Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
File: 2nGl-6KA1tAY7MOp1-WMPGEeav0.mft (raw, json)
Hash identifier: 3TXh27wk7wxtdtgWFJ/Uu2sSC6JF1qbTCKaxAf2RaRU=
Subject key identifier: 79:D1:9A:4C:66:6D:17:47:CB:92:49:7B:46:C7:03:E6:EA:F5:E0:9E
Authority key identifier: DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
Certificate issuer: /CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Certificate serial: 019F94DB3204434F2DF205B95159703A4875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 16:00:20 +0000
Manifest this update: Fri 24 Jul 2026 16:00:20 +0000
Manifest next update: Sat 25 Jul 2026 16:00:20 +0000
Files and hashes: 1: 2nGl-6KA1tAY7MOp1-WMPGEeav0.crl (hash: HzZfBZcuu28oSIqp7UXM6QhqbXVUkH9jlxK/zB/pIU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:32:04:43:4f:2d:f2:05:b9:51:59:70:3a:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Validity
Not Before: Jul 24 16:00:20 2026 GMT
Not After : Jul 25 16:00:20 2026 GMT
Subject: CN=79d19a4c666d1747cb92497b46c703e6eaf5e09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:28:57:25:30:b7:8c:f8:7a:06:08:71:d1:
cf:2c:44:5d:df:e6:ff:6d:9f:7e:66:73:d3:72:f8:
ae:49:1b:bb:ff:4d:3e:18:62:ff:06:5a:12:65:4f:
e8:6c:0a:1c:1a:54:ce:06:42:69:80:c2:e2:44:be:
c2:00:c9:9e:79:0d:9b:f2:62:ca:83:4c:53:27:25:
c6:e6:98:aa:d3:e2:7f:13:50:12:5a:83:6b:aa:41:
39:34:08:9e:f2:8b:80:86:71:aa:9a:0b:f5:6a:ac:
bd:17:9d:c1:64:b4:56:fe:e7:1f:f7:7b:37:b7:ed:
ce:45:03:b9:27:a9:09:f4:0b:ea:91:73:1f:ff:54:
91:ba:e0:d0:0b:81:c5:b0:e8:75:97:c9:a7:37:98:
d3:a9:7c:5d:a0:88:a3:80:23:68:a0:55:21:93:61:
6b:fe:4e:e3:10:87:f3:42:7c:e3:a0:c9:3e:fd:a3:
53:e6:03:74:8a:b2:c0:dd:43:a5:27:86:3c:a6:34:
ba:c8:55:5d:2c:00:d3:e7:b4:28:ad:91:a7:d7:46:
90:28:8d:81:e1:5a:c3:4d:72:3e:14:8c:47:c3:cb:
d5:7f:db:7e:7c:5d:66:86:37:d3:33:35:a8:45:16:
dc:92:94:0a:80:db:ad:43:8b:12:df:36:35:c9:68:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:9A:4C:66:6D:17:47:CB:92:49:7B:46:C7:03:E6:EA:F5:E0:9E
X509v3 Authority Key Identifier:
keyid:DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3b:40:9c:66:9e:b5:d2:e8:c7:45:d1:84:26:68:21:c0:1a:
d2:36:73:71:03:55:1f:28:4c:70:2e:e0:9b:87:b1:58:24:93:
2f:a7:42:c7:b2:15:f2:42:e2:4d:15:63:19:62:a9:aa:b1:34:
b6:40:b0:ba:07:6b:dc:67:41:49:fc:13:70:5e:94:5e:33:23:
36:35:4f:5c:76:1c:03:7f:c2:c3:b4:33:a6:d5:b8:f6:26:44:
db:b8:29:d9:c1:5f:1f:d4:b0:4d:4c:77:4f:24:be:5c:84:9d:
08:12:b9:bd:ab:ab:9d:ec:4a:ec:94:1e:b4:ba:a5:c1:e1:12:
65:67:0f:47:06:8d:09:0f:8c:01:1b:52:0f:33:29:e1:84:59:
6a:b0:4d:c0:83:3a:7a:70:21:41:82:75:59:2a:bf:c7:d4:4f:
2e:8f:d8:f1:29:7c:3c:eb:2b:43:73:7e:4f:a5:4f:15:5f:05:
ac:5a:01:0a:16:4c:75:f0:ee:db:d6:2c:01:84:e2:7e:e4:e0:
47:7f:d9:85:16:25:f6:58:3a:17:c1:7f:78:da:67:5d:30:97:
da:31:b4:1b:20:67:15:3a:97:32:5b:4a:2a:79:ea:d3:9b:bf:
bb:b5:ae:09:0a:ef:2f:95:82:33:31:32:a2:fd:68:4c:82:fd:
57:8e:37:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U2zIEQ08t8gW5UVlwOkh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzFhNWZiYTI4MGQ2ZDAxOGVjYzNhOWQ3ZTU4YzNjNjEx
ZTZhZmQwHhcNMjYwNzI0MTYwMDIwWhcNMjYwNzI1MTYwMDIwWjAzMTEwLwYDVQQD
Eyg3OWQxOWE0YzY2NmQxNzQ3Y2I5MjQ5N2I0NmM3MDNlNmVhZjVlMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CAoVyUwt4z4egYIcdHPLERd3+b/
bZ9+ZnPTcviuSRu7/00+GGL/BloSZU/obAocGlTOBkJpgMLiRL7CAMmeeQ2b8mLK
g0xTJyXG5piq0+J/E1ASWoNrqkE5NAie8ouAhnGqmgv1aqy9F53BZLRW/ucf93s3
t+3ORQO5J6kJ9AvqkXMf/1SRuuDQC4HFsOh1l8mnN5jTqXxdoIijgCNooFUhk2Fr
/k7jEIfzQnzjoMk+/aNT5gN0irLA3UOlJ4Y8pjS6yFVdLADT57QorZGn10aQKI2B
4VrDTXI+FIxHw8vVf9t+fF1mhjfTMzWoRRbckpQKgNutQ4sS3zY1yWhxywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnRmkxmbRdHy5JJe0bHA+bq9eCeMB8GA1UdIwQY
MBaAFNpxpfuigNbQGOzDqdfljDxhHmr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5HbC02S0ExdEFZN01PcDEtV01QR0VlYXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8yNDI2OTItYTA1MC00NzgzLThmN2Yt
NGMyNDBhOTczZDFlLzEvMm5HbC02S0ExdEFZN01PcDEtV01QR0VlYXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8yNDI2OTItYTA1MC00NzgzLThmN2YtNGMyNDBhOTczZDFl
LzEvMm5HbC02S0ExdEFZN01PcDEtV01QR0VlYXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTtAnGae
tdLox0XRhCZoIcAa0jZzcQNVHyhMcC7gm4exWCSTL6dCx7IV8kLiTRVjGWKpqrE0
tkCwugdr3GdBSfwTcF6UXjMjNjVPXHYcA3/Cw7QzptW49iZE27gp2cFfH9SwTUx3
TyS+XISdCBK5vaurnexK7JQetLqlweESZWcPRwaNCQ+MARtSDzMp4YRZarBNwIM6
enAhQYJ1WSq/x9RPLo/Y8Sl8POsrQ3N+T6VPFV8FrFoBChZMdfDu29YsAYTifuTg
R3/ZhRYl9lg6F8F/eNpnXTCX2jG0GyBnFTqXMltKKnnq05u/u7WuCQrvL5WCMzEy
ov1oTIL9V443tg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:16:14 2026 by rpki-client