Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: enG1zg8SupeTlTvJGemu8Tmm35srDGai8BSCtN2Ot/Q=
Subject key identifier: 06:6B:8B:8D:89:0E:E3:76:B3:CA:82:2C:E1:B7:14:6B:40:97:26:15
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019FAA19575937BA8706212C8E647C5ED01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0725
Signing time: Tue 28 Jul 2026 19:00:15 +0000
Manifest this update: Tue 28 Jul 2026 19:00:15 +0000
Manifest next update: Wed 29 Jul 2026 19:00:15 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: fAImgFcQ5uvRMFDll7dyOo/ClA7b0+b3IiOKWFlTRSY=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:57:59:37:ba:87:06:21:2c:8e:64:7c:5e:d0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jul 28 19:00:15 2026 GMT
Not After : Jul 29 19:00:15 2026 GMT
Subject: CN=066b8b8d890ee376b3ca822ce1b7146b40972615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:a7:dc:26:d0:22:8a:a1:45:5f:f0:ca:92:
fe:0b:5c:cf:ae:08:6b:6a:14:dc:9d:bd:a9:5c:b1:
2b:2a:3a:73:79:8d:8a:4e:47:9b:62:d2:05:fc:a6:
4e:d0:f0:22:f9:df:1a:03:24:26:bc:27:69:ea:5f:
66:96:94:1e:ed:74:5a:b2:c4:b6:48:91:9f:93:3c:
2f:92:59:f5:9e:12:c2:a5:0f:6d:04:3a:c0:95:55:
b8:1c:c5:ec:b4:34:14:57:54:89:e1:14:90:80:32:
b0:f2:42:4e:41:d3:b9:3d:01:b3:0d:c2:3f:d7:95:
22:0d:5b:79:3d:2a:cc:34:c9:b0:8f:f4:af:0c:6a:
88:44:ef:fb:52:83:8c:c6:4e:eb:07:68:e2:f0:29:
af:dc:e8:66:3c:37:7a:5a:97:0f:5f:84:2d:c9:6f:
bd:38:49:65:39:0d:f9:a8:4f:40:26:73:4a:1a:19:
9a:bc:bf:ad:4a:10:b5:1a:68:fe:95:ed:39:81:8a:
4e:37:f1:f3:9e:52:23:85:12:30:da:03:1f:23:a5:
2f:8f:06:a3:7d:7e:c5:44:b0:99:bb:fc:c0:b0:cb:
4f:34:93:73:06:a3:7d:d9:cf:50:75:be:e1:c4:2c:
00:0d:46:c1:fc:06:c2:a1:d7:bd:a4:72:26:f9:38:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6B:8B:8D:89:0E:E3:76:B3:CA:82:2C:E1:B7:14:6B:40:97:26:15
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5a:99:ba:b7:bc:de:f6:f5:7f:c4:4b:64:c8:b6:55:75:68:
44:59:26:bb:48:e1:4f:c0:b3:2d:1d:1e:9b:d4:7e:9b:a3:00:
c1:93:22:6b:ce:91:a3:03:01:0a:7c:0d:31:72:b1:61:a4:14:
30:bf:7e:1e:47:64:ba:27:a3:2b:dc:33:9b:05:5f:ae:32:e9:
15:78:90:81:7a:c2:a2:bc:70:83:d1:dc:6e:17:80:c7:e8:57:
5b:a1:5b:dc:ca:9c:1a:a1:76:3e:d2:40:00:95:0f:da:62:74:
ec:94:64:cc:30:e8:89:62:20:c9:63:3c:a1:c0:2b:b2:3b:64:
e0:e5:70:7a:e6:28:bc:53:30:f8:fe:fc:08:af:b5:26:d0:c3:
93:ad:a2:6c:ae:48:32:37:64:8b:08:da:d4:d5:f7:64:e2:d3:
c4:13:7d:6d:19:2a:53:26:8c:a5:ef:cd:65:bc:3e:dc:b4:0b:
3d:0a:de:5f:15:e9:9b:b8:c0:c8:68:d8:fd:fa:6a:fb:31:46:
21:c6:d6:03:25:56:97:ba:46:bb:07:cc:74:49:ce:ef:dd:38:
bb:3a:20:2b:b9:37:f8:15:d2:51:a0:b1:7a:92:20:0c:8e:7c:
19:38:02:0c:0f:27:11:55:74:af:c3:0b:a2:1e:b4:79:93:b0:
33:4a:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:04 2026 by rpki-client