Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: fqdVk6nBP+1/Wr5xPGa1E30hdCccdIgr1WnPEo8P08k=
Subject key identifier: 2B:A3:EE:1F:6E:FF:02:C4:68:03:0C:A6:E1:85:54:2B:C9:CE:FD:FF
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 019F91A3B8B1F1F790D86E1015FA6C248FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 01:00:53 +0000
Manifest this update: Fri 24 Jul 2026 01:00:53 +0000
Manifest next update: Sat 25 Jul 2026 01:00:53 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: TYlf4ACDsZEsvup/0dydv13EdlcfMey/Ngyb8wdtEA8=)
2: HujP5oxDHEZ2MVstDarPw90xFho.roa (hash: Rtz75ia9hRYxUyKU/WYQCS4cTOjYI+UMK2+4B6YVksE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:b8:b1:f1:f7:90:d8:6e:10:15:fa:6c:24:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Jul 24 01:00:53 2026 GMT
Not After : Jul 25 01:00:53 2026 GMT
Subject: CN=2ba3ee1f6eff02c468030ca6e185542bc9cefdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:63:6e:dc:45:ad:90:60:75:92:a6:06:57:
c4:d6:b5:3a:47:e8:c2:df:4e:87:cb:2b:dd:1d:78:
23:1c:f9:9c:aa:5c:1c:3b:b4:60:f0:74:26:67:36:
59:9e:3c:b6:c4:9d:c1:f3:c3:bf:84:8c:2f:5d:26:
6f:57:eb:3b:be:fd:16:80:a0:39:dc:75:ab:09:60:
46:40:63:0a:bb:66:d2:d5:b0:b3:c6:50:f4:20:63:
76:d1:b1:9a:77:dd:68:58:61:2b:8f:bf:a2:51:66:
d8:3e:1d:26:84:c1:14:90:ad:2b:7c:6b:c5:26:41:
5b:0e:cd:55:98:d0:49:be:19:f6:6c:37:91:a3:03:
f2:33:14:38:f4:b7:e4:96:69:d5:d9:08:47:a4:1d:
13:a8:df:90:30:a5:99:88:5d:2e:8c:c8:41:fb:8a:
8e:4d:38:d1:1a:7b:02:86:7d:33:b1:ea:c3:d1:11:
7b:d9:26:07:2a:28:ac:b4:87:64:e6:8a:e3:48:7a:
89:c9:2d:f5:21:c6:b6:5f:0d:99:8e:4d:39:5b:e5:
6c:8c:a1:29:24:e8:04:3f:32:26:bc:32:61:1e:c8:
06:fd:d8:62:be:e1:4b:2e:69:d3:0d:06:73:b9:11:
ef:14:ba:0d:cc:04:20:21:95:db:51:5f:7d:0d:8e:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A3:EE:1F:6E:FF:02:C4:68:03:0C:A6:E1:85:54:2B:C9:CE:FD:FF
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0f:89:73:72:a8:60:78:ee:8d:fd:65:6d:ab:d1:fd:fa:93:
9b:fe:a5:dd:df:1f:73:f2:d0:e6:f9:5f:9f:cd:6f:b8:10:e3:
47:71:86:6d:ef:42:6b:92:f6:38:de:e0:46:d4:55:0b:ee:e7:
92:1f:be:11:21:3c:52:e4:52:3c:d2:45:e8:63:76:49:35:61:
67:65:99:70:77:02:88:c1:d8:df:23:43:97:4a:c9:8b:37:56:
2a:aa:9d:6b:51:a7:34:20:b5:50:f5:8e:40:06:70:31:c2:0f:
20:36:fa:96:c6:bd:41:80:22:33:a7:c1:ff:bf:77:a1:96:3f:
1f:b7:6b:6d:ce:1f:8c:50:ee:79:a6:5f:1f:9c:f4:0f:2b:39:
39:37:56:b1:44:4f:0b:e9:7b:de:a7:44:68:ba:4e:0c:62:9d:
12:ee:84:5c:d3:6b:9f:0f:bc:76:b1:6e:ab:ed:1e:c0:24:0c:
87:8e:45:74:f0:f3:23:ff:ec:b0:b7:d2:3d:c0:a7:c7:31:14:
a9:04:54:dc:74:cb:1a:71:af:65:97:db:94:fe:dd:23:81:d0:
1c:a9:9a:52:70:f4:43:93:c3:c5:88:fe:fe:44:5a:e8:13:97:
b8:83:77:37:32:ac:a5:85:55:95:ba:41:18:4b:c3:05:31:cd:
fa:e7:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:18 2026 by rpki-client