Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: Zb5CPjvvy83Eg+SyegcysszAikaiM//MJbgRz7ciOnU=
Subject key identifier: 19:3F:02:F2:61:F8:06:6B:83:FD:C2:40:F1:49:27:09:23:3D:AC:18
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 019FA9AC2383B317E5409186017DD1749D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 0738
Signing time: Tue 28 Jul 2026 17:00:58 +0000
Manifest this update: Tue 28 Jul 2026 17:00:58 +0000
Manifest next update: Wed 29 Jul 2026 17:00:58 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: Bc7M/1zYuhcM/m2OzKe5ZYivU3rPpiP31wdiD8qC4KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:23:83:b3:17:e5:40:91:86:01:7d:d1:74:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Jul 28 17:00:58 2026 GMT
Not After : Jul 29 17:00:58 2026 GMT
Subject: CN=193f02f261f8066b83fdc240f1492709233dac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fa:89:c7:70:61:88:c4:6c:0f:05:a2:b6:73:
13:4a:0c:63:99:dd:20:a3:0f:10:0c:97:c5:8a:13:
51:75:fc:54:d7:5b:e1:44:b7:b8:97:47:94:97:ec:
64:9a:e3:a8:96:58:02:5b:7e:91:c4:79:08:c1:77:
be:8f:e4:de:22:8f:16:3d:a2:6c:d5:79:65:c2:33:
a2:85:23:3d:65:65:3b:b8:77:f0:3b:ca:a5:c2:24:
23:86:fe:cc:43:73:f6:d0:2d:29:c9:e4:08:1b:95:
3c:23:fe:d2:21:c7:99:b8:dd:51:4e:fb:2b:e0:64:
01:9f:5e:8f:6e:16:a5:04:6d:43:a6:a1:29:3f:c0:
18:dc:c7:32:14:e5:80:4f:74:b9:33:1f:ff:05:3d:
6b:1c:66:d5:7a:4b:ce:60:14:17:5b:8f:9c:7c:86:
7d:85:c0:9d:a6:a0:e9:ca:ad:6b:c1:7f:a1:b5:01:
1f:db:7b:e7:c2:73:4e:f4:65:53:1d:45:71:db:5f:
0e:b1:42:f4:26:3b:86:cd:07:30:5a:8f:48:74:42:
58:76:dd:c7:5f:6e:3f:c3:2e:4c:bf:f7:f8:85:87:
b7:eb:1a:2f:3a:23:f9:10:cd:8a:b4:1e:30:a5:22:
1c:52:f9:07:e3:1b:83:3f:7a:8b:1e:db:9e:ee:7a:
24:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3F:02:F2:61:F8:06:6B:83:FD:C2:40:F1:49:27:09:23:3D:AC:18
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:28:87:e7:9f:32:92:cb:de:a7:63:ad:5c:15:b5:17:64:4e:
53:8d:a6:77:fd:06:05:6a:84:ff:e0:6a:fc:38:79:ee:0d:b9:
21:21:7e:16:7d:08:ef:52:6d:23:90:e3:5e:ff:e9:af:01:9c:
94:81:8d:29:9c:2f:ae:52:df:53:a2:85:a9:32:0e:ca:63:cb:
1b:cc:d7:02:5e:0e:31:24:00:e1:1f:b6:33:e3:dd:9c:dc:b1:
58:41:0b:6e:ec:44:ed:5f:69:84:3d:f3:e4:dc:19:f3:b0:5e:
2d:57:f0:be:92:db:9d:4d:82:20:0e:4b:64:48:27:8f:7a:9a:
32:eb:1a:86:7a:f3:09:fd:0c:08:a3:52:a2:55:02:f0:fb:73:
9f:04:c8:3a:6f:cd:f7:ae:f8:72:3d:0c:0a:f4:fc:88:bc:ad:
34:8f:3d:04:25:f1:5f:fe:88:97:a0:b2:ed:6c:b0:ce:c2:d9:
e0:09:66:73:1c:b4:d1:e2:7b:79:52:51:10:20:6d:24:68:7c:
9c:34:c6:48:ab:7b:73:b0:71:b4:cf:28:a8:41:74:30:83:d9:
3f:c3:d8:eb:2b:c3:b1:7a:4e:54:f0:5d:ae:00:ba:19:72:eb:
a9:a6:c3:af:4b:c6:03:6d:44:0f:f0:ab:5d:02:a5:f7:14:38:
c2:9f:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:12 2026 by rpki-client