Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: KNnruHkme8ir/ghap1QJ0XfjkMSfU52w+600xBuM3yI=
Subject key identifier: 58:B0:53:E7:6D:97:8A:55:32:3C:6E:FC:D4:39:98:48:6C:45:19:2D
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 01A0C669DE032A0135509C00B64A0061A0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 00:00:21 +0000
Manifest this update: Tue 22 Sep 2026 00:00:21 +0000
Manifest next update: Wed 23 Sep 2026 00:00:21 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: hQYaZD2Fahc20ccRqlQvRMoV0VwJuFd7xecY4ZlX9wQ=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:de:03:2a:01:35:50:9c:00:b6:4a:00:61:a0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Sep 22 00:00:21 2026 GMT
Not After : Sep 23 00:00:21 2026 GMT
Subject: CN=58b053e76d978a55323c6efcd43998486c45192d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:0a:0d:11:5a:b6:73:a9:01:9f:60:e5:d1:
09:b2:f3:ac:63:32:ca:09:e0:9d:2a:dc:9e:00:d4:
ab:a9:28:bf:4b:5b:4a:de:3c:c0:84:6d:63:32:12:
c6:d3:d0:be:9e:19:5b:06:e6:f4:30:48:c7:45:f2:
f0:30:69:4c:2a:ee:f9:b4:e3:59:86:20:5a:e8:ab:
92:78:fc:85:30:89:0f:a8:3b:9a:93:64:ba:82:36:
dc:75:eb:f2:43:bb:31:ec:04:a5:ad:f2:67:40:1b:
f7:b1:58:6e:59:be:ac:0b:19:88:9f:0c:ef:7d:36:
cc:8f:8e:1c:35:0b:b7:84:ad:d4:3f:41:83:d8:c6:
c3:03:3c:f3:7a:8e:f2:ed:dd:8f:ac:d6:4b:5b:c9:
01:67:7e:05:5d:8e:a1:cf:7d:f8:53:ca:7d:d8:3b:
22:ad:bb:d1:22:7b:93:10:48:de:5d:48:61:60:c4:
87:86:da:42:22:89:99:c4:bb:b8:9f:c5:73:4f:a4:
90:92:30:d7:65:43:e9:8b:1e:8b:71:1c:a8:fb:15:
5b:84:90:52:87:9d:38:6c:d5:0c:ba:e5:09:a7:3f:
9c:6e:4c:31:d1:b0:24:ad:ef:10:03:24:34:3d:0a:
4c:8c:9b:02:81:88:eb:d7:06:20:72:fd:5e:19:67:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B0:53:E7:6D:97:8A:55:32:3C:6E:FC:D4:39:98:48:6C:45:19:2D
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:af:f8:4c:8d:28:9b:62:c4:1f:33:46:62:0b:f2:44:8a:7d:
27:ee:d6:0c:4b:54:f8:49:19:42:a2:a7:bd:7b:28:4d:62:d0:
8a:a2:2c:9a:db:5d:67:51:f9:f7:03:70:64:04:12:63:37:2e:
e7:2d:64:9a:cb:82:83:88:d5:da:b1:9e:c5:8c:fa:21:95:49:
16:fe:4b:5f:cd:97:b5:79:fc:f8:ea:75:20:7b:e9:b0:1c:71:
f2:61:32:ef:f0:77:3c:ec:ee:ea:82:ea:fd:48:12:4e:fc:87:
28:c9:05:a9:ce:39:03:37:34:a7:a2:1c:c3:b6:0a:13:4a:78:
2b:1d:40:57:44:33:ef:b2:e6:fc:9d:65:72:2a:74:72:4b:c9:
4f:e0:a1:aa:e0:d0:92:5a:73:ba:d2:45:c7:7f:f0:62:05:4c:
fb:ce:f3:f6:d1:c0:ac:17:d4:8e:5e:f7:38:b9:68:45:d9:54:
be:07:0c:b7:bd:b0:f6:af:a1:79:ca:b8:1c:a8:a7:05:21:85:
39:c5:d3:ab:c2:46:e3:f0:19:a5:1d:7e:e9:47:ca:7c:01:ac:
39:12:60:3e:d2:99:30:2e:6d:c8:fc:7b:7a:66:22:48:53:20:
3d:ef:0e:e0:d9:4e:07:c9:a0:88:09:bd:a6:23:20:f3:15:44:
e8:84:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:57 2026 by rpki-client