Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: yrNnFf38Nt06cjsR/jN+DG2y9WqZ1vlzjv/bqEpJIUU=
Subject key identifier: 3A:40:80:75:E9:99:F8:9C:F0:BB:84:0A:F2:77:56:E2:E6:6F:5D:A7
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019EBEEC78527B2DC21C492752E19A378CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 195F
Signing time: Sat 13 Jun 2026 03:00:28 +0000
Manifest this update: Sat 13 Jun 2026 03:00:28 +0000
Manifest next update: Sun 14 Jun 2026 03:00:28 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: IBRgqcPyLnnXrjLRsdqPv+0UhLRP+yPfM5FrHu4sXUI=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:78:52:7b:2d:c2:1c:49:27:52:e1:9a:37:8c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Jun 13 03:00:28 2026 GMT
Not After : Jun 14 03:00:28 2026 GMT
Subject: CN=3a408075e999f89cf0bb840af27756e2e66f5da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:01:0a:4f:f5:d7:9c:fc:d4:44:6f:61:16:
00:d2:c4:1e:da:19:a2:cc:21:30:88:7a:c9:86:e6:
60:3e:78:cc:90:ca:b7:e8:64:34:dc:62:8e:ee:8e:
d1:7f:2d:2a:b6:76:9d:fa:b7:24:47:15:34:a6:67:
0b:3d:7d:1c:bd:58:42:b2:3f:ac:cd:12:64:db:49:
70:e7:9f:57:f2:9d:0f:38:90:76:f7:cb:44:49:33:
d5:0f:59:74:54:f1:1a:0d:94:83:b2:ec:c1:c5:6a:
ef:85:73:0e:8f:00:b4:a2:26:48:e3:57:6a:95:41:
31:31:09:8f:35:aa:42:0e:f5:1c:16:c5:b4:a4:63:
a5:18:30:a2:1c:59:37:4e:6a:93:41:e6:cc:fa:9e:
60:cd:5e:f5:41:5b:b5:72:7c:dd:6f:7e:54:b4:58:
a0:0e:3f:f4:ec:53:7a:89:a1:c2:fb:24:fa:cf:b7:
64:b5:7e:49:d1:c4:7c:8c:08:15:a7:4c:63:bd:84:
a2:f6:a9:fb:5d:19:26:ab:f3:3d:d9:14:ca:55:ef:
6f:bb:db:39:09:88:09:96:33:7d:98:36:d1:4e:55:
b4:f1:d9:7b:62:28:28:c7:fc:cd:05:95:ae:67:fa:
78:29:53:30:fd:7c:d4:f7:82:8a:f7:88:fb:05:f3:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:80:75:E9:99:F8:9C:F0:BB:84:0A:F2:77:56:E2:E6:6F:5D:A7
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cb:8f:94:ec:74:a6:35:0b:bf:c9:ac:a9:d6:76:07:a4:6f:
58:32:95:1f:d5:29:ff:9c:c2:de:ad:36:af:94:9b:90:73:a1:
69:93:a1:fe:92:18:94:89:57:f6:ec:08:ac:35:2b:d8:0b:75:
f4:a6:c5:f1:21:d6:31:cc:72:48:98:44:98:d7:dc:06:0c:ff:
8e:89:af:51:ee:00:d8:07:fe:8c:e2:f9:76:23:f6:80:0a:48:
32:0f:f7:17:10:3a:0f:f1:80:f3:0f:1b:f0:e1:69:4f:3b:ed:
5c:17:98:58:ef:26:74:80:49:fa:8a:46:95:72:82:75:e4:95:
d4:a1:1f:aa:a2:be:17:5c:a4:72:a3:b6:00:39:62:4f:ce:19:
6a:9b:94:bb:b4:ee:80:55:5d:8c:c2:79:a2:7c:81:93:45:4a:
08:c0:d1:65:85:13:f2:76:19:e5:3e:fd:7c:fe:81:2b:5e:35:
58:c3:89:44:b8:3c:36:fd:c8:0d:f6:66:2b:82:4a:c1:5a:dc:
63:ef:85:11:e5:7a:bc:89:d0:85:7a:cb:a8:38:74:d9:c7:83:
6f:0e:7d:ae:d2:72:00:83:20:5e:81:6a:42:32:5d:8e:0a:4a:
56:94:20:ca:1b:23:51:3f:c6:3f:b7:74:94:2f:3f:2d:e1:db:
e7:aa:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:11 2026 by rpki-client