Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
File: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft (raw, json)
Hash identifier: oBO9/SmxnoyJjKz4gGDjVEQcR1oBw8hx4EwQZdML4Fk=
Subject key identifier: D8:F4:F5:45:49:EC:3C:CF:17:95:A9:81:42:84:70:32:E6:62:B0:FA
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Certificate issuer: /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial: 019F9135FA9B9B3227580608439C0FF80FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
Manifest number: 12D7
Signing time: Thu 23 Jul 2026 23:01:01 +0000
Manifest this update: Thu 23 Jul 2026 23:01:01 +0000
Manifest next update: Fri 24 Jul 2026 23:01:01 +0000
Files and hashes: 1: 2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl (hash: Eaxsu8k+6J4sOUbd55gJzpLRN8lm5hpi+LNUS4zjp64=)
2: AoMLPhZExe6a-acTOonY5G6p87o.roa (hash: GlOEB6CrWza06BRV4TlREAMAdwdF9KjOr3x10SdKDlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:fa:9b:9b:32:27:58:06:08:43:9c:0f:f8:0f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Validity
Not Before: Jul 23 23:01:01 2026 GMT
Not After : Jul 24 23:01:01 2026 GMT
Subject: CN=d8f4f54549ec3ccf1795a98142847032e662b0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:c6:cc:1c:ab:4a:4b:7b:f2:bf:da:09:67:
87:36:b5:c1:a2:c9:ec:14:50:fe:de:1d:ac:ed:a2:
a1:a4:b9:67:ea:f1:c5:d9:a2:a4:dd:66:64:4c:ec:
9a:8d:94:5d:41:09:76:21:4d:b6:6f:d8:15:ea:8a:
9b:66:a3:fa:3f:06:10:43:a5:85:71:b0:90:2b:aa:
c9:f9:82:4c:3f:e6:3b:14:80:f9:2e:63:2d:e7:71:
54:d5:d8:96:58:53:e2:fa:b9:b7:e4:1e:bc:6b:f3:
ca:6e:0d:64:5f:7b:95:fc:14:2d:5e:bb:e0:c7:f3:
ec:fd:dc:30:c9:ac:da:7f:a0:ef:ec:1b:4b:25:16:
4d:ca:b3:30:b6:ec:0d:a4:d9:2b:0b:ba:c6:9d:c1:
6f:e6:d9:67:0f:1f:f7:4d:8d:18:f4:c1:61:6b:cc:
bf:48:02:2e:6f:b2:5b:5c:c1:38:19:b4:e0:ca:56:
e1:1f:46:af:1c:1c:db:2f:8f:36:ed:18:e6:d4:c7:
fb:19:c8:28:72:a4:99:38:21:a0:01:91:c7:c9:9b:
ad:07:ab:2a:c1:d3:b8:d5:7a:2b:12:0e:0a:25:e1:
7c:75:f7:6c:9f:da:d5:0c:0a:33:bf:db:41:e0:c7:
0e:1d:3f:14:7d:db:ca:2a:13:b9:27:d6:84:10:50:
b0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:F5:45:49:EC:3C:CF:17:95:A9:81:42:84:70:32:E6:62:B0:FA
X509v3 Authority Key Identifier:
keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:50:2b:1b:b7:25:df:a0:a0:fb:41:2f:c5:88:de:8f:ec:6d:
6d:b0:ad:f3:5c:05:bc:e7:00:21:ea:25:ad:e7:06:df:05:ea:
b9:46:cf:ff:13:7e:4e:73:0d:ef:c1:8d:a0:47:a3:59:ce:3e:
6a:24:1c:a1:11:ee:fb:87:1e:68:e6:23:f6:6a:42:aa:d7:74:
f5:14:6a:df:51:43:ae:0c:e4:f0:23:53:3a:88:2d:a5:88:74:
74:92:a7:65:96:03:19:a3:96:43:0e:79:34:fd:ae:63:05:71:
d7:cf:c9:5d:99:b8:df:2a:05:13:da:01:f1:bc:5c:cb:f7:73:
20:f3:27:8e:c3:a5:af:be:4c:24:bc:17:67:3f:57:f9:78:e9:
05:ff:48:65:e5:76:ff:fd:a7:14:ee:44:5a:4e:43:34:46:d5:
bd:65:49:f5:26:2f:5b:7d:ba:a6:18:37:96:50:01:a2:19:51:
ab:a9:32:ad:f0:b8:45:68:88:a9:1a:ab:86:8c:eb:dc:56:0e:
d6:13:39:9c:3c:5c:37:9e:78:e7:a8:40:69:81:66:d0:af:51:
03:76:47:ec:56:c6:32:51:82:35:b7:e8:dd:dc:1a:72:8c:21:
d2:23:76:10:a4:bb:a9:25:b1:31:48:1e:ed:25:9e:85:c0:46:
05:ca:d8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:11:38 2026 by rpki-client