Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: p2axk+CkieA9oV5738/wk3mALIJWA34gIaWcu5PXehQ=
Subject key identifier: 65:79:66:BF:7C:E7:C5:15:82:78:27:67:4E:86:CA:9C:17:AB:47:95
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019FAA87EC51F647B075C42DFC74E56EE963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 21:01:02 +0000
Manifest this update: Tue 28 Jul 2026 21:01:02 +0000
Manifest next update: Wed 29 Jul 2026 21:01:02 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: owZVc8gDbuXB/5RMxl57ff3fdetvkCbLQArt6hbhnYU=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:ec:51:f6:47:b0:75:c4:2d:fc:74:e5:6e:e9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Jul 28 21:01:02 2026 GMT
Not After : Jul 29 21:01:02 2026 GMT
Subject: CN=657966bf7ce7c515827827674e86ca9c17ab4795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:ed:54:60:13:ec:ef:ae:f2:46:23:de:29:
7e:54:d7:45:6d:12:72:42:f0:fd:86:e1:6c:3b:46:
6d:0a:8f:a3:db:9f:2f:08:a1:d1:72:d1:33:ce:ab:
f6:cb:d8:71:6d:e2:52:a4:05:26:fb:ad:c8:1b:e4:
d1:af:e2:2f:49:c0:8b:5d:36:ef:07:cc:13:6c:a6:
68:ab:8c:27:e0:e5:46:6f:e1:82:4d:e3:78:20:bf:
22:a1:16:4a:75:5e:88:58:c3:08:de:30:36:4b:26:
3f:3f:ec:b2:6a:ad:75:71:9f:f8:c7:0c:4e:40:35:
d1:73:1d:61:31:2f:3c:a9:31:f7:b3:2e:69:a8:d1:
84:fc:f5:68:d1:d2:79:56:ac:ac:95:85:2a:62:12:
9a:67:cc:62:90:7a:5c:53:09:1b:22:d7:23:02:af:
e9:f4:59:f4:c3:65:37:41:44:a5:8a:a0:34:9b:f6:
6a:9a:46:4a:ec:9d:5e:ef:b7:0d:f2:ae:b8:ea:ad:
21:c1:79:1e:59:19:68:be:41:9f:08:45:54:91:d5:
cf:48:05:e0:9e:07:5a:92:98:4b:0c:98:0e:bb:f4:
ee:1e:3a:a3:05:70:ee:83:8f:55:57:03:4b:1a:f8:
d3:c1:08:4b:b1:6b:84:46:b2:08:2f:46:98:76:da:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:66:BF:7C:E7:C5:15:82:78:27:67:4E:86:CA:9C:17:AB:47:95
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:61:3f:47:a2:a6:2b:3c:10:0b:46:52:2f:df:44:d2:a3:82:
5c:14:e0:21:6b:d7:70:16:ab:ed:a0:72:65:65:5f:8e:92:e8:
e2:a4:04:ef:b3:f4:76:f3:c0:58:ab:18:76:2a:b2:2b:5a:36:
33:73:62:ef:28:24:59:72:50:f4:dc:36:a7:9e:c7:52:27:0f:
e8:79:5d:9c:96:05:c2:55:21:87:fb:79:cb:c6:d7:c2:c7:d4:
07:16:70:e2:ee:09:36:e0:f7:44:95:ad:fd:2f:7d:8a:c0:e4:
e9:13:15:5c:be:8e:c8:59:3e:6e:65:2d:1b:7d:8e:29:df:a3:
d3:33:1f:9f:ae:e9:1e:de:43:86:aa:c2:bc:07:d7:f9:bd:1d:
d0:73:f3:37:92:17:89:7b:49:a9:01:dc:98:f6:d8:69:e4:69:
5c:10:89:94:02:2e:63:1e:d0:4c:64:c4:84:bd:90:15:fb:a2:
1f:8a:1a:6b:1e:cc:ec:57:82:cd:1a:73:74:0c:cf:73:50:13:
81:e4:f7:ab:42:1e:67:c4:b1:ba:4a:22:5e:9d:e3:c7:07:a1:
60:b0:36:71:e2:14:46:26:51:1f:e7:b1:fd:4e:f6:a6:45:a5:
33:a2:ac:cb:77:3b:84:ae:86:71:dc:08:56:c1:5e:ea:c9:68:
d0:95:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:46:12 2026 by rpki-client