Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: BMGmYPwYBXvr7K+B2DM9GbfKBZLDmffvyV/r7N1Wbi8=
Subject key identifier: 1C:00:47:57:F8:60:EA:3C:52:AA:7B:8A:89:E3:F8:0C:19:04:83:2A
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019CA9EBA0962A8E4C9E15074C220B0062A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 15:01:57 +0000
Manifest this update: Sun 01 Mar 2026 15:01:57 +0000
Manifest next update: Mon 02 Mar 2026 15:01:57 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: xVCJHPtXJjVPlt1s/YGT/NEnjnpcsOizcEDBzzWTzdY=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:a0:96:2a:8e:4c:9e:15:07:4c:22:0b:00:62:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Mar 1 15:01:57 2026 GMT
Not After : Mar 2 15:01:57 2026 GMT
Subject: CN=1c004757f860ea3c52aa7b8a89e3f80c1904832a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:9a:8f:f0:89:c9:aa:e7:1a:ae:5e:e4:20:
b3:e6:f5:9f:0c:91:11:d0:6d:5e:f0:d5:3d:5d:b8:
aa:6d:92:66:09:fe:06:c0:ad:5c:b4:49:66:f8:5e:
3f:6a:2d:49:74:25:00:58:1c:25:29:8a:74:5f:8e:
81:f2:88:0f:03:98:5f:c0:b2:05:a1:4e:1a:5f:b9:
13:ee:44:62:4a:91:6f:3a:35:00:c7:55:c7:18:c4:
9c:e0:75:d6:57:88:6b:cd:99:30:16:d3:e0:ce:3f:
a9:c2:cf:68:cf:2c:82:87:6a:3a:ec:e2:69:ce:cc:
a5:22:38:b5:7a:6b:fb:6b:e6:37:14:34:9e:7e:8c:
29:26:85:8d:7d:78:5c:06:6e:4f:c2:df:39:bd:18:
5b:e5:fc:2b:73:18:94:13:6f:85:97:be:86:1d:9e:
7e:71:e4:d1:d0:45:10:53:1d:be:8c:e3:c1:0e:8f:
93:1d:0e:c5:ac:50:18:4b:48:c7:1f:ce:6f:1a:93:
54:00:65:e4:30:b0:62:df:1c:f6:db:6a:90:8c:1f:
dc:42:d5:63:a6:6a:46:a9:6f:0d:86:bb:a9:8d:5c:
f7:b8:60:91:aa:8c:cc:12:a0:3d:a1:07:b0:9f:78:
02:76:2f:08:f7:bc:e9:cc:ee:5f:68:97:3f:51:70:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:47:57:F8:60:EA:3C:52:AA:7B:8A:89:E3:F8:0C:19:04:83:2A
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:72:da:b3:e8:bd:fb:42:9d:c9:2d:2c:0c:89:77:d3:24:a2:
aa:d1:26:b8:c3:af:88:4c:ea:df:b4:af:a9:a7:29:f7:8d:b3:
c3:07:6c:91:5f:aa:fc:00:9b:d5:76:ad:46:91:3e:f6:c5:91:
18:9c:01:d2:de:b2:5f:71:45:3d:af:b4:42:45:38:ee:5f:48:
e6:a2:bb:5d:a7:69:76:75:68:9f:4d:48:0f:10:4c:a5:f7:b4:
c9:40:67:67:db:cb:c8:14:91:b2:5b:89:c7:e0:42:a4:54:ea:
66:9d:53:39:b6:d5:8c:88:ff:dd:bf:59:03:80:2a:fb:87:62:
94:c0:db:d6:91:31:72:f9:7d:a0:e4:c0:08:57:ca:34:20:5e:
1f:e7:75:ce:4d:59:c0:ef:df:8b:db:4f:5a:99:77:26:90:af:
ee:91:8c:0c:0e:a7:ed:a1:b2:97:57:87:b2:9c:51:f8:8c:e1:
88:87:f4:53:10:0b:3d:ac:c3:b9:6b:6e:f9:ad:8b:9f:7d:59:
d4:54:6e:e7:78:e6:e8:0c:ca:eb:8b:7a:8b:25:82:8d:11:cb:
a3:88:bc:8d:b7:04:ab:24:8c:67:bb:4d:1e:eb:82:f9:50:2d:
43:11:cc:52:34:c6:ee:6f:1d:1b:ef:28:02:39:a1:2f:18:a6:
ef:bc:e2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:03 2026 by rpki-client