Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
File: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft (raw, json)
Hash identifier: j4XyPuUOVss2/+h2QZMaEsu9eC/eUczD3HjEyA/WrNU=
Subject key identifier: 97:9A:98:9B:D8:24:42:9A:C4:CB:3F:8C:17:0A:4B:B1:86:50:86:27
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Certificate issuer: /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial: 019F90C774DD4F34575F20CCFA71074C6CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
Manifest number: 1156
Signing time: Thu 23 Jul 2026 21:00:18 +0000
Manifest this update: Thu 23 Jul 2026 21:00:18 +0000
Manifest next update: Fri 24 Jul 2026 21:00:18 +0000
Files and hashes: 1: 2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl (hash: sBk+KYxe6lMpnaaoA+KMY3pHxtoAHC01AO47ZU/hSKg=)
2: XGXdZuWArU8DUaMKbDMpc7L7WG4.roa (hash: b1uv3hiq3QuqB6rWvknFaAIJIJ6UZQWlgoHNYzcvoDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:74:dd:4f:34:57:5f:20:cc:fa:71:07:4c:6c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Validity
Not Before: Jul 23 21:00:18 2026 GMT
Not After : Jul 24 21:00:18 2026 GMT
Subject: CN=979a989bd824429ac4cb3f8c170a4bb186508627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:e3:80:d7:d3:c1:16:72:dc:de:3f:5e:fe:
2b:73:23:37:5d:44:e7:df:ad:a9:e9:03:51:64:06:
7b:8f:01:3d:cf:92:0c:db:c8:61:59:81:b8:e2:e3:
25:82:fe:d3:d4:cd:57:3a:25:49:bf:81:fe:c0:dc:
1d:fc:a5:d0:93:18:38:01:17:e8:58:f1:c2:3b:5a:
2f:90:d1:57:73:76:41:e1:2e:a6:a7:e6:ee:66:52:
cc:2f:92:8c:05:b5:0a:e9:35:d4:fb:ca:b4:9e:fd:
c5:b5:76:e3:f9:7e:6d:c6:1f:53:db:e8:76:09:fe:
2d:e8:55:28:de:fb:8e:04:2d:31:a1:c1:65:d5:0a:
ee:79:16:cd:70:da:c0:c1:c1:5b:66:ee:79:d3:78:
52:23:61:0a:21:2a:fd:bc:d5:ed:b9:25:9a:c2:b7:
ca:0f:57:80:a1:eb:36:11:2b:1b:3a:af:f4:73:47:
33:f0:b6:bc:e6:ef:27:bc:d4:71:a0:90:52:92:a5:
1e:b7:98:54:bb:b1:a4:06:11:ee:03:81:40:31:68:
37:84:ff:f3:b0:bb:fb:f6:ed:6c:69:f0:dc:d9:23:
70:df:22:de:13:a2:3f:2e:4a:88:cb:7d:c0:be:7a:
87:11:8b:eb:d7:9d:69:be:46:30:39:60:b9:b0:8e:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:98:9B:D8:24:42:9A:C4:CB:3F:8C:17:0A:4B:B1:86:50:86:27
X509v3 Authority Key Identifier:
keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8a:bc:bc:e1:ac:59:4f:9e:14:8a:3d:c5:ca:d4:cf:11:5c:
22:2e:36:68:11:4b:82:06:23:12:84:22:c6:83:dc:f3:85:c0:
8b:c4:28:4b:cf:c3:b3:44:f9:fa:71:ab:77:06:70:55:97:78:
47:ce:e7:4a:f8:a2:be:a6:dd:56:59:ec:c0:4c:39:c2:3a:50:
0f:70:58:36:9a:5e:6c:7b:84:70:43:74:bf:33:c7:77:fd:bf:
3b:58:59:eb:60:2d:1e:af:f2:71:8a:d4:05:80:ee:89:7b:9f:
60:31:f4:b8:66:88:6d:44:de:ce:da:7a:09:be:3f:05:f4:6a:
f6:3f:40:40:0a:c0:f7:17:b2:e1:62:78:e6:c8:89:1d:5e:1c:
14:87:67:83:45:f7:73:9f:41:29:e5:81:1a:2c:ea:b4:1e:65:
8e:e2:eb:51:87:ca:c1:65:fc:b6:6d:c3:df:81:e1:3d:60:84:
1f:ac:30:5f:9c:47:e3:fc:8f:ad:fa:aa:2a:f4:e1:93:2b:17:
a1:59:f6:37:69:ac:23:80:17:c4:51:32:12:40:32:1e:2b:4f:
62:97:f4:35:dd:bf:0f:28:8e:c9:3b:58:f7:38:10:da:51:30:
33:f8:b6:9c:74:ad:b0:a2:0f:e7:fa:a6:4f:87:64:08:22:70:
e9:6f:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:40 2026 by rpki-client