Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
File: 2ggpHPxyjQF2DsQngQlqxrTHSl0.mft (raw, json)
Hash identifier: tETAFNjF8QuxgEdIbJSS0m7mRDcLwuAUfnVcGuZpWZM=
Subject key identifier: 1D:7F:A7:09:80:54:BA:61:DF:2E:2E:24:BF:D7:9F:BF:2D:02:91:64
Authority key identifier: DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
Certificate issuer: /CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Certificate serial: 019F8F11022AB76063FDE75F3957D50610E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 13:01:24 +0000
Manifest this update: Thu 23 Jul 2026 13:01:24 +0000
Manifest next update: Fri 24 Jul 2026 13:01:24 +0000
Files and hashes: 1: 2ggpHPxyjQF2DsQngQlqxrTHSl0.crl (hash: BRbOcVS3Sk/YUZ2x7KYxpCg/z64Xu3Evpu55JCfMeTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:11:02:2a:b7:60:63:fd:e7:5f:39:57:d5:06:10:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da08291cfc728d01760ec42781096ac6b4c74a5d
Validity
Not Before: Jul 23 13:01:24 2026 GMT
Not After : Jul 24 13:01:24 2026 GMT
Subject: CN=1d7fa7098054ba61df2e2e24bfd79fbf2d029164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5b:85:6b:8d:f4:e2:c1:f9:56:66:15:04:46:
39:56:00:5d:bb:72:55:b7:aa:f5:3b:db:ea:18:01:
a3:0a:36:12:22:ce:99:cd:47:8f:e8:ba:58:8e:2e:
c1:d9:3c:7c:3f:77:1c:60:51:44:40:b3:72:a8:76:
3c:69:f8:48:e9:da:ed:3c:ca:ee:2b:18:66:e9:70:
64:f9:e2:b4:bf:6a:00:03:36:60:24:95:90:90:f8:
dd:9a:1a:ee:50:b6:a1:5e:f9:37:3e:3b:f7:99:e9:
24:15:12:87:ef:85:9c:b3:03:5f:c0:6c:86:c5:6c:
fb:49:06:46:cf:d3:e3:57:cf:7e:6c:bc:1a:02:d6:
44:b8:6b:f7:22:94:67:3a:c8:15:2b:2c:12:84:f1:
aa:7a:eb:37:35:fb:5f:00:9f:db:f8:9b:98:ed:a2:
08:59:a5:bf:c7:56:f6:be:d5:19:23:e0:9f:ce:14:
e7:61:8d:3d:42:30:bf:67:cc:af:4f:5f:6f:b4:56:
40:7d:94:9e:31:df:20:e2:05:48:1c:da:ec:94:d5:
92:af:e3:af:83:60:cd:c4:5b:2b:0b:1c:03:41:16:
4a:c2:a3:d7:71:15:3f:e8:14:de:b0:ac:dd:10:9c:
70:1d:8c:60:8a:d8:b4:fa:f9:65:7a:bf:cb:ff:a9:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7F:A7:09:80:54:BA:61:DF:2E:2E:24:BF:D7:9F:BF:2D:02:91:64
X509v3 Authority Key Identifier:
keyid:DA:08:29:1C:FC:72:8D:01:76:0E:C4:27:81:09:6A:C6:B4:C7:4A:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ggpHPxyjQF2DsQngQlqxrTHSl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/44dac0-167a-4993-b9a8-b05cffb187fa/1/2ggpHPxyjQF2DsQngQlqxrTHSl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b3:5a:aa:b5:0c:d9:59:94:de:28:bd:1d:57:76:03:1a:ea:
b1:42:80:6a:b3:4f:4c:74:26:d7:4a:2a:6a:8f:14:be:ea:4b:
45:82:db:be:af:42:ac:3a:0b:60:ac:7d:e6:24:d6:48:1b:e4:
cb:39:7d:77:ba:06:5e:01:3c:3d:0b:a3:fb:3a:fb:75:0f:12:
4e:81:eb:5c:c6:d5:87:5d:e2:ea:97:7b:4b:b9:25:5a:a9:06:
e6:73:4e:46:98:31:14:92:18:e8:9b:dc:48:c9:54:34:00:7d:
6c:fc:d7:a6:00:9b:44:f5:be:bd:52:51:34:2a:f6:1b:b3:d5:
16:15:51:12:45:aa:0c:2b:3e:b9:cb:71:09:25:d9:ab:eb:9f:
31:70:e6:0c:01:44:2e:47:1e:a8:4f:49:9b:39:c7:2a:97:79:
74:4a:f4:15:2f:2b:00:b7:ad:ca:09:1e:63:dd:05:e4:04:cc:
39:bc:4f:79:ab:b9:99:e7:74:1a:d0:6f:be:35:f2:9d:24:04:
7b:0b:e2:af:63:e4:83:42:11:b0:4a:6d:8b:a9:f7:43:d1:50:
af:36:f8:9c:27:16:f0:08:63:b7:d7:fb:6a:6f:bc:2f:1e:7d:
28:ff:96:26:36:b6:9d:a4:d6:df:a0:35:f6:b6:e8:75:76:3f:
a1:32:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:41 2026 by rpki-client