Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
File: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft (raw, json)
Hash identifier: +26+gLzkJjMbPbJhTFd0Js7SvP3OB09oGNvS3v3SYiA=
Subject key identifier: 05:69:D6:FD:6D:41:DD:A0:40:D5:30:BB:44:1B:4E:65:E1:2E:82:C6
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 019FAABE4A5FBFBF67745A104B7F1D6F155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
Manifest number: 19EB
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl (hash: KBNNXkO1p3SqEIPpyx/1H8OPTSybJeA8osRzczQfgN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:4a:5f:bf:bf:67:74:5a:10:4b:7f:1d:6f:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=0569d6fd6d41dda040d530bb441b4e65e12e82c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:ce:bf:13:c3:06:95:79:8f:88:3f:9b:74:
c0:e7:9e:5d:72:7a:6f:c9:b4:f5:e1:fd:0d:e5:d0:
1a:bf:d7:fc:ab:ce:b7:6b:e2:7c:a7:fb:4e:d5:8a:
d8:b5:14:00:0c:2e:45:be:69:c6:4a:09:92:92:d9:
a4:b8:75:9a:07:1e:ec:53:d3:ab:1b:fd:9f:f3:f3:
35:8a:24:b5:fe:1b:ef:97:25:16:08:79:65:8a:36:
c0:88:81:a1:d9:95:38:cd:5d:32:79:ae:84:35:be:
2e:9e:6a:e3:f9:89:d6:c3:a7:c5:8f:c0:bb:29:7a:
da:d5:14:ad:d8:43:5c:5b:43:90:04:37:45:8b:a0:
7d:e3:66:5c:19:cc:22:a7:fb:b2:80:cf:99:de:2e:
02:66:ad:e3:be:13:9a:f0:f2:7f:47:65:f4:84:26:
98:9f:57:43:95:7c:bf:97:cd:05:be:8d:03:73:b7:
ad:3c:70:b6:53:dc:fa:d2:91:41:3b:be:78:77:fb:
25:87:e9:a9:03:47:9b:c4:65:57:88:cb:ec:9e:dd:
04:0c:bb:2c:11:37:8c:66:df:40:4f:e1:0e:f0:9e:
ff:62:4d:82:ec:08:b8:65:36:e0:34:06:49:83:ab:
16:26:92:64:d8:17:b2:19:c1:b0:99:1e:fd:f8:cc:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:69:D6:FD:6D:41:DD:A0:40:D5:30:BB:44:1B:4E:65:E1:2E:82:C6
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:72:7d:a9:59:8b:e1:5e:a0:09:ff:84:af:9c:1c:ae:0d:
2f:17:e8:a4:e9:11:9d:f9:4b:e1:ac:98:1f:d4:58:da:45:3e:
b8:be:03:fc:d5:92:d7:a4:0d:03:50:fc:48:e4:ae:2e:c6:cd:
5a:12:9a:2b:bf:db:12:11:2d:a3:e3:72:3e:6f:81:f8:ed:86:
66:3d:b7:c9:52:29:e8:27:c9:8c:09:e7:21:4e:46:39:c4:e9:
d0:aa:ff:a3:0f:5a:e9:da:b2:b0:99:90:fa:f4:8a:48:31:69:
11:12:f1:e4:7a:f2:a3:19:7a:31:8f:db:f6:e1:a6:c7:f0:69:
b6:fa:d9:10:6c:c4:d7:96:47:ab:3b:f1:eb:dd:93:be:27:6a:
ae:e4:00:35:b3:f8:a7:d0:a0:9a:7a:71:ac:d6:44:c1:52:fc:
36:e9:6c:e3:6d:25:df:73:1b:55:21:2a:e0:bd:42:00:0b:35:
4e:82:4a:6a:8c:3b:d2:89:30:87:9a:1a:59:54:7b:18:d3:23:
65:eb:17:bf:f8:5d:a6:41:1a:8a:de:ba:45:49:e1:f1:c4:da:
45:31:b8:ea:cd:a9:50:e1:90:15:65:c0:b3:77:7f:6c:21:f1:
ae:d5:ff:12:3d:0d:da:a4:15:1a:15:71:e9:68:98:20:64:ea:
87:4b:d1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:36 2026 by rpki-client