Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
File: 2oNN8dr6f-bq02Cz7nWikxrx_-k.mft (raw, json)
Hash identifier: E37jgP/hBKQ5fysA96RrxAAwltkiPbdQsvQWX8AR8xY=
Subject key identifier: BE:BB:08:AF:DC:5C:AA:E1:8A:3D:70:58:E9:68:21:68:3F:54:CB:78
Authority key identifier: DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
Certificate issuer: /CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Certificate serial: 019F90FEB0961FF4549F5B20E26D0C28E59D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 22:00:37 +0000
Manifest this update: Thu 23 Jul 2026 22:00:37 +0000
Manifest next update: Fri 24 Jul 2026 22:00:37 +0000
Files and hashes: 1: 2oNN8dr6f-bq02Cz7nWikxrx_-k.crl (hash: rDIXD/E91rZK+MJgfBImQjveb5QMruPQ8KDDCB6lqHU=)
2: JinlA7FKjDVbIRYDa6baiCb1Mj8.roa (hash: uM4odhzyAtfREjpDL6HMQcfCGmiVRzakbUk8aFudh0U=)
3: mLaW00UJoliFlQBanGYAZx9oqck.roa (hash: Vzpq2mt7gfo81m95C8eFGQmCsDsfCtgB1hMDxkMn2vc=)
4: q4elAfSV3pyfkYrBN_lZOQLkI4k.roa (hash: r+8++4MhJRSapDrpwTS15Xt4KYpfzjt0/BUoTi0KaP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:b0:96:1f:f4:54:9f:5b:20:e2:6d:0c:28:e5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da834df1dafa7fe6ead360b3ee75a2931af1ffe9
Validity
Not Before: Jul 23 22:00:37 2026 GMT
Not After : Jul 24 22:00:37 2026 GMT
Subject: CN=bebb08afdc5caae18a3d7058e96821683f54cb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:fd:a5:a3:e0:32:fb:62:11:0d:c0:c5:88:
7d:a4:28:4e:f5:56:fb:fc:ea:67:6f:26:fc:69:64:
e3:a3:3c:ed:5d:12:7a:40:50:04:01:71:55:c4:ba:
1a:c7:1e:5a:57:86:77:84:10:31:4e:a0:97:58:0e:
7e:c4:9f:d9:f0:90:bb:42:50:ce:c6:f2:8e:f3:ca:
23:17:bc:ca:63:67:bb:c2:48:fc:76:eb:b0:ef:e5:
3a:ed:52:8b:05:84:3d:22:9e:95:96:93:ed:78:00:
7e:c3:dd:4c:7b:99:08:cf:6e:68:a6:aa:1f:2b:32:
1f:24:c3:6d:1d:d0:40:e1:99:84:0b:8c:82:8f:08:
87:4a:a1:12:ea:9e:2f:c8:3a:8f:d3:21:ce:88:bd:
53:ab:26:6e:dd:30:bf:09:82:46:2d:f9:39:1b:2e:
8c:71:3b:ac:63:51:8a:35:54:67:e1:e8:03:f2:cc:
e4:7f:75:97:6f:03:d3:79:b9:8b:79:da:7d:ef:07:
28:5b:c8:ae:03:77:63:f0:f9:1f:b2:c7:0a:ba:35:
e8:f8:54:6a:fe:3a:49:90:46:0e:30:fc:3b:35:66:
ad:ae:5b:59:55:39:85:7b:54:92:cf:c1:e1:88:08:
34:a6:b1:e5:43:2f:b4:f1:9a:42:cd:ff:11:e1:6d:
86:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BB:08:AF:DC:5C:AA:E1:8A:3D:70:58:E9:68:21:68:3F:54:CB:78
X509v3 Authority Key Identifier:
