Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: RgH3DHQ+pB97d2M85Fv95cu6SUfByV4f4tg0K80GKI8=
Subject key identifier: 52:A5:8E:53:58:CC:1D:56:50:87:81:74:CC:E1:4C:FE:E7:D1:33:43
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 019FA90740BDF61F17E85CEF82F203E21F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 119C
Signing time: Tue 28 Jul 2026 14:00:52 +0000
Manifest this update: Tue 28 Jul 2026 14:00:52 +0000
Manifest next update: Wed 29 Jul 2026 14:00:52 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: hmVn1EqA0efZmwb/gNe8oyCuiZWYW2CbuNApEtzxu/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:40:bd:f6:1f:17:e8:5c:ef:82:f2:03:e2:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Jul 28 14:00:52 2026 GMT
Not After : Jul 29 14:00:52 2026 GMT
Subject: CN=52a58e5358cc1d5650878174cce14cfee7d13343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:f8:74:30:ad:34:ba:6f:d6:ac:6b:a7:12:
09:cd:c2:1f:df:f7:52:aa:8d:fd:fd:ba:61:98:34:
03:bb:ff:5e:55:02:d2:a3:f3:86:ee:98:53:55:1e:
8f:59:5c:5b:c2:f2:a3:73:1b:b7:1f:67:a3:9e:70:
03:b1:91:ef:71:17:09:04:ec:41:6b:38:80:ca:88:
1a:4c:22:79:36:63:b0:e6:bd:00:cf:91:a0:86:1e:
34:ea:8e:1e:a6:13:70:07:43:f7:1a:9b:3d:4e:5f:
c3:40:1c:fb:ec:f1:3c:54:fb:4f:99:44:61:61:c0:
65:cf:f7:33:e8:7d:5b:61:89:e2:2a:d7:0a:ea:60:
51:e8:d1:81:0f:0f:ef:77:0f:8a:c3:b1:42:7c:53:
57:a6:5f:91:a5:c5:af:01:a6:c1:41:31:18:b2:b8:
5e:28:f5:46:6a:a9:0f:ba:dc:30:9e:90:da:e6:d4:
a2:ae:e6:a1:66:0d:36:d1:71:2b:63:71:9c:97:4d:
bf:91:53:68:8e:31:4b:29:68:0b:ae:fe:bc:ce:ec:
f4:64:bf:ea:7c:5b:31:1f:07:a4:d8:0f:40:0b:33:
7d:02:e4:76:ae:0f:b3:e9:d9:16:23:44:17:b1:bb:
b1:65:4f:28:d8:be:22:32:a9:0a:48:8d:6a:b5:a0:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:8E:53:58:CC:1D:56:50:87:81:74:CC:E1:4C:FE:E7:D1:33:43
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f5:00:58:9a:91:c3:d6:3d:cf:f3:08:76:9f:2f:f0:2f:aa:
70:1a:e7:e8:00:72:49:7c:69:74:62:f1:84:9a:85:9d:06:a3:
39:a2:6d:57:34:d5:9a:7b:95:13:0f:bb:1e:e3:19:ad:c5:da:
7e:c4:2d:1f:51:12:3f:6c:a0:19:df:07:c3:86:92:6e:58:79:
6c:ed:80:45:d7:c9:58:c9:04:f4:1f:f2:09:c6:e9:ef:d8:4e:
ab:eb:81:04:4d:30:d2:e2:98:e0:26:3a:78:c7:2a:b9:58:c4:
45:a2:06:ad:ec:9a:a1:fa:e4:3e:82:ab:2b:aa:51:75:48:28:
d8:a4:28:32:98:8d:75:ea:1d:ec:92:2e:c7:98:9e:78:f6:17:
9f:38:82:93:d6:46:61:a2:46:cc:d3:8c:aa:83:31:ba:06:b0:
4f:78:6d:c8:d4:2f:5e:0f:c8:4d:f0:da:75:cc:cb:9a:79:eb:
11:1b:46:52:5d:6c:40:e8:f6:a9:05:9c:aa:ee:0c:75:1e:a0:
2b:33:c8:c6:dd:02:48:aa:36:22:3f:bf:f1:cb:46:5d:ed:6f:
06:ba:fe:b8:f1:dc:82:db:c9:00:d1:58:9a:5c:fa:80:23:ba:
32:cc:1d:dd:fa:50:89:5d:0f:d7:2e:6e:e1:49:85:95:ea:03:
0f:4c:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:13 2026 by rpki-client