802a4018cc256ad29f54720675ed5
Certificate serial: 019F9090FC48FC57658C0108E7B95E806A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
Manifest number: 14D9
Signing time: Thu 23 Jul 2026 20:00:48 +0000
Manifest this update: Thu 23 Jul 2026 20:00:48 +0000
Manifest next update: Fri 24 Jul 2026 20:00:48 +0000
Files and hashes: 1: 2sTLURUIAqQBjMJWrSn1RyBnXtU.crl (hash: rI7RdfKzvYx4WksupQM9VbF4LwqGRgiqURqrGTWM7a8=)
2: 8JzTv1sEWJzgKBh6hP5zrOespe0.roa (hash: nGLxJDi43LNGHyCGN8ILdukMd6pDlSBvmxCeyBz73IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:fc:48:fc:57:65:8c:01:08:e7:b9:5e:80:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac4cb51150802a4018cc256ad29f54720675ed5
Validity
Not Before: Jul 23 20:00:48 2026 GMT
Not After : Jul 24 20:00:48 2026 GMT
Subject: CN=4f28f696e2042ee087adc49e4d724954e635b06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:23:58:c4:da:b5:f3:54:c2:63:eb:77:c6:
34:04:ef:5d:19:30:93:d7:74:63:38:a5:1a:4f:e4:
37:d6:3f:01:78:ce:ac:ef:63:2a:9c:15:67:90:df:
3f:b6:8b:f2:e2:39:e9:af:57:46:08:37:3e:76:04:
2b:26:8f:74:c0:7e:8a:07:f4:94:14:26:20:81:c3:
2b:98:e3:b7:55:d0:ee:d2:9b:3c:43:c6:28:76:78:
17:96:7d:45:6d:7f:d4:0e:71:53:28:6c:4b:3b:d5:
ce:0e:19:2a:d1:7a:ee:04:8f:19:a9:8f:86:35:60:
45:9d:4e:99:43:6e:ee:8b:29:cc:02:96:c1:76:b6:
cd:53:a2:ce:3a:9a:82:5d:72:4a:f7:05:10:4d:ab:
9d:2d:c5:fc:78:3a:49:7b:5a:11:c5:82:db:b3:ee:
dd:66:59:1f:95:84:fc:4d:91:67:38:de:b5:20:09:
50:88:df:0e:52:87:11:1d:59:be:6b:56:68:8f:c1:
15:7f:04:47:01:26:09:a7:18:c7:98:cd:5f:99:5c:
c0:b4:d8:44:da:ee:15:c4:fb:38:35:4e:40:f1:07:
1c:be:18:13:c2:95:0d:89:f7:5c:d3:06:2e:6d:07:
f4:60:83:e2:a2:58:cc:7c:2c:89:90:a5:7d:73:0c:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:28:F6:96:E2:04:2E:E0:87:AD:C4:9E:4D:72:49:54:E6:35:B0:6A
X509v3 Authority Key Identifier:
keyid:DA:C4:CB:51:15:08:02:A4:01:8C:C2:56:AD:29:F5:47:20:67:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sTLURUIAqQBjMJWrSn1RyBnXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/36e838-1bbf-4cc0-b5da-4180f9e30945/1/2sTLURUIAqQBjMJWrSn1RyBnXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d7:94:b3:9d:7f:57:19:24:3e:1f:e0:9f:98:14:30:cf:4d:
c1:d4:0d:2f:7c:3d:70:b4:ad:dd:41:64:97:60:c4:ff:db:1a:
43:8a:ee:9c:be:24:de:e7:2d:13:33:7c:c0:83:ce:04:99:63:
71:2d:cd:7f:17:df:b8:e5:41:db:74:f0:20:16:a7:82:cd:f3:
da:39:38:77:eb:31:4b:9b:72:2b:5c:df:9c:bc:7f:75:9e:14:
e0:91:23:30:98:38:02:66:9f:00:4a:09:f7:21:15:11:d5:5c:
bd:af:d9:ce:a4:d4:2a:70:c6:3a:15:2f:79:a9:9a:44:dd:ae:
2e:6f:c3:74:59:12:5e:06:50:24:81:70:57:fa:cb:91:81:0b:
e6:44:61:ca:88:ce:c1:42:98:58:63:5a:2b:f0:e6:36:00:d6:
47:42:82:e1:95:04:a4:27:a6:02:67:27:a6:b9:2d:8c:9d:c9:
21:08:0c:6d:a5:bb:1e:4e:74:ea:ae:9c:bd:c0:b9:e1:e3:1d:
6a:2e:74:7d:3b:a7:50:8c:e0:a5:85:cb:89:d7:52:a4:39:86:
d9:0c:99:f7:cb:f3:83:a2:51:67:23:46:c1:9a:03:f5:62:f5:
91:3b:a2:30:d4:b6:90:d6:1f:98:67:e3:54:9f:47:f5:9e:58:
39:1f:ac:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkPxI/FdljAEI57legGqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYzRjYjUxMTUwODAyYTQwMThjYzI1NmFkMjlmNTQ3MjA2
NzVlZDUwHhcNMjYwNzIzMjAwMDQ4WhcNMjYwNzI0MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZjI4ZjY5NmUyMDQyZWUwODdhZGM0OWU0ZDcyNDk1NGU2MzViMDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7kjWMTatfNUwmPrd8Y0BO9dGTCT
13RjOKUaT+Q31j8BeM6s72MqnBVnkN8/tovy4jnpr1dGCDc+dgQrJo90wH6KB/SU
FCYggcMrmOO3VdDu0ps8Q8YodngXln1FbX/UDnFTKGxLO9XODhkq0XruBI8ZqY+G
NWBFnU6ZQ27uiynMApbBdrbNU6LOOpqCXXJK9wUQTaudLcX8eDpJe1oRxYLbs+7d
ZlkflYT8TZFnON61IAlQiN8OUocRHVm+a1Zoj8EVfwRHASYJpxjHmM1fmVzAtNhE
2u4VxPs4NU5A8QccvhgTwpUNifdc0wYubQf0YIPioljMfCyJkKV9cwx7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8o9pbiBC7gh63Enk1ySVTmNbBqMB8GA1UdIwQY
MBaAFNrEy1EVCAKkAYzCVq0p9UcgZ17VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEt
NDE4MGY5ZTMwOTQ1LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNmU4MzgtMWJiZi00Y2MwLWI1ZGEtNDE4MGY5ZTMwOTQ1
LzEvMnNUTFVSVUlBcVFCak1KV3JTbjFSeUJuWHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdeUs51/
VxkkPh/gn5gUMM9NwdQNL3w9cLSt3UFkl2DE/9saQ4runL4k3uctEzN8wIPOBJlj
cS3NfxffuOVB23TwIBangs3z2jk4d+sxS5tyK1zfnLx/dZ4U4JEjMJg4AmafAEoJ
9yEVEdVcva/ZzqTUKnDGOhUveamaRN2uLm/DdFkSXgZQJIFwV/rLkYEL5kRhyojO
wUKYWGNaK/DmNgDWR0KC4ZUEpCemAmcnprktjJ3JIQgMbaW7Hk506q6cvcC54eMd
ai50fTunUIzgpYXLiddSpDmG2QyZ98vzg6JRZyNGwZoD9WL1kTuiMNS2kNYfmGfj
VJ9H9Z5YOR+sdg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:09 2026 by rpki-client