Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File: 2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier: xWUZy1Izh6mxDSIBLlvmvK4JjTJ7YrlnCmRztPlUrb0=
Subject key identifier: 85:B0:21:63:0B:E6:76:A2:DD:7E:9A:BC:5B:BF:A9:BE:6C:3E:95:37
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer: /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial: 019FAA1A7F8F1A35F65FC261BF893AEECDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 19:01:30 +0000
Manifest this update: Tue 28 Jul 2026 19:01:30 +0000
Manifest next update: Wed 29 Jul 2026 19:01:30 +0000
Files and hashes: 1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: qMLOK3/YdTRgyX/2g8FFBnDQubcWpO+gmps7bb/UvwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:7f:8f:1a:35:f6:5f:c2:61:bf:89:3a:ee:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Validity
Not Before: Jul 28 19:01:30 2026 GMT
Not After : Jul 29 19:01:30 2026 GMT
Subject: CN=85b021630be676a2dd7e9abc5bbfa9be6c3e9537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:bd:e6:2a:68:7c:c0:be:ca:59:9e:cf:8b:
ed:36:a8:24:0d:9f:ff:72:66:55:38:b8:1c:be:f6:
86:90:03:88:a1:2a:d6:51:26:71:65:41:31:d0:c1:
f1:8d:53:8f:86:7e:cf:f0:13:f4:80:2b:3d:31:5a:
18:61:ea:81:46:ea:44:a4:6f:62:45:51:60:61:f1:
90:80:b8:83:47:06:cd:9e:74:ec:75:7e:c5:67:4c:
66:63:27:2d:63:f1:c3:b9:35:20:d2:41:5a:6c:88:
b4:64:9c:b1:6b:6d:c0:f8:9a:8c:db:bc:34:db:99:
98:f4:b0:39:61:39:71:2c:de:9e:73:6a:17:42:4a:
d5:9b:1d:b0:84:e3:41:29:b5:88:80:6f:aa:84:08:
10:8b:04:7e:77:34:61:88:2f:f8:45:09:d7:d3:18:
55:c2:79:77:6d:47:ea:9b:5f:a0:97:54:92:80:3b:
f5:d0:5d:97:7c:4c:8a:b7:99:9c:71:6a:0b:ec:a2:
cb:b4:db:10:04:64:90:e2:71:06:0a:46:ad:b3:b4:
dc:e0:91:65:d6:60:ca:fb:90:d1:a3:f5:70:02:cd:
d2:c7:55:10:47:af:cd:ad:bc:ff:78:f4:ed:54:0e:
3d:b8:ac:e0:a1:b6:91:38:04:6b:53:8b:62:83:6f:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B0:21:63:0B:E6:76:A2:DD:7E:9A:BC:5B:BF:A9:BE:6C:3E:95:37
X509v3 Authority Key Identifier:
keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2f:d1:79:90:a3:88:0a:b8:e4:a9:81:15:fb:2f:cc:24:0a:
9e:40:57:e3:18:16:3b:62:09:df:09:13:b8:2a:36:f7:5b:73:
60:ed:3e:55:84:30:69:d7:2f:d6:11:c5:88:91:32:1e:99:f8:
23:f2:e5:03:1a:57:66:ef:7b:59:c8:b6:2a:0d:b9:4a:97:32:
a5:24:7d:8c:29:6a:0c:ea:d3:75:b6:d6:04:ed:07:ae:3c:75:
a3:25:6f:fe:f6:fc:f4:4d:70:65:81:65:1f:59:d7:e9:0a:38:
08:66:9e:7a:fd:d0:18:cb:82:8b:df:92:d2:37:8e:e9:d5:17:
57:4e:db:be:98:53:ad:aa:fa:94:59:f8:62:5a:63:24:6c:05:
41:90:cb:c0:aa:8f:95:32:c4:84:26:4b:18:85:47:34:8f:a4:
de:0d:c5:39:61:7f:8d:ea:a4:8c:2a:cc:3b:12:4a:8a:fb:b6:
ee:1f:5c:63:ce:22:9e:9c:19:14:f9:f8:8e:d9:bc:9a:5c:66:
85:09:57:28:06:78:56:d5:9e:0c:42:90:da:cd:21:a9:00:30:
30:2f:bf:61:b3:5c:8b:cb:14:9d:03:28:5a:e7:2c:31:03:71:
a5:cb:b1:73:02:e2:2e:41:8f:fd:1f:fe:3c:d4:32:ea:08:30:
39:b2:6d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGn+PGjX2X8Jhv4k67s23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNWVkZTY1ZWZlZGVlZGY4YzhhMDRiMjQ1YTNhNWRmNjNh
NjllODQwHhcNMjYwNzI4MTkwMTMwWhcNMjYwNzI5MTkwMTMwWjAzMTEwLwYDVQQD
Eyg4NWIwMjE2MzBiZTY3NmEyZGQ3ZTlhYmM1YmJmYTliZTZjM2U5NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE295ipofMC+ylmez4vtNqgkDZ//
cmZVOLgcvvaGkAOIoSrWUSZxZUEx0MHxjVOPhn7P8BP0gCs9MVoYYeqBRupEpG9i
RVFgYfGQgLiDRwbNnnTsdX7FZ0xmYyctY/HDuTUg0kFabIi0ZJyxa23A+JqM27w0
25mY9LA5YTlxLN6ec2oXQkrVmx2whONBKbWIgG+qhAgQiwR+dzRhiC/4RQnX0xhV
wnl3bUfqm1+gl1SSgDv10F2XfEyKt5mccWoL7KLLtNsQBGSQ4nEGCkats7Tc4JFl
1mDK+5DRo/VwAs3Sx1UQR6/Nrbz/ePTtVA49uKzgobaROARrU4tig28mhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWwIWML5nai3X6avFu/qb5sPpU3MB8GA1UdIwQY
MBaAFNpe3mXv7e7fjIoEskWjpd9jpp6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmw3ZVplX3Q3dC1NaWdTeVJhT2wzMk9tbm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNmE5ZGUtNjAzMy00YzlkLTg2MWIt
YWZmNTBlNGEwZTMzLzEvMmw3ZVplX3Q3dC1NaWdTeVJhT2wzMk9tbm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNmE5ZGUtNjAzMy00YzlkLTg2MWItYWZmNTBlNGEwZTMz
LzEvMmw3ZVplX3Q3dC1NaWdTeVJhT2wzMk9tbm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuC/ReZCj
iAq45KmBFfsvzCQKnkBX4xgWO2IJ3wkTuCo291tzYO0+VYQwadcv1hHFiJEyHpn4
I/LlAxpXZu97Wci2Kg25SpcypSR9jClqDOrTdbbWBO0Hrjx1oyVv/vb89E1wZYFl
H1nX6Qo4CGaeev3QGMuCi9+S0jeO6dUXV07bvphTrar6lFn4YlpjJGwFQZDLwKqP
lTLEhCZLGIVHNI+k3g3FOWF/jeqkjCrMOxJKivu27h9cY84inpwZFPn4jtm8mlxm
hQlXKAZ4VtWeDEKQ2s0hqQAwMC+/YbNci8sUnQMoWucsMQNxpcuxcwLiLkGP/R/+
PNQy6ggwObJtow==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:51 2026 by rpki-client