Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier: a7HOcxoAA6VyEN2Xyo1Jh1dgm/DjhsDA6nAMwnLf1QY=
Subject key identifier: D0:E2:F4:EA:6C:48:EE:78:1F:D6:C5:F2:5F:3F:32:0E:0F:7E:E9:A8
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer: /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial: 019FA2299F8B2B397B3375C16966AD949348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number: 0A59
Signing time: Mon 27 Jul 2026 06:01:04 +0000
Manifest this update: Mon 27 Jul 2026 06:01:04 +0000
Manifest next update: Tue 28 Jul 2026 06:01:04 +0000
Files and hashes: 1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: d5XBtgZ+ptghSMtf+TCAWOhZ82UyubkLLNQrZV5Yjgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:9f:8b:2b:39:7b:33:75:c1:69:66:ad:94:93:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Validity
Not Before: Jul 27 06:01:04 2026 GMT
Not After : Jul 28 06:01:04 2026 GMT
Subject: CN=d0e2f4ea6c48ee781fd6c5f25f3f320e0f7ee9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:31:98:55:3f:1f:da:9c:49:3d:97:13:37:
5f:96:7a:9e:43:cf:f6:1a:01:02:77:87:cb:4e:72:
80:85:d7:25:ad:5d:e4:e6:15:21:f0:19:3f:28:70:
98:24:02:cb:d6:37:4f:6b:e7:54:47:2a:08:80:4e:
f8:37:78:f4:4b:0b:40:f9:72:17:b8:07:b1:9e:f8:
3b:ca:47:52:24:bf:43:55:97:fc:34:1e:b8:04:ff:
57:5d:28:9b:ba:de:67:04:d2:b1:d8:e5:df:60:17:
25:ba:2c:18:9e:fe:f6:62:63:3f:80:96:a3:c4:82:
c6:fb:e5:9b:44:9b:80:eb:96:52:79:db:90:e5:9f:
c0:f2:7d:ab:4e:05:fb:72:b4:59:65:6e:1b:55:fa:
1e:0b:af:9a:b8:0b:04:42:6a:66:2a:cf:0f:42:ec:
d2:5b:6d:d7:5e:8d:1a:75:d3:68:81:8b:47:e7:62:
26:7f:11:36:20:79:c7:ac:ee:63:81:cb:09:f2:3a:
01:32:95:47:2c:a5:f2:2b:9c:c1:13:43:d9:42:e6:
c2:ea:7e:52:ab:35:e0:7e:b0:9c:50:ab:91:b7:02:
e5:76:d3:9b:5b:03:8f:0f:3c:80:b0:fe:b3:b9:76:
9c:23:6d:83:d5:7a:0a:d9:27:ab:49:f3:9a:f9:8f:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:F4:EA:6C:48:EE:78:1F:D6:C5:F2:5F:3F:32:0E:0F:7E:E9:A8
X509v3 Authority Key Identifier:
keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:a2:a4:8f:a5:be:8a:d9:34:65:69:46:46:08:8e:cd:e1:
1b:75:03:de:4c:19:7f:0a:53:e8:ba:63:63:7a:ac:66:96:9b:
be:d8:e3:ee:15:c3:f5:82:26:5b:eb:ab:bc:6f:e5:fd:5e:b7:
9d:88:45:9c:cc:b8:15:c3:70:f5:7a:a6:0c:4a:83:71:5c:ff:
77:c4:1c:5f:db:6c:61:53:38:56:89:a0:2c:45:15:70:ea:da:
7e:2a:21:cb:da:e1:a1:5d:2e:c7:a1:8c:23:18:19:4f:ce:e8:
37:7f:6d:02:d6:87:e2:c8:a1:03:65:76:6c:03:d1:49:95:5e:
52:ba:f0:88:29:b8:27:b5:f7:ac:f5:05:7c:e7:cd:8c:de:2d:
24:a4:a7:a8:55:45:3e:3d:56:d5:58:b6:40:0e:d1:82:b8:e7:
0d:9f:a7:a7:e0:5f:dc:df:18:6e:41:c9:cf:b0:12:b4:bc:ed:
73:f1:03:a9:5f:3f:5f:c2:54:8e:66:da:61:dd:05:1e:85:a0:
9d:f1:48:8f:cf:8d:34:46:f0:b0:11:c7:1c:56:a4:5e:92:e8:
57:e4:4e:53:0c:5f:68:ec:49:e7:51:bc:2c:46:f7:5c:67:d2:
ec:85:46:97:a7:73:12:f0:e7:47:18:4c:a9:ca:1f:93:e3:a2:
0b:b9:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:03:14 2026 by rpki-client