Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
File: 2geeQ_xybhZVyKdVVPX7wYsgRUU.mft (raw, json)
Hash identifier: WFstvNFFzknan15z6M5n6APWA/Ietb9vbDcz6F2HA3g=
Subject key identifier: 61:9C:CB:C4:FA:40:B1:08:A5:69:CE:81:5E:6D:5C:1C:8C:E2:3D:41
Authority key identifier: DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
Certificate issuer: /CN=da079e43fc726e1655c8a75554f5fbc18b204545
Certificate serial: 019F935ADB0DE685B3FC62B2E9E7490B291F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:32 +0000
Manifest this update: Fri 24 Jul 2026 09:00:32 +0000
Manifest next update: Sat 25 Jul 2026 09:00:32 +0000
Files and hashes: 1: 2geeQ_xybhZVyKdVVPX7wYsgRUU.crl (hash: vrIJUvgCtufYIoUtrYpcgl3VXOKnDrmMmXze1HRXXvk=)
2: FlcKU6fgetOtnEKSXy7Xf5nYaRY.roa (hash: 36QLoZ8Ws2gB6YZ/mvzOniygiDV4ui/NvR252z7lSOc=)
3: a0n0eRt_zXRSqiGHwwetMEUhQkk.roa (hash: Iq1Hfa0PK/01Z2qiRH7cJQnXiwjnNSuA2bLHyqY6DfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:db:0d:e6:85:b3:fc:62:b2:e9:e7:49:0b:29:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da079e43fc726e1655c8a75554f5fbc18b204545
Validity
Not Before: Jul 24 09:00:32 2026 GMT
Not After : Jul 25 09:00:32 2026 GMT
Subject: CN=619ccbc4fa40b108a569ce815e6d5c1c8ce23d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:0f:b9:dc:92:4d:fc:57:23:4d:7e:61:44:
37:35:02:27:ae:c6:d7:73:2c:82:75:7b:ec:55:a9:
90:9d:32:ab:c3:8f:84:2d:00:f0:2b:ab:11:7b:2e:
48:e2:8c:6a:c4:ac:78:45:c9:f3:b5:09:9d:c1:44:
f2:1c:97:4f:e7:28:72:f4:03:46:0b:1b:f2:cb:1e:
bc:52:12:82:87:f4:c2:7b:3d:5f:69:aa:3e:95:a6:
1d:ca:d1:29:b9:68:48:d2:e2:88:11:9f:bb:26:b5:
ae:3b:fc:bb:64:7b:36:9c:07:e4:a9:88:0a:ee:da:
36:47:42:48:9f:0c:e6:e0:71:d4:67:8c:9f:6b:0d:
ed:1b:72:4e:e6:ca:0f:2f:45:f3:12:b1:cb:67:b4:
f0:5a:8f:47:83:af:0f:8f:5c:1b:42:9b:7f:ab:aa:
ad:a5:1e:9a:a5:7d:d2:82:71:5c:c9:ae:62:5d:ae:
be:6c:a9:4a:88:7f:22:c3:4d:68:8d:e9:22:b0:62:
39:9e:17:4e:6c:87:3e:e7:48:76:36:53:e0:c2:b8:
ca:3e:dc:d7:b3:d1:18:21:0a:6a:c6:7b:28:52:c1:
6f:44:70:b3:f3:00:f5:7c:1a:37:b2:81:25:41:f1:
36:4d:c5:83:7e:c1:11:07:1a:38:cd:ad:96:3e:9a:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:CB:C4:FA:40:B1:08:A5:69:CE:81:5E:6D:5C:1C:8C:E2:3D:41
X509v3 Authority Key Identifier:
keyid:DA:07:9E:43:FC:72:6E:16:55:C8:A7:55:54:F5:FB:C1:8B:20:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2geeQ_xybhZVyKdVVPX7wYsgRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/2geeQ_xybhZVyKdVVPX7wYsgRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:0e:48:3a:75:15:9a:9d:9e:46:37:39:99:44:2c:e7:4a:
96:f2:d0:68:5e:90:d4:a8:74:eb:b1:47:ca:ea:b2:37:87:a4:
8b:11:b4:e7:a8:33:e4:d9:1b:97:e3:87:c2:6f:95:ef:78:56:
d8:ae:4d:74:b6:ee:c6:3b:12:b4:18:33:e4:b1:cf:54:49:49:
97:29:69:e2:bd:32:11:95:ed:d5:30:37:fa:af:55:6f:23:c3:
ce:d0:05:78:ae:e1:42:4a:aa:e0:8b:44:b5:ce:96:76:f9:9b:
61:84:d5:ad:73:52:29:46:92:ae:78:d1:21:69:f3:38:3a:53:
09:0c:53:ad:d3:80:a1:26:d2:b4:6f:ad:7a:6a:1d:6d:75:fa:
fa:6c:ed:29:c3:43:af:6c:ff:fc:0b:25:97:18:6c:8a:91:e4:
62:ed:ea:75:b4:a7:5d:f5:d2:1a:9b:9d:51:53:84:a3:0f:d6:
ab:85:a8:22:66:dc:41:71:49:4e:50:6c:43:91:da:ca:6e:2e:
df:59:4d:4c:ad:57:29:27:88:db:8e:78:2e:0f:64:17:e4:b1:
d9:cf:db:81:3a:94:5f:72:a7:13:38:70:75:dd:c5:85:9d:f9:
97:fa:79:5a:94:c3:03:1a:d9:5c:b0:45:65:4b:f0:fe:55:d1:
ee:12:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:04 2026 by rpki-client