Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: 19kp18YDd6pan9mQpiDbmz/IX3JfguyUdGgEeVr9rlM=
Subject key identifier: 16:73:0A:7D:B5:2C:59:62:B6:F6:A4:6D:81:C6:D2:B4:A9:8D:B1:7C
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 019FAA5068AA731A9EA478683EF306F3E281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 0682
Signing time: Tue 28 Jul 2026 20:00:24 +0000
Manifest this update: Tue 28 Jul 2026 20:00:24 +0000
Manifest next update: Wed 29 Jul 2026 20:00:24 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: jnr2HasO3T+hAVTznimpCg3veEsmf0K6IflHaA6RjwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:68:aa:73:1a:9e:a4:78:68:3e:f3:06:f3:e2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Jul 28 20:00:24 2026 GMT
Not After : Jul 29 20:00:24 2026 GMT
Subject: CN=16730a7db52c5962b6f6a46d81c6d2b4a98db17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:18:6c:c5:43:b1:f7:f9:c4:bf:29:62:62:
82:f8:fe:0a:9e:9b:2a:84:bc:8a:10:95:bb:3a:04:
86:23:dd:0f:c2:bf:fa:aa:43:7a:3b:c1:cd:2b:30:
ef:85:d7:ab:91:99:69:12:3a:f3:02:f3:82:13:99:
11:e3:61:85:57:56:20:0e:16:3e:0b:04:15:29:4f:
1c:5a:2f:a6:f5:d0:a0:bf:09:e8:c1:df:8c:fe:19:
a0:ba:89:4c:23:fb:7c:5c:56:ba:dc:ef:0c:e9:0e:
08:26:60:36:2d:ad:56:1a:c0:dc:52:dc:e7:1a:e6:
18:2b:c6:b1:dd:91:e0:b2:ea:96:1e:04:6f:3b:f8:
58:17:af:74:de:61:76:89:be:91:f6:0a:de:c0:5d:
44:2a:02:f1:9c:27:b1:6e:e1:ec:9a:3b:a6:09:b4:
5f:13:a3:39:9a:03:a8:0d:08:0b:62:92:80:c0:1f:
f3:18:5f:d1:7c:a7:15:92:5a:1f:f1:98:c3:01:fd:
ae:e2:b0:09:f2:8f:60:19:7e:5a:8a:fe:4f:a7:29:
b8:0f:35:7b:cc:7e:11:e5:ff:5c:4e:43:d8:1a:f6:
e3:2f:f4:76:d6:60:8a:7a:91:e6:29:3b:d8:d3:c6:
21:6b:ea:28:c8:85:ab:18:ff:0c:4f:60:a4:02:26:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:73:0A:7D:B5:2C:59:62:B6:F6:A4:6D:81:C6:D2:B4:A9:8D:B1:7C
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:78:66:ac:e5:ef:32:48:49:54:fe:fa:b9:a0:0b:4f:17:57:
7f:14:02:7d:36:40:41:cb:36:02:f2:5c:71:70:eb:30:50:bd:
4f:c5:6b:c2:8a:cc:d0:8b:1b:24:14:63:22:05:51:f3:d2:e0:
81:e0:84:c1:ef:fb:fe:01:62:5c:d1:f8:52:fb:53:47:be:1d:
be:1e:14:ff:54:8e:7b:bf:e0:1e:a8:c7:19:a0:80:bc:74:b4:
79:fb:25:2d:43:b2:43:6b:66:70:f1:b0:23:7c:f0:73:98:f7:
c5:31:37:b8:72:c3:4a:17:ed:52:a0:8c:2d:a1:04:cd:f8:1b:
8c:05:99:11:f9:fd:1d:a0:95:d5:45:fd:4e:5d:ee:be:80:d0:
03:97:bd:0a:2e:e4:82:45:59:36:98:6e:20:cb:79:93:3e:16:
3a:3e:c1:43:f6:d5:68:e8:c7:cb:d3:16:c8:32:db:79:71:e1:
bf:c5:49:01:a6:89:d5:32:3e:46:4c:c2:34:87:08:9a:b4:eb:
82:85:e4:cb:74:1f:a4:48:22:12:b5:d1:1a:a4:83:fb:e9:7a:
4e:d3:7a:d0:fb:e8:1e:fa:8e:96:0f:e4:75:70:cc:d7:f5:51:
70:cc:79:43:1e:63:27:41:e0:ea:42:d0:6b:27:e0:f1:4a:59:
6c:1c:17:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:59 2026 by rpki-client