Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
File: 2C4TD2tr3205KA43XfNE5uCjSzw.mft (raw, json)
Hash identifier: bW92uhvGw8cnUjSfgzA3/oeTLuPBgeGzzLYpLzJm6fc=
Subject key identifier: 1D:2F:0B:A1:A9:B8:DE:DE:A9:FA:DE:83:06:86:19:4F:DF:7C:70:F0
Authority key identifier: D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
Certificate issuer: /CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Certificate serial: 019F905A48E6241C93F59BEF12FCEAE6E152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:01:03 +0000
Manifest this update: Thu 23 Jul 2026 19:01:03 +0000
Manifest next update: Fri 24 Jul 2026 19:01:03 +0000
Files and hashes: 1: 2C4TD2tr3205KA43XfNE5uCjSzw.crl (hash: hWSwNuV8N3fhxDtkVo/4NzYUk6JXdOPaDJBRblo7w3w=)
2: 3ZLc8PtVozm-eNgGoAQOIa_oVE8.roa (hash: KwhZKW2lEh+jd+kB9cN/6tlHTLzCCYETic1USeu5gbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:48:e6:24:1c:93:f5:9b:ef:12:fc:ea:e6:e1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d82e130f6b6bdf6d39280e375df344e6e0a34b3c
Validity
Not Before: Jul 23 19:01:03 2026 GMT
Not After : Jul 24 19:01:03 2026 GMT
Subject: CN=1d2f0ba1a9b8dedea9fade830686194fdf7c70f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:39:01:a9:ad:6f:00:4f:7b:12:e5:da:9d:
8a:ee:b0:c3:ec:e6:78:1f:d3:f2:cd:4c:7e:89:ce:
64:f2:b9:9e:e7:b5:8f:8f:e3:53:89:57:c0:bc:72:
c1:8d:76:b9:47:9b:3f:ff:9d:31:5e:e1:61:92:d2:
27:43:57:c2:eb:92:ad:66:93:e1:e2:7d:27:3d:60:
0d:79:66:aa:60:e2:24:7c:c4:a7:15:55:0d:7b:06:
31:ec:84:10:53:fa:a2:d8:ce:73:32:13:5f:a2:41:
4c:de:f5:da:72:cf:2d:c9:9a:4a:34:a1:d4:72:a7:
c5:0d:9e:d5:5c:9a:27:f4:22:db:d2:bc:3a:10:30:
09:93:85:4d:29:b8:3e:e4:a1:56:db:0b:ab:2d:1b:
ac:3f:5d:66:23:60:6b:57:7c:12:21:30:e4:2f:a7:
ed:36:bb:bd:f9:28:96:ce:0a:ed:1f:95:64:2f:09:
27:3c:96:73:69:12:25:3e:68:89:a9:3f:e4:b5:8b:
54:84:cf:b5:3f:b4:d9:f7:b0:17:a4:df:28:0f:53:
6d:6f:15:da:3b:da:6c:f1:be:6d:6f:d3:fd:58:69:
95:2c:85:bd:2c:58:de:08:47:c2:b0:c0:72:3f:8d:
56:12:40:8c:22:c1:17:62:2c:02:3a:4a:9e:d9:2f:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:0B:A1:A9:B8:DE:DE:A9:FA:DE:83:06:86:19:4F:DF:7C:70:F0
X509v3 Authority Key Identifier:
keyid:D8:2E:13:0F:6B:6B:DF:6D:39:28:0E:37:5D:F3:44:E6:E0:A3:4B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2C4TD2tr3205KA43XfNE5uCjSzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2daf04-4f76-4333-abf0-238e0b7ae284/1/2C4TD2tr3205KA43XfNE5uCjSzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:3c:ba:72:c8:76:5a:30:9c:b2:7a:a1:9e:f2:f4:06:f5:
ba:aa:a7:28:4b:ff:2f:aa:b1:18:8e:ed:99:b3:fc:0e:65:5d:
69:b5:4d:12:af:e3:3a:43:32:9d:96:48:29:86:8a:6f:33:53:
dd:07:f8:1e:37:02:b6:21:06:f2:78:2e:a6:54:33:75:2e:94:
45:d0:d7:dc:18:11:6e:81:97:ec:20:6c:78:6b:be:16:37:7b:
53:ee:cd:d3:a2:6c:3e:07:be:60:ac:ce:f4:39:f7:43:f8:ef:
a8:8d:06:a5:08:59:07:b9:78:fd:a2:ef:63:93:1d:a6:ae:69:
cc:9e:07:8b:1c:f7:30:0b:e2:c0:11:8c:0d:07:f1:67:2c:8f:
b6:95:43:74:41:34:e7:86:68:1c:55:c6:39:99:73:de:1a:b3:
e1:1c:a0:aa:35:b2:22:a0:01:f0:2b:71:52:03:b3:50:ac:ab:
7d:42:56:cc:a9:fa:cb:10:9e:ea:be:83:26:d6:fd:0d:84:d2:
82:91:d3:25:86:f8:44:74:2c:67:b1:91:24:42:0a:6a:65:ca:
3f:ef:e5:bb:a0:c2:fb:64:63:7d:38:f4:09:57:9b:e4:d5:ee:
5a:88:a1:a7:ef:b1:d3:c5:60:b1:b1:4c:ee:f2:23:b5:02:5c:
09:fb:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:24 2026 by rpki-client