Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: x9SxBQTdHj8jbvFjd4kcwDXr9ux/Z7UF/tbKPOT4vWo=
Subject key identifier: AB:35:34:E5:21:5D:39:FE:88:53:1B:42:9C:79:5F:57:85:D3:2D:93
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 019DA309DF9BEA84B271D237C8A383B86268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 00:00:26 +0000
Manifest this update: Sun 19 Apr 2026 00:00:26 +0000
Manifest next update: Mon 20 Apr 2026 00:00:26 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: gtpKgdRZVC9lpMrxqBd19QO0oM029YhtybyWPWmxszs=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:df:9b:ea:84:b2:71:d2:37:c8:a3:83:b8:62:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Apr 19 00:00:26 2026 GMT
Not After : Apr 20 00:00:26 2026 GMT
Subject: CN=ab3534e5215d39fe88531b429c795f5785d32d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:2a:be:34:99:80:86:4c:6a:ab:06:ea:57:
6d:92:c6:e9:ce:af:23:ca:3d:06:2d:c8:38:dc:ab:
34:48:f0:ab:d8:dc:62:b5:83:5c:c5:5c:d3:e0:72:
d8:68:5f:d9:e0:ee:4f:6d:83:f7:fa:96:b5:71:3e:
5b:76:d3:2a:20:41:98:df:4b:64:32:9d:b3:b6:2e:
da:a6:6e:7d:65:63:f4:98:3c:d5:6c:2b:be:37:74:
80:c3:3a:3d:d5:e2:5a:fa:fe:cf:49:ce:dc:b2:0b:
f9:89:cc:8a:f5:d6:e2:0d:d7:15:9f:4f:48:c4:69:
b8:48:b9:85:e2:91:26:2c:28:7e:35:d8:1e:52:69:
6a:26:f7:52:27:60:36:f0:79:f2:31:e0:d5:2a:1b:
65:bf:65:af:81:73:07:53:ff:99:c5:3c:3b:d1:e6:
e8:ce:07:da:a4:8e:83:46:a3:53:e8:5e:91:be:e5:
78:37:e6:e7:bd:cb:27:88:49:e0:4d:ca:e4:36:9b:
23:cb:4d:69:4d:b5:fe:11:7b:3f:c6:2e:0e:95:cd:
57:7d:c6:74:92:c8:70:0e:fc:c0:ac:cb:fa:79:36:
d8:21:24:fd:d8:a8:31:0f:d6:3c:f0:bf:23:56:ab:
32:55:ad:e7:dc:93:5a:72:5d:b7:0f:ab:0b:1c:fc:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:34:E5:21:5D:39:FE:88:53:1B:42:9C:79:5F:57:85:D3:2D:93
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2f:93:df:53:ce:ef:94:6c:fd:ea:16:8e:75:c3:15:01:73:
49:23:bb:e4:fc:bf:f2:80:c9:af:b1:29:55:ed:34:15:d9:0b:
91:8a:c7:41:0b:4a:ce:39:fc:75:69:42:48:27:db:f4:c2:38:
d1:f1:58:8c:67:ee:e0:18:fe:bc:17:ba:75:07:65:8a:51:97:
d1:be:b5:3e:e3:c2:19:2b:90:06:78:a1:4f:ee:66:21:97:ae:
91:55:c8:ed:5b:da:01:29:dd:d9:c1:3f:dc:58:90:1a:46:a8:
3f:a8:bc:18:1f:f0:40:90:12:86:3d:0b:85:87:f7:5d:41:b0:
89:07:99:63:1a:08:e4:3e:3f:07:11:ba:f2:7c:a2:3e:3a:7e:
9f:90:4c:25:4c:94:22:53:ad:05:77:81:4b:10:2e:be:35:96:
ee:a5:83:38:54:b7:5d:9c:84:73:d8:da:5f:4a:4d:b9:29:65:
40:77:30:a1:c4:94:e6:6b:3e:a9:d8:31:a7:92:88:ce:88:33:
25:7e:79:eb:13:a2:cc:d6:2f:18:51:08:3c:78:e2:79:80:03:
68:c9:62:1d:1d:b2:4e:9d:ca:de:62:d3:c5:8a:9a:81:82:55:
1b:91:0b:11:63:dd:f4:8d:3f:71:17:71:33:ff:a4:ef:e7:43:
da:bc:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:45 2026 by rpki-client