Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: f8AWJmjBPebkeKLkJGOynhTjVEqtpxuhLxbBExuseeg=
Subject key identifier: 14:6E:F0:C6:D4:3C:AA:01:DD:11:09:33:C2:AB:C5:94:15:2D:EF:F0
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019FAC08276AD5B25FF446FABECFAA75B012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 1188
Signing time: Wed 29 Jul 2026 04:00:43 +0000
Manifest this update: Wed 29 Jul 2026 04:00:43 +0000
Manifest next update: Thu 30 Jul 2026 04:00:43 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: /kDIZJSILXQyuSpO4H873yMabNIeDQLEooeZN0AeXy4=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:27:6a:d5:b2:5f:f4:46:fa:be:cf:aa:75:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jul 29 04:00:43 2026 GMT
Not After : Jul 30 04:00:43 2026 GMT
Subject: CN=146ef0c6d43caa01dd110933c2abc594152deff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:b5:d6:a3:64:1f:5f:de:a8:31:2d:55:32:
85:da:2d:ef:1f:2c:d3:b9:24:e8:a4:ee:34:78:ed:
12:90:c5:cd:ec:b0:f7:90:0d:d6:c6:fd:e5:1f:ef:
21:f5:c1:10:9c:e9:72:48:68:47:16:3c:97:bd:e5:
05:8f:19:2b:08:b6:11:04:db:bd:62:03:28:b3:0b:
3b:a9:cf:54:84:88:fa:93:dd:e1:c6:cd:da:7d:3b:
eb:58:58:31:01:ae:a3:b9:18:d8:74:fe:13:bb:e1:
56:fc:2e:ee:c5:f8:d6:ce:f9:d5:a4:c9:21:00:21:
bb:0f:6c:60:7f:54:f3:79:4e:86:59:94:22:26:ec:
c3:db:0e:6c:56:c8:a2:e6:c1:71:7e:66:38:7f:9c:
bc:22:34:2e:ed:47:db:ad:8f:9e:31:22:ef:ab:b2:
d2:b7:89:12:86:1d:23:a7:0a:cf:a6:4d:d7:59:29:
0e:3a:5c:c9:f0:2a:3c:ad:87:98:06:39:d1:71:23:
dd:79:2c:e8:f1:6c:c5:a7:f1:93:3d:a6:c4:2a:56:
3e:9e:cf:f3:ef:31:31:e2:50:7c:13:8e:35:9a:0e:
5a:1b:d2:4b:79:70:a6:97:d9:b0:0e:4e:b3:d2:d4:
e2:27:64:82:14:eb:ee:ba:a3:a5:28:2b:f1:c9:90:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6E:F0:C6:D4:3C:AA:01:DD:11:09:33:C2:AB:C5:94:15:2D:EF:F0
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1d:dd:7e:b8:11:0d:26:33:f6:3f:a8:28:66:10:1b:a2:5e:
0a:56:de:c2:69:cf:81:a7:06:c5:4b:81:eb:38:54:6b:42:5d:
79:dd:19:44:b4:65:c9:09:59:e3:77:21:0a:20:cd:14:1b:c1:
57:1f:ad:83:f1:8f:c7:c8:d1:19:87:97:b3:da:32:45:20:cf:
01:e9:b5:dd:41:05:fa:31:52:3e:53:71:63:75:b4:16:3c:26:
cd:3a:ed:10:5f:7e:f4:35:b6:db:f5:65:4b:6b:b9:6b:20:d2:
f1:a3:02:76:c3:e5:7c:4c:e0:91:c4:96:f0:3d:b6:99:1b:19:
6e:a5:84:d2:cf:6b:9c:6b:79:b7:02:02:43:f5:fe:fe:85:0a:
cc:3b:dc:fe:fa:21:d5:da:47:1d:b4:b8:dd:f7:49:74:19:4a:
43:10:1f:a8:4f:e5:1d:24:3a:f8:ab:2f:b7:0d:ba:a4:82:83:
03:da:b2:c5:5f:7e:72:1a:a3:74:b1:67:80:a9:a8:a8:14:77:
e3:6a:25:e5:f1:2f:58:c8:d9:8d:f7:43:cd:02:0e:2e:24:c7:
5a:d4:a6:d2:5a:c6:a5:3f:41:c0:27:91:49:00:65:2e:3c:9d:
58:7c:1e:b7:01:28:fd:ba:e1:e3:c2:8b:09:64:78:92:ae:fb:
44:69:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:21 2026 by rpki-client