Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: 3n/othuR9d1lTneA6iq2mfNZK5Bixqekb6XgaNyhevA=
Subject key identifier: 58:6D:1F:95:76:6E:B5:CF:49:52:CA:6D:01:FA:07:5A:1B:80:07:C0
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 019FA899C11AAB19E8BBE0442DEC04302208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 12:01:16 +0000
Manifest this update: Tue 28 Jul 2026 12:01:16 +0000
Manifest next update: Wed 29 Jul 2026 12:01:16 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: E+DAPNcnZan5UBwbGGxer5npA8wd0VGFDXmOFXbhzzs=)
2: LTz1De3X8spC3dcHgrNN4wje9mU.roa (hash: L5HiANwADQvPfM4ZMyAYQ5G6J4Pz1djNh1BERnPcH2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:c1:1a:ab:19:e8:bb:e0:44:2d:ec:04:30:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Jul 28 12:01:16 2026 GMT
Not After : Jul 29 12:01:16 2026 GMT
Subject: CN=586d1f95766eb5cf4952ca6d01fa075a1b8007c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:9e:66:7c:e5:75:e8:ee:4e:dc:a5:47:c4:
e9:51:24:47:56:1d:f7:c2:63:85:e1:f6:7e:ab:9c:
c0:08:32:10:ac:9f:85:ec:87:7a:61:da:08:8c:b2:
01:f4:37:3e:45:5c:53:e8:db:95:ce:5d:0c:aa:ce:
2f:0b:98:20:72:71:20:51:2d:fd:b7:31:37:08:1d:
c0:4b:3c:eb:4a:70:58:b9:3a:b2:4d:6f:58:43:20:
8a:f8:70:b6:f9:41:5f:02:89:bd:8b:db:44:0e:62:
58:da:d9:40:b2:44:f7:a4:0d:af:97:ac:26:69:5b:
ce:1b:06:d1:83:26:ce:26:fa:2d:1f:6d:ee:9c:66:
07:e4:e9:b1:a7:6b:bc:97:58:12:d6:5b:ed:12:2d:
36:4d:12:54:26:22:47:42:af:88:23:27:73:30:c1:
b5:63:84:50:64:54:5c:a9:8f:dc:35:6b:68:4a:57:
f1:b3:50:97:de:8e:d7:20:97:01:d9:0e:3d:e4:e7:
4b:b6:c8:0e:15:41:af:0b:b0:61:4f:84:a3:8f:43:
47:f5:ac:f1:df:76:2a:b2:5d:20:0a:b0:e9:11:f0:
20:d1:5f:78:08:67:5e:c8:0a:55:e2:85:cc:61:8d:
a5:6e:55:da:f1:a4:75:79:5a:c3:cb:a9:73:9a:00:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:1F:95:76:6E:B5:CF:49:52:CA:6D:01:FA:07:5A:1B:80:07:C0
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fc:c7:2b:ab:1b:94:2a:6d:75:1f:88:af:61:cd:48:59:15:
7a:c9:46:57:ed:12:51:69:b7:80:71:97:24:c2:68:1d:1d:9a:
39:ff:d7:43:29:d6:b6:7f:76:45:15:3b:6d:e1:7d:07:49:84:
1b:fb:e4:45:b1:64:29:25:40:7b:22:2a:5c:f7:d6:8a:e0:38:
d2:c9:a9:0d:5c:01:5f:2b:1a:05:0a:4f:18:0a:b8:9d:7e:b4:
bd:c5:31:fb:64:9b:16:61:06:4d:da:87:4e:50:e6:76:79:a7:
b9:13:43:b6:7d:53:1e:29:3b:75:d9:91:a2:03:f0:74:c3:f7:
9f:89:d1:f8:45:c2:d3:cf:8e:33:f3:3f:f7:f9:5c:b4:ab:ac:
e0:65:e6:b7:f9:33:8f:92:e4:b9:05:05:b2:1e:9e:b7:ec:a5:
92:95:ef:c6:4a:a9:18:0d:43:46:32:d9:77:2e:fb:d3:e8:92:
fc:fa:9f:3a:5c:45:a2:7d:ae:c6:e0:0a:4f:69:eb:f2:b0:78:
3e:2e:ce:9a:d6:ab:0c:b2:f1:43:6f:1e:ff:62:e0:2c:3b:71:
64:e7:6a:d8:76:9d:b3:ea:3d:11:eb:1f:1d:73:61:85:2b:3f:
b3:a2:70:82:df:e9:bc:09:a1:e7:f4:9d:65:44:89:68:b9:51:
12:94:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:32:15 2026 by rpki-client