keyid:DA:83:4D:F1:DA:FA:7F:E6:EA:D3:60:B3:EE:75:A2:93:1A:F1:FF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oNN8dr6f-bq02Cz7nWikxrx_-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b5b4e7-8a68-466d-9fc5-075dc4604aef/1/2oNN8dr6f-bq02Cz7nWikxrx_-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:41:02:de:c8:ac:01:5d:37:e7:05:78:7a:c7:a8:68:ab:1f:
f0:fd:cb:18:fa:ae:b1:87:58:b5:86:1a:09:9a:84:8d:e3:98:
9c:b6:6d:b3:b9:1d:65:b4:ed:49:40:ce:ec:72:dd:84:2e:3c:
fa:84:ea:3d:1b:f4:47:24:88:a2:63:f1:3b:90:fb:03:04:5a:
e2:e2:bc:2c:ae:ed:6a:3c:23:05:41:4c:67:14:62:dd:60:5a:
9b:a9:a9:de:54:1c:d5:c5:27:8f:54:8a:d0:67:d5:f8:34:c9:
0f:79:e1:82:32:ac:ec:7d:71:26:21:55:09:b8:d9:8f:84:60:
ee:ed:30:cf:96:44:e5:99:55:3c:a5:c6:c2:ea:75:bb:09:60:
9e:fd:87:20:45:c1:de:00:80:34:c0:7f:2d:2f:62:f6:af:f9:
5c:ac:0a:56:75:0e:5f:d3:53:5c:73:20:c2:23:5f:3a:40:82:
c2:9b:1b:3a:19:b6:17:0e:f7:b3:1d:c3:f1:1d:29:4c:3b:58:
8a:36:4c:8d:7c:e8:31:7a:4e:97:8c:27:90:94:8b:5d:4a:55:
9b:83:21:bb:3a:a7:fc:e6:79:b7:80:9a:dc:bc:38:27:62:17:
bc:64:2e:c9:1d:c7:9a:dd:b0:4c:e5:cd:19:81:96:42:60:64:
6c:65:78:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/rCWH/RUn1sg4m0MKOWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhODM0ZGYxZGFmYTdmZTZlYWQzNjBiM2VlNzVhMjkzMWFm
MWZmZTkwHhcNMjYwNzIzMjIwMDM3WhcNMjYwNzI0MjIwMDM3WjAzMTEwLwYDVQQD
EyhiZWJiMDhhZmRjNWNhYWUxOGEzZDcwNThlOTY4MjE2ODNmNTRjYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU/9paPgMvtiEQ3AxYh9pChO9Vb7
/Opnbyb8aWTjozztXRJ6QFAEAXFVxLoaxx5aV4Z3hBAxTqCXWA5+xJ/Z8JC7QlDO
xvKO88ojF7zKY2e7wkj8duuw7+U67VKLBYQ9Ip6VlpPteAB+w91Me5kIz25opqof
KzIfJMNtHdBA4ZmEC4yCjwiHSqES6p4vyDqP0yHOiL1TqyZu3TC/CYJGLfk5Gy6M
cTusY1GKNVRn4egD8szkf3WXbwPTebmLedp97wcoW8iuA3dj8PkfsscKujXo+FRq
/jpJkEYOMPw7NWatrltZVTmFe1SSz8HhiAg0prHlQy+08ZpCzf8R4W2GQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL67CK/cXKrhij1wWOloIWg/VMt4MB8GA1UdIwQY
MBaAFNqDTfHa+n/m6tNgs+51opMa8f/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUt
MDc1ZGM0NjA0YWVmLzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iNWI0ZTctOGE2OC00NjZkLTlmYzUtMDc1ZGM0NjA0YWVm
LzEvMm9OTjhkcjZmLWJxMDJDejduV2lreHJ4Xy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUEC3sis
AV035wV4eseoaKsf8P3LGPqusYdYtYYaCZqEjeOYnLZts7kdZbTtSUDO7HLdhC48
+oTqPRv0RySIomPxO5D7AwRa4uK8LK7tajwjBUFMZxRi3WBam6mp3lQc1cUnj1SK
0GfV+DTJD3nhgjKs7H1xJiFVCbjZj4Rg7u0wz5ZE5ZlVPKXGwup1uwlgnv2HIEXB
3gCANMB/LS9i9q/5XKwKVnUOX9NTXHMgwiNfOkCCwpsbOhm2Fw73sx3D8R0pTDtY
ijZMjXzoMXpOl4wnkJSLXUpVm4Mhuzqn/OZ5t4Ca3Lw4J2IXvGQuyR3Hmt2wTOXN
GYGWQmBkbGV4aQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:00:56 2026 by rpki-client