Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: I1qjUhnu6nAbj5+jZkVWKUVCxcnahIP34X5YxzFI1es=
Subject key identifier: AA:46:72:DB:8E:E8:8F:66:BF:FE:7F:9F:A4:B7:F2:90:74:01:02:7E
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 019FAA198C7DD5B76AE7B3C1A6C935C806EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 19:00:28 +0000
Manifest this update: Tue 28 Jul 2026 19:00:28 +0000
Manifest next update: Wed 29 Jul 2026 19:00:28 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: 0p1h74Zj/zMfHy7/TzII3EQICfCU9R4Cd+Rmwjp+ERE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:8c:7d:d5:b7:6a:e7:b3:c1:a6:c9:35:c8:06:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Jul 28 19:00:28 2026 GMT
Not After : Jul 29 19:00:28 2026 GMT
Subject: CN=aa4672db8ee88f66bffe7f9fa4b7f2907401027e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:5a:cf:c1:42:5b:a4:09:bc:b6:c4:4d:95:
17:1e:0d:61:86:2e:90:b0:e0:17:bb:45:55:b4:b8:
0c:c2:8d:1b:0b:28:5d:ad:76:25:da:3c:f5:61:a1:
f2:fd:9c:e9:b0:20:93:bf:db:e0:57:9f:61:84:b6:
e5:8d:fb:e1:6d:b8:31:dc:4e:7e:f1:e9:1a:e1:a0:
89:a4:c2:da:84:e4:78:57:56:f9:ad:dc:cd:75:e1:
8e:ad:22:41:2b:de:4e:78:cd:04:25:a7:81:82:ab:
c2:36:73:9d:c1:18:79:67:99:b9:80:45:ff:c8:8a:
3d:20:49:03:24:ce:eb:69:8d:54:f0:a2:e2:ed:28:
fb:79:d9:84:fd:5d:37:69:05:67:6d:18:4c:61:57:
9b:f9:6a:3b:41:d0:7a:6e:0a:74:df:34:17:e1:85:
0c:7c:01:e0:c4:9d:f1:30:07:03:00:e8:4e:5e:09:
e2:5a:4d:58:f4:d9:5d:2a:1e:bc:cd:ff:e0:21:0d:
78:d3:03:8c:ee:92:13:72:2a:aa:18:d7:d6:6a:1b:
1e:a6:9d:6a:fd:9f:dc:d3:79:7e:b1:c8:3b:29:1f:
55:0a:3d:89:56:ee:bd:e4:72:97:29:79:9c:95:df:
97:50:ee:54:ea:18:d0:e5:11:e5:60:78:62:0c:2f:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:46:72:DB:8E:E8:8F:66:BF:FE:7F:9F:A4:B7:F2:90:74:01:02:7E
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:a0:8c:5e:0d:e3:0e:09:08:7a:5a:5b:42:19:2d:61:0a:
c9:1f:9e:b6:b1:c4:f3:cb:fd:87:1d:4a:e6:f9:8c:65:60:65:
92:73:c9:d2:6c:f1:bf:11:92:d0:c7:c6:47:eb:4d:bd:08:b0:
5f:55:56:d2:eb:77:8d:6d:a9:71:38:03:a6:60:fd:f4:c8:0f:
3d:e4:98:d8:b2:79:69:6e:b6:7d:cc:4c:b5:4c:60:d6:b1:5d:
36:12:a4:78:33:14:fc:c5:88:5a:94:f1:1d:f7:7a:bf:af:b7:
50:d8:ad:8d:4f:95:d6:20:76:bc:7a:71:8a:86:2c:96:65:07:
02:c6:3d:01:a5:38:c7:22:ec:96:ce:e4:32:46:51:90:59:e6:
41:b6:d4:77:ed:6a:10:1e:d3:d2:0b:62:30:5a:a0:d2:4e:f1:
3d:5b:9e:ea:9f:71:59:59:cc:35:5e:15:b4:6d:ab:dd:36:98:
d5:2b:1c:11:ae:04:0b:0e:2e:43:3b:1c:b0:aa:c6:b6:86:89:
9e:8c:44:d4:99:b4:ee:5c:f3:2c:4f:70:4c:36:08:6d:93:a9:
8b:b6:3e:8b:03:a0:6d:dd:b6:6d:42:37:41:c5:32:16:cf:ee:
fb:f1:f1:25:20:38:65:c7:1a:ef:af:04:4c:5e:ec:33:f4:d7:
06:6a:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:30:14 2026 by rpki-client