Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: rrn4+j10osMr0U6owmvyyyzPkW2hDekcjemRGnZDk7E=
Subject key identifier: 1F:90:81:37:80:AF:D8:6D:F8:9A:A1:C7:D2:12:83:BB:46:9D:90:A2
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 019F90FE8EB9D37D3AD50F8782D38A7AA687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0F75
Signing time: Thu 23 Jul 2026 22:00:29 +0000
Manifest this update: Thu 23 Jul 2026 22:00:29 +0000
Manifest next update: Fri 24 Jul 2026 22:00:29 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: Eq9DC+wRjxML9QLtHgo7riUsqREoUfoyXliLC64pPMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:8e:b9:d3:7d:3a:d5:0f:87:82:d3:8a:7a:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Jul 23 22:00:29 2026 GMT
Not After : Jul 24 22:00:29 2026 GMT
Subject: CN=1f90813780afd86df89aa1c7d21283bb469d90a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:9f:e2:84:b1:d0:1a:61:fc:42:10:62:73:
6a:e4:9b:de:7b:89:e5:5f:75:e2:ac:e4:11:d4:f5:
44:56:70:2b:d6:6a:30:2c:8c:03:55:24:d0:6a:a1:
7c:f7:a9:7d:40:47:05:e5:7c:bb:63:91:70:35:d3:
fc:89:04:1b:13:1a:6e:29:15:d3:94:28:d7:e3:df:
db:b1:d4:53:ce:96:3a:cd:a2:f4:f6:8c:e7:07:9e:
b9:51:37:8e:7d:43:ad:18:1f:59:7d:8a:36:8e:0e:
65:53:64:46:ce:f4:c7:b1:19:2d:c4:d8:41:93:9f:
a2:95:14:6f:ac:45:88:d3:ba:6e:ac:57:69:62:3e:
d0:e0:f2:44:9a:d7:22:69:85:9d:fa:13:6d:c0:36:
6e:8d:cc:0a:e2:3f:38:bb:6f:cf:1f:aa:5d:92:83:
af:a9:f6:29:a4:33:76:94:f5:5a:32:c2:2e:dd:5c:
4b:d0:d9:e9:d4:49:f2:25:7b:94:39:2a:ce:56:af:
d0:6e:4a:7e:17:41:ca:45:41:77:62:9c:65:2e:36:
b1:34:73:fb:4b:b4:dd:00:79:07:f5:34:fa:7e:07:
1d:a7:4c:ce:8f:81:4e:74:5e:50:a6:c9:6a:1d:aa:
f4:fc:ef:e7:03:10:f0:2b:13:34:18:9b:c5:1f:4d:
7e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:81:37:80:AF:D8:6D:F8:9A:A1:C7:D2:12:83:BB:46:9D:90:A2
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:ee:b4:d7:b3:1c:3f:a8:62:ef:13:ff:d1:08:46:94:f4:
f7:cf:ad:34:e2:ff:f2:8f:12:c9:9d:d9:44:75:d1:18:60:45:
52:f0:aa:4c:52:06:a7:c8:85:9c:36:c1:43:7d:d1:29:2e:ed:
64:cd:46:c0:a0:39:60:5c:c7:24:34:e9:cf:0a:c6:ca:bb:9e:
b8:67:64:7f:6c:b8:11:bc:02:8f:d2:44:26:f1:aa:f4:8c:35:
27:18:f8:d1:a8:2c:0a:8b:43:8c:09:4c:b4:a3:0e:31:51:7e:
6c:d9:cc:a2:fa:84:8d:7a:d1:de:82:26:e2:a6:1e:e0:a6:8f:
23:07:21:da:2b:b8:ef:41:de:50:14:a3:8e:5a:ce:ff:80:a1:
d6:d1:b7:3f:1d:0b:7c:10:aa:6f:a7:c2:ee:bb:93:12:9b:7d:
d5:50:2f:1a:86:89:17:1a:c3:9d:16:9d:53:ec:d5:b4:02:96:
d8:89:3d:18:58:bb:7c:d0:40:50:09:48:1f:22:1c:b1:ef:2d:
9e:2d:9d:19:b9:04:16:68:9e:61:1e:da:84:cc:27:ac:5c:12:
38:e8:d7:d7:96:9a:66:5b:b5:c8:49:90:d2:0a:e8:d5:cd:e8:
4b:90:0e:c3:2b:d7:cc:5b:b1:0b:70:28:03:5d:55:ed:41:7d:
aa:a2:07:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:39 2026 by rpki-client