Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: paJUJ33guR7RM5qc/INWSplwYp9tYPED02FOJPQtugE=
Subject key identifier: D7:EC:5D:7A:7F:5D:BA:AA:B7:D3:CD:66:C6:CE:11:27:D5:D8:A3:17
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019F8568D09574B730117506EB953F61C7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 1174
Signing time: Tue 21 Jul 2026 16:01:06 +0000
Manifest this update: Tue 21 Jul 2026 16:01:06 +0000
Manifest next update: Wed 22 Jul 2026 16:01:06 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: jHbVCiE6gEs1nUBH2/iO6UaqvKHIt/KjD0JdEkk24CY=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:d0:95:74:b7:30:11:75:06:eb:95:3f:61:c7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jul 21 16:01:06 2026 GMT
Not After : Jul 22 16:01:06 2026 GMT
Subject: CN=d7ec5d7a7f5dbaaab7d3cd66c6ce1127d5d8a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5c:1e:9b:b3:b0:07:c4:8c:d4:85:c0:70:7b:
85:14:c6:ec:e7:16:02:02:0a:2b:52:cf:08:6d:ff:
6d:ee:38:48:54:20:64:c7:13:cb:58:63:e3:f9:37:
b9:19:f7:e4:55:48:dd:be:99:0b:08:8f:1b:b3:27:
98:c4:e9:73:cb:5a:90:61:aa:a9:f2:00:7f:c2:6d:
fc:55:8e:37:e8:77:40:54:12:c4:da:21:47:a1:4e:
a3:c9:b5:aa:ef:5b:26:fc:6e:8e:d1:6f:34:a3:f2:
07:4a:d2:a2:05:8e:57:76:cb:ed:31:8f:22:98:18:
b2:e5:ac:2d:d8:4a:70:29:18:9d:52:60:82:43:42:
74:13:f0:93:86:a2:1d:1d:a9:5a:9c:65:e2:d6:2d:
e7:68:45:b8:0d:6e:62:53:fe:e0:8a:c0:67:55:a6:
79:8d:6c:08:3d:f8:6d:73:1c:a9:f2:a4:b2:75:f4:
56:bd:55:e2:f6:e7:2c:bb:0c:83:cf:dc:07:b2:8b:
61:ae:e0:f3:a8:3f:80:3a:f3:c7:e4:ae:1f:8e:bb:
73:f3:fe:fc:ca:3a:3c:f7:ed:ca:9b:8b:7c:6b:3e:
50:27:31:c8:a0:cb:90:f6:fd:5a:0b:32:9f:4d:2f:
96:e6:31:9e:5c:d3:cf:0b:90:ca:3c:3d:1f:50:26:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EC:5D:7A:7F:5D:BA:AA:B7:D3:CD:66:C6:CE:11:27:D5:D8:A3:17
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:09:71:7c:b9:1e:4a:5d:d8:61:cd:13:ee:a0:10:da:45:
40:f0:5d:80:17:12:d8:f7:3a:ed:f8:1c:10:0d:0f:43:4d:da:
0f:63:d3:ae:35:eb:e6:42:37:84:de:fb:b2:a1:e7:c1:94:0a:
b2:6e:66:42:ef:a2:fb:d4:94:2c:80:8a:35:46:7e:a4:53:79:
71:ae:79:ea:46:4e:25:dc:bb:03:ea:95:c7:af:3a:db:98:c8:
7e:78:ce:3e:4c:0a:a4:23:59:59:e1:8f:c4:75:35:fd:3c:f3:
6c:59:41:f2:f6:c0:53:88:1e:38:62:c4:a4:ad:97:62:17:1c:
47:f7:a7:3b:1d:e3:98:6e:18:e3:f6:53:eb:3e:d6:06:4e:e3:
b8:28:c4:26:74:03:4b:42:27:96:c8:3a:77:43:ba:3b:8c:5c:
39:da:ee:09:c8:c7:c5:71:75:24:33:6a:f0:86:0e:b6:c2:06:
7f:ed:03:e6:a1:5c:51:18:d7:3b:9d:5e:50:4e:9b:3f:0a:82:
69:69:f6:ab:d6:6f:3e:d8:ae:37:21:27:08:e9:76:e1:d7:2d:
73:db:4c:88:db:e2:38:9b:f5:a3:58:c3:c4:48:ec:a0:b2:ee:
0e:39:6a:13:a9:8c:81:bf:0b:77:14:8c:eb:54:a5:6d:46:3c:
9b:10:6c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:49 2026 by rpki-client