Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
File: 2GchBXUrmCF00QQMEDgXVwuNNNY.mft (raw, json)
Hash identifier: YC5XlQUOVbY4iz8ZYSht9Nel53GwWWwo2cj1V4Zrnzk=
Subject key identifier: AD:3F:38:71:C2:0E:47:2D:A0:F8:F3:81:64:4C:B9:77:47:DD:B0:E7
Authority key identifier: D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
Certificate issuer: /CN=d8672105752b982174d1040c103817570b8d34d6
Certificate serial: 019F9090C411198A33525371D33F450ED417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
Manifest number: 182A
Signing time: Thu 23 Jul 2026 20:00:34 +0000
Manifest this update: Thu 23 Jul 2026 20:00:34 +0000
Manifest next update: Fri 24 Jul 2026 20:00:34 +0000
Files and hashes: 1: 2GchBXUrmCF00QQMEDgXVwuNNNY.crl (hash: ZAtDGvb6LpqFQXlXcLtD/rLeZSBa+qYWN3k4Nr1yEOQ=)
2: PY5sdU0kADgfJHW2XFZw0dgHeu0.roa (hash: WIfT5DY5Ccg3dpUdIFTpUWfqc0ig1ZlT0tU43GrW37g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:c4:11:19:8a:33:52:53:71:d3:3f:45:0e:d4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8672105752b982174d1040c103817570b8d34d6
Validity
Not Before: Jul 23 20:00:34 2026 GMT
Not After : Jul 24 20:00:34 2026 GMT
Subject: CN=ad3f3871c20e472da0f8f381644cb97747ddb0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f2:da:a1:91:5e:09:1d:a4:a3:16:99:a5:d4:
09:df:86:8f:9f:8b:3b:b5:6f:0f:7e:b2:53:ef:27:
33:2a:2a:20:e6:7b:79:3a:a3:58:a7:85:29:da:e1:
ce:c0:97:ed:86:65:cf:4d:32:77:ab:05:4e:ef:1b:
f3:8f:79:67:2a:94:cd:db:3a:77:b3:7a:7e:cb:da:
98:65:78:5c:01:61:ff:cd:92:b7:3d:35:f3:65:3c:
2b:6c:8b:59:c3:47:62:02:45:bd:6a:53:d7:b0:5a:
d7:1b:e3:24:f1:ef:3d:7f:04:46:40:75:2f:03:20:
1d:96:22:27:9a:64:79:4f:4b:2c:a5:3d:b8:ec:77:
3f:97:46:da:2c:67:92:95:0a:a0:67:76:fe:01:db:
8a:19:4f:6b:6f:f7:37:13:9f:55:ce:89:35:ba:4c:
3c:80:19:05:0e:a8:b7:33:85:0d:98:4c:25:be:22:
ab:15:c7:71:63:0d:3f:b0:11:dd:0a:9e:25:68:25:
eb:44:a3:43:61:de:23:e2:dd:4a:d0:76:6d:4d:03:
8d:bc:a8:00:16:37:b8:5b:7c:36:5f:16:5b:87:02:
97:b1:af:ea:ae:a3:f0:64:de:d5:6c:17:6e:8b:8b:
78:37:fd:57:fa:f1:84:e8:df:7a:38:ff:12:e6:4c:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:38:71:C2:0E:47:2D:A0:F8:F3:81:64:4C:B9:77:47:DD:B0:E7
X509v3 Authority Key Identifier:
keyid:D8:67:21:05:75:2B:98:21:74:D1:04:0C:10:38:17:57:0B:8D:34:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GchBXUrmCF00QQMEDgXVwuNNNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e732f4-be84-429b-a18e-1518a733f970/1/2GchBXUrmCF00QQMEDgXVwuNNNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:8d:a7:43:3a:f6:78:3a:5c:ac:3d:19:44:22:44:79:5b:
ad:4e:c2:46:e8:c3:43:bd:d3:cd:f6:15:df:3f:30:b1:19:fa:
16:20:99:c0:ea:a8:e4:c7:54:46:48:d7:dd:69:71:2e:28:1c:
29:da:e7:3a:9c:47:78:dc:b6:10:94:e4:2d:f4:58:2e:37:ad:
63:e6:7f:82:2f:b9:fb:5f:94:09:9c:9f:99:87:f1:4b:99:dd:
e3:24:34:66:30:4e:11:9d:2d:94:6a:82:ae:07:a3:c7:48:7f:
9c:fd:10:b0:e5:94:e6:72:b4:10:54:54:4e:fa:e5:68:cd:07:
42:a7:5f:35:32:c3:fa:0a:b2:76:c5:97:c1:a9:c4:dd:56:f2:
f0:5e:ad:ed:00:bb:5a:1c:1f:cc:01:f6:41:57:22:9b:60:39:
fc:0b:85:d6:04:cd:6c:65:69:a4:9e:cb:1d:9f:06:ab:7a:9f:
d9:3a:56:88:ac:bc:48:77:3f:ae:a2:a8:06:b1:9c:8f:df:86:
ed:4a:c9:7c:7e:4d:13:af:fa:1c:85:92:26:7a:45:b1:61:10:
c8:7e:c0:1f:4a:12:5e:e9:2b:5b:c0:fc:87:ec:6e:28:f3:d5:
bb:29:11:3e:8c:8a:a7:04:56:c1:3d:cc:cf:de:23:03:9d:82:
4d:b2:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:52 2026 by rpki-client