Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: WeJU/CmxrsMayfGedKoE87qlSRFaHky4B5duM1zPz/E=
Subject key identifier: F5:2D:37:F1:80:1F:24:C9:CD:59:DD:EA:30:03:7D:4C:3C:EB:50:F8
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019F90FF02540C2061F6C112E8B394B93B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:00:59 +0000
Manifest this update: Thu 23 Jul 2026 22:00:59 +0000
Manifest next update: Fri 24 Jul 2026 22:00:59 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: COyzjzo7+5Vt3uymjlUbauKtx7gCNWknTOoB/Dn5OAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:02:54:0c:20:61:f6:c1:12:e8:b3:94:b9:3b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jul 23 22:00:59 2026 GMT
Not After : Jul 24 22:00:59 2026 GMT
Subject: CN=f52d37f1801f24c9cd59ddea30037d4c3ceb50f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9a:0c:af:f8:18:02:52:0f:f2:67:6c:b0:1d:
e1:a7:72:e7:39:e8:1d:6a:9f:b5:27:82:1a:e3:32:
32:52:f8:d2:8d:d2:3a:10:bc:41:9f:ee:94:22:32:
b5:dc:1c:12:b5:8a:85:6e:22:cb:b6:22:a1:01:50:
c5:04:86:6d:7f:a8:6e:fc:56:2e:10:ea:09:2f:3a:
d8:82:5c:e0:1e:87:33:15:4d:d3:07:b5:2a:79:c2:
cd:db:0c:99:ff:0e:33:70:04:bb:64:78:8a:2c:2f:
0d:5b:82:d5:b6:38:38:6f:03:7a:c7:7b:d3:6b:33:
a9:71:26:20:ed:bd:53:00:02:46:1a:fd:31:05:d8:
ca:72:6b:d9:fa:9f:c6:64:89:10:b6:04:80:50:a5:
6b:a6:c3:67:8b:5a:4c:dd:90:fd:36:a7:08:b3:ff:
57:bf:61:91:3b:5e:6e:e5:3b:e4:02:b9:b4:23:1b:
39:1d:36:47:14:a0:4c:d1:53:80:6e:2e:df:b7:6d:
3e:3c:d6:dd:64:ec:c6:8f:4a:fa:28:f6:21:86:23:
26:43:e4:ef:81:62:62:f1:2c:82:2c:b2:69:f5:5b:
92:31:9a:f5:a8:0d:13:ac:5d:36:1b:1d:af:20:e7:
08:ef:37:95:15:b0:5b:fb:b0:37:96:a2:fd:21:4f:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:37:F1:80:1F:24:C9:CD:59:DD:EA:30:03:7D:4C:3C:EB:50:F8
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:61:ca:35:32:c3:f0:73:7b:13:a3:8d:ab:ee:15:0f:49:
1b:7f:14:8a:a0:a1:01:15:67:08:16:f8:60:d7:cd:a9:d2:a1:
0a:2b:48:88:1e:07:42:62:b4:ad:9d:ee:30:2b:8a:67:50:f0:
87:98:01:02:75:45:5f:ea:f5:fc:bf:4b:e8:72:1c:21:10:0e:
ff:d1:39:a4:34:a0:23:1a:64:35:bf:dd:a6:d5:b0:f5:1f:6b:
9f:c8:e2:2e:48:a2:b2:21:ca:eb:57:3a:bf:ac:22:69:4e:40:
fa:a3:f2:c5:fb:c3:dc:8f:4f:16:41:bc:a5:c3:94:2d:d9:71:
48:02:fd:e5:38:b1:42:28:b4:58:f4:6c:3d:8d:dd:2b:8d:91:
16:16:68:57:2b:cd:7f:13:9d:40:ae:8d:38:b3:0b:58:8c:fd:
4a:bd:17:b0:dd:07:a9:32:64:de:0b:98:b3:9f:d3:06:3d:d5:
60:0c:95:ee:2f:fd:37:71:48:e4:ee:d0:7a:38:03:c3:57:0e:
a3:15:8e:71:10:7c:17:14:fe:16:16:d1:1f:b7:ee:d3:2d:cb:
b9:1b:eb:04:c5:99:aa:42:23:2a:4a:0e:4f:18:b7:f9:3c:4b:
be:46:13:df:3a:68:16:ba:2e:07:13:16:32:51:72:ab:2d:b3:
5b:3f:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:15 2026 by rpki-client