Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: EDailtMUxKuyIJgrTe+3tE4jnKGhhxSIdN3mAQZd83I=
Subject key identifier: B2:78:05:00:60:56:54:AB:05:65:C1:F1:E3:2A:D5:65:42:70:A7:7D
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 019FA1165E7BCD5CDE6A6491CCE35721228C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 080D
Signing time: Mon 27 Jul 2026 01:00:25 +0000
Manifest this update: Mon 27 Jul 2026 01:00:25 +0000
Manifest next update: Tue 28 Jul 2026 01:00:25 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: LAwGqyLaF7SfYvTCzbWiH++k0fupAyJlcEjPRF+qMMQ=)
2: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (hash: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:5e:7b:cd:5c:de:6a:64:91:cc:e3:57:21:22:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Jul 27 01:00:25 2026 GMT
Not After : Jul 28 01:00:25 2026 GMT
Subject: CN=b2780500605654ab0565c1f1e32ad5654270a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:8a:6c:4b:45:31:f4:da:45:5b:5b:20:83:
34:78:f9:8b:18:45:bc:2e:5d:33:4e:a5:fe:8c:fa:
54:62:d1:e2:75:33:ec:b5:c4:c4:db:40:4e:2f:c0:
0f:5f:39:1f:0e:fd:73:1d:a9:20:ad:7f:01:71:a2:
92:dd:dc:8b:32:77:72:43:cb:50:c5:39:5f:00:d0:
f6:a5:e9:42:d4:dc:d1:ef:34:d6:a2:92:5c:af:0a:
07:c2:86:e6:8d:01:67:2f:e2:4d:69:c2:e3:21:1c:
46:db:11:ef:08:e6:b6:3f:59:32:2e:eb:1a:0c:16:
80:e4:72:9b:82:8d:68:01:c1:fc:c6:42:ae:9a:d0:
cc:f0:62:48:ec:c9:1b:49:1d:2c:24:2a:86:e8:42:
65:85:c8:f2:a7:c3:7d:a8:12:47:63:30:c6:7e:8b:
89:e5:2d:bd:c7:8b:75:ee:4a:03:91:13:40:eb:0e:
68:77:72:de:0e:d0:fc:73:0f:ee:c5:b5:67:8f:67:
d6:e6:d3:77:2f:62:9b:bc:91:7c:fc:a5:cd:10:23:
47:61:eb:0e:6a:33:f1:34:d1:0e:c8:14:3f:f6:e5:
8b:bd:a0:cb:f7:66:f9:b2:e7:f8:5a:ea:69:25:e5:
a0:17:2a:fa:de:b8:70:bc:a9:b0:a3:24:a8:ff:25:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:78:05:00:60:56:54:AB:05:65:C1:F1:E3:2A:D5:65:42:70:A7:7D
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e3:0b:d6:90:14:a0:ac:e5:55:10:7a:ba:73:c8:09:47:0a:
fc:74:91:46:21:4c:1b:d3:41:25:4d:97:98:e5:5b:d2:ba:ac:
ae:32:70:a4:6b:d2:b1:0a:d0:7c:39:43:d7:ae:7d:69:d6:bb:
14:e3:75:63:40:d8:ee:a4:5d:cd:07:65:a6:a5:6b:27:bc:97:
5e:72:30:9f:c9:20:dd:36:8c:ac:9b:f1:a7:c8:21:29:5a:aa:
b1:2a:0a:c9:9d:22:83:27:cb:2e:2a:4a:35:eb:5e:71:ec:20:
c7:c7:f7:b3:04:ed:54:5f:3e:ff:ae:51:a3:07:0a:b8:59:1f:
e9:50:44:a0:e1:7e:b9:0a:9f:6b:1a:c4:66:ce:87:b2:5c:7d:
07:69:63:63:86:f0:9c:28:1c:4e:8b:01:f1:8a:8c:15:7d:a7:
f5:32:b2:49:a4:b4:96:c3:23:83:85:fe:ea:de:a5:5b:24:8e:
01:0d:ef:36:15:42:49:2c:fd:b7:9b:27:3f:05:bf:20:ce:de:
8d:ac:e3:c5:b8:33:b1:14:42:26:00:69:fd:46:e8:5d:b4:a3:
e3:66:5f:27:e3:cc:6b:cb:71:01:37:4c:a5:24:0f:d0:5f:e4:
03:02:e7:37:d7:a7:b5:ca:82:f2:2e:ac:6e:10:45:bb:22:29:
fe:d6:37:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:36 2026 by rpki-client