Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
File: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft (raw, json)
Hash identifier: K18tHksZzawZTDCSFOfG3jxi4iPWZW4Ow/jquADkCxI=
Subject key identifier: 79:D1:89:89:9C:A2:BD:48:FE:C9:09:E0:F2:64:A8:D2:D7:FC:93:73
Authority key identifier: DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
Certificate issuer: /CN=db2d75c6d547750642241b0749cfa052c8c17f34
Certificate serial: 019F90C7961C036D5166B1C9102534CAF4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 21:00:26 +0000
Manifest this update: Thu 23 Jul 2026 21:00:26 +0000
Manifest next update: Fri 24 Jul 2026 21:00:26 +0000
Files and hashes: 1: 2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl (hash: JSG1yGbJKDvZxjaa3is5G2L338YzR+708o8EAtGHmwQ=)
2: RYCkmpH2b2Jhy7VdmwMy71iHAMU.roa (hash: m7nxILjYkQDIx4jO5jxneiBadE/Bw699fTnvikNCX4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:96:1c:03:6d:51:66:b1:c9:10:25:34:ca:f4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db2d75c6d547750642241b0749cfa052c8c17f34
Validity
Not Before: Jul 23 21:00:26 2026 GMT
Not After : Jul 24 21:00:26 2026 GMT
Subject: CN=79d189899ca2bd48fec909e0f264a8d2d7fc9373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:1c:31:42:2a:92:dc:b5:28:84:fd:71:6a:
6b:ce:51:72:38:c2:ed:b9:3f:ba:f8:73:98:02:d0:
9f:b9:5a:e8:d2:70:ff:0b:29:84:93:88:29:4f:39:
de:0b:38:b5:72:33:bd:79:e9:dc:48:d3:0d:04:b7:
0b:10:ee:cc:96:77:c3:b5:5e:4f:03:ce:ed:d2:5c:
07:3b:5d:02:df:6c:d6:9b:a3:ed:16:53:92:51:55:
ec:54:17:1a:9e:36:3e:4a:d9:a6:a8:f8:5d:3e:aa:
e2:a3:68:a7:0f:91:1b:21:4b:59:c2:c1:95:18:06:
dd:b1:c4:21:2c:6d:1e:87:2e:fd:27:bf:b7:32:be:
dc:0b:d0:9d:42:ad:64:85:12:66:3b:58:d3:18:11:
4b:9c:22:48:5f:79:63:e0:16:c8:1d:b3:4a:c7:9a:
2f:62:e9:1b:73:82:3e:2b:1a:c2:b4:2c:07:b0:d0:
8a:95:f6:48:2b:a9:24:b7:e3:df:22:c1:8a:61:1d:
36:bc:d5:fb:a7:80:01:ca:69:b9:17:ae:35:44:ea:
2a:9d:25:79:c8:4f:6c:4f:19:f1:03:e9:ab:ae:a6:
00:da:78:43:95:b3:30:26:e8:45:2e:72:6c:5b:14:
75:3f:11:9f:56:d7:3d:db:a7:46:de:49:98:e9:1f:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D1:89:89:9C:A2:BD:48:FE:C9:09:E0:F2:64:A8:D2:D7:FC:93:73
X509v3 Authority Key Identifier:
keyid:DB:2D:75:C6:D5:47:75:06:42:24:1B:07:49:CF:A0:52:C8:C1:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y11xtVHdQZCJBsHSc-gUsjBfzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cc40a9-8b3f-43d6-a078-a901e034afe5/1/2y11xtVHdQZCJBsHSc-gUsjBfzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8a:5c:fd:03:a5:19:a6:ba:ba:50:a2:b2:5a:8e:65:46:47:
ad:91:bb:44:bf:2a:a0:97:dc:98:2b:a1:1e:38:13:e5:e9:87:
9f:8e:46:4f:86:3a:fe:a1:c4:18:0f:be:4a:a3:49:7a:78:40:
ed:ee:66:1c:e6:ca:a7:19:73:45:cf:f3:7f:53:eb:be:d1:29:
04:1c:27:51:83:46:60:7f:e0:dd:69:64:e8:8a:74:36:52:db:
aa:63:d3:ef:0b:18:5e:73:4b:9d:fd:09:85:8d:e6:1e:c7:b1:
37:ea:d4:52:2a:37:d5:4a:b4:ee:7e:79:16:e4:c7:ca:63:5a:
95:d1:48:d2:8a:49:80:87:8d:65:ba:1e:0d:9e:96:f8:72:f4:
50:8a:8b:31:b5:61:5f:82:f2:a3:c4:3f:43:fd:ab:45:e2:4c:
37:99:84:83:33:8a:52:44:03:39:c1:2e:5c:20:ef:01:7f:0e:
4a:05:73:3a:b6:9d:69:be:00:dc:e2:7f:ff:8a:5a:61:f4:08:
0e:cd:6c:72:be:4a:c3:bd:61:a7:1a:7b:82:e7:9f:fd:77:6d:
72:cf:3c:a7:41:5b:f8:43:0d:dd:9d:cc:29:fd:ac:a9:78:61:
38:1e:e0:03:3b:df:93:94:23:d8:ae:21:c4:a3:22:79:e4:4a:
8f:fd:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:33 2026 by rpki-client