Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: DgBgGF3UZjpGzWT7uJvlAzVjrETJETqFyYb3mMIRHf0=
Subject key identifier: 0B:E8:4D:10:7B:39:AC:93:91:DB:12:0C:BD:23:2A:06:2C:58:CC:09
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 019F905A8CE3FAC5A40B1FB41FA03E0396B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 18B0
Signing time: Thu 23 Jul 2026 19:01:21 +0000
Manifest this update: Thu 23 Jul 2026 19:01:21 +0000
Manifest next update: Fri 24 Jul 2026 19:01:21 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: YimlLg66pYQQm2hMf4T8p13l+dBoxIJv2znbSmCpijc=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:8c:e3:fa:c5:a4:0b:1f:b4:1f:a0:3e:03:96:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Jul 23 19:01:21 2026 GMT
Not After : Jul 24 19:01:21 2026 GMT
Subject: CN=0be84d107b39ac9391db120cbd232a062c58cc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:2e:cb:fb:fe:e8:5b:e2:ac:9f:51:8d:eb:
38:ad:b5:3a:ce:32:92:e2:d7:25:b1:31:36:0d:3b:
a5:5a:2f:8a:ac:00:f4:f0:c3:78:d8:ce:40:d5:e2:
87:f6:2b:ca:4b:52:9c:5b:2f:69:ad:5b:a0:a8:d4:
45:ac:81:c7:69:38:66:c5:e0:51:74:6a:df:d3:b2:
9e:ed:76:c2:a7:91:d0:82:e3:24:cb:9b:f1:05:ab:
87:b0:7b:9a:52:fe:fc:31:fb:5a:a8:34:bb:fd:22:
d2:4b:2d:2f:7e:a6:df:3d:51:46:ea:6b:17:6e:38:
04:ac:6b:06:c0:be:43:30:cb:10:eb:98:c9:4b:c7:
6c:4d:f7:37:82:26:f8:ae:6a:09:4f:f7:a3:52:dd:
e9:5b:48:61:2b:d9:f1:c9:15:ee:68:8a:f1:e2:b6:
dc:91:f8:7e:e4:3a:d0:2a:f3:26:7e:ce:ff:e5:ae:
70:03:25:72:cf:ec:c9:17:28:df:69:8b:1c:6a:66:
4d:3d:9a:b4:3b:41:83:c2:2c:8a:4d:64:66:a5:cf:
92:4b:6c:60:87:78:49:d9:69:4c:90:18:08:80:86:
d5:f9:a4:0a:8c:86:84:42:3a:38:f3:0d:dd:a4:93:
a6:f7:81:7e:9e:86:5b:ec:f4:c3:04:73:62:cf:f1:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:4D:10:7B:39:AC:93:91:DB:12:0C:BD:23:2A:06:2C:58:CC:09
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1b:0e:ca:27:db:f8:15:0b:71:2c:11:4f:ea:ec:6c:e9:a9:
c0:e6:b6:33:14:7e:67:e6:79:86:cb:b5:14:ba:e7:d8:49:8d:
1d:9d:a3:8c:60:3f:7b:04:40:13:c1:73:34:2d:44:55:15:7c:
db:60:07:6e:04:59:36:90:c2:62:7a:d4:01:a7:cf:f3:79:1b:
37:27:39:83:27:eb:69:f3:cf:0c:cd:3a:46:7a:24:3d:2a:47:
fd:53:8d:5e:ec:4c:8f:09:72:02:5a:d0:51:e3:42:46:0c:6d:
68:24:de:58:82:6f:6e:6c:97:9d:5c:a0:0f:aa:65:a5:ab:3d:
ea:13:43:b4:46:ba:9f:ec:72:f8:3a:d9:3f:ea:54:db:a4:49:
c7:54:47:f4:76:9b:7f:a4:28:87:4d:6d:69:f8:f7:a0:42:d3:
e5:92:9d:06:b3:53:19:77:62:0a:52:cb:c7:94:e3:15:bb:69:
f9:cf:75:45:06:37:86:24:cf:d3:9c:c6:82:26:ee:1e:46:a1:
fa:b6:06:48:50:63:48:e9:ea:6c:f7:10:02:61:eb:38:ef:4d:
39:9c:67:b1:89:10:b9:59:35:33:ba:0b:ec:12:97:e0:26:79:
e8:ee:79:d8:a6:62:b8:ac:b6:7c:86:02:ec:9e:c4:96:92:59:
d2:ef:d5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:45 2026 by rpki-client