Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: dx6SALRuZFplIrpFjm9haCy/j3kaa3F/og7ZmbqvKV8=
Subject key identifier: 8C:CC:D5:66:C8:85:9C:EA:42:14:09:F6:D6:40:F6:9D:7E:97:9A:54
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019F9135477D99197333EAD21AC0E5682D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 23:00:15 +0000
Manifest this update: Thu 23 Jul 2026 23:00:15 +0000
Manifest next update: Fri 24 Jul 2026 23:00:15 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: gTbyxnsq1oa+jjBz5lLIvqe89W+xE3b/D39g+6EQ0Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:47:7d:99:19:73:33:ea:d2:1a:c0:e5:68:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Jul 23 23:00:15 2026 GMT
Not After : Jul 24 23:00:15 2026 GMT
Subject: CN=8cccd566c8859cea421409f6d640f69d7e979a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:05:b1:c7:76:9d:41:10:c5:32:be:a6:cd:
92:fc:72:c2:fd:f8:74:5c:d0:f9:0e:23:08:c6:7b:
c6:f3:00:c2:23:ea:c6:29:43:af:c3:e2:60:07:e4:
c3:a5:11:67:5a:32:3a:8d:d9:eb:f1:1b:12:e8:20:
6b:c3:51:5b:0d:76:34:31:38:02:23:54:cf:fe:50:
8c:60:4c:8b:7d:45:58:c9:4f:27:d5:4f:61:c8:f5:
f3:3b:d8:7d:01:98:0e:39:14:d3:03:c8:f0:f4:e9:
e9:51:75:58:a8:eb:ec:97:03:1a:8a:4d:61:9c:c1:
32:b3:4e:a0:f9:94:27:25:99:9f:12:42:0e:d4:a6:
7b:9c:c2:69:31:51:60:f4:d0:18:fd:3e:df:4a:83:
9a:b2:f0:c6:16:87:3b:59:ce:05:d5:d3:ae:4e:c8:
29:5b:64:66:a3:2e:c1:3e:80:68:e1:ec:78:5b:fc:
4b:3f:d8:2c:b2:a0:2b:6c:ea:8e:7f:cd:aa:74:a0:
69:22:ec:3a:13:d7:f6:f7:1d:c8:96:94:60:79:8a:
4b:78:65:40:9c:12:98:47:48:09:31:88:fd:4d:4e:
a2:35:f9:01:22:e2:a6:6a:93:23:2e:08:c6:a5:ca:
6d:40:3c:1f:d1:a6:3c:28:30:ac:30:b8:7c:cc:bf:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:D5:66:C8:85:9C:EA:42:14:09:F6:D6:40:F6:9D:7E:97:9A:54
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:de:94:35:b7:65:ed:16:13:bc:3e:9f:62:84:e0:af:7b:88:
3e:e1:1b:40:f0:5f:81:7b:7c:90:7f:47:a4:a5:d2:05:05:27:
a2:0e:10:a6:2f:0f:c3:0f:ac:a4:bb:f3:63:b0:35:9c:86:db:
bb:db:26:01:68:69:6f:15:e5:0c:60:2f:e0:4c:bf:02:0e:c9:
f4:87:a5:e4:c8:6a:68:00:c8:2c:cf:3a:3b:15:fb:57:e8:c1:
1d:b5:87:ff:2d:b8:22:f4:1f:5c:7a:aa:e3:07:88:7e:e5:59:
72:c4:5e:c5:49:bf:13:9a:98:48:58:90:76:ef:fa:bc:e7:cc:
74:d3:ba:44:ac:b7:2f:30:87:89:a4:79:22:e1:07:8e:e2:ae:
e3:82:1b:f7:fa:3b:e6:9f:e8:1b:74:ca:4c:f2:79:88:88:a4:
77:3d:27:af:0f:33:3e:73:79:81:02:23:12:94:b9:b8:b6:03:
5b:a5:84:5a:aa:3a:57:6b:24:38:af:22:b5:64:82:75:22:7e:
2e:44:e1:f9:da:b2:af:9c:1a:e0:96:e5:65:36:0e:19:8e:de:
65:6f:00:42:ca:5f:58:40:0a:d4:96:b4:a7:38:d4:a1:90:84:
e2:b8:46:03:0c:41:36:16:12:c2:3d:44:63:1e:20:70:b7:85:
9c:04:5e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNUd9mRlzM+rSGsDlaC2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWNmMzRiZTJiMDRjN2NjZWYyMjIxZThkMWZjYjZjYWJi
NDE1OTEwHhcNMjYwNzIzMjMwMDE1WhcNMjYwNzI0MjMwMDE1WjAzMTEwLwYDVQQD
Eyg4Y2NjZDU2NmM4ODU5Y2VhNDIxNDA5ZjZkNjQwZjY5ZDdlOTc5YTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs54Fscd2nUEQxTK+ps2S/HLC/fh0
XND5DiMIxnvG8wDCI+rGKUOvw+JgB+TDpRFnWjI6jdnr8RsS6CBrw1FbDXY0MTgC
I1TP/lCMYEyLfUVYyU8n1U9hyPXzO9h9AZgOORTTA8jw9OnpUXVYqOvslwMaik1h
nMEys06g+ZQnJZmfEkIO1KZ7nMJpMVFg9NAY/T7fSoOasvDGFoc7Wc4F1dOuTsgp
W2Rmoy7BPoBo4ex4W/xLP9gssqArbOqOf82qdKBpIuw6E9f29x3IlpRgeYpLeGVA
nBKYR0gJMYj9TU6iNfkBIuKmapMjLgjGpcptQDwf0aY8KDCsMLh8zL/ZiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzM1WbIhZzqQhQJ9tZA9p1+l5pUMB8GA1UdIwQY
MBaAFNis80visEx8zvIiHo0fy2yrtBWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjct
NDRkNjRiOWRhNDU5LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zZGYzNDEtMDE3Yy00NjYwLThjZjctNDRkNjRiOWRhNDU5
LzEvMkt6elMtS3dUSHpPOGlJZWpSX0xiS3UwRlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq96UNbdl
7RYTvD6fYoTgr3uIPuEbQPBfgXt8kH9HpKXSBQUnog4Qpi8Pww+spLvzY7A1nIbb
u9smAWhpbxXlDGAv4Ey/Ag7J9Iel5MhqaADILM86OxX7V+jBHbWH/y24IvQfXHqq
4weIfuVZcsRexUm/E5qYSFiQdu/6vOfMdNO6RKy3LzCHiaR5IuEHjuKu44Ib9/o7
5p/oG3TKTPJ5iIikdz0nrw8zPnN5gQIjEpS5uLYDW6WEWqo6V2skOK8itWSCdSJ+
LkTh+dqyr5wa4JblZTYOGY7eZW8AQspfWEAK1Ja0pzjUoZCE4rhGAwxBNhYSwj1E
Yx4gcLeFnAReAg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:20:06 2026 by rpki-client