Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: 5q6gP4DlEQSjNJK0gP8xJsfVsLqbcxpaNb9bGSRFztA=
Subject key identifier: EC:01:0A:1D:88:D9:90:58:6A:11:36:B8:E4:BA:48:B3:FE:64:48:38
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019FCD826AB1A7555B7AC1C93CF921D327DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 1091
Signing time: Tue 04 Aug 2026 16:01:43 +0000
Manifest this update: Tue 04 Aug 2026 16:01:43 +0000
Manifest next update: Wed 05 Aug 2026 16:01:43 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: rtEp2caZ4kj97DwWqdhidlYVM79uvAD4fbJlhY6xdYk=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:82:6a:b1:a7:55:5b:7a:c1:c9:3c:f9:21:d3:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Aug 4 16:01:43 2026 GMT
Not After : Aug 5 16:01:43 2026 GMT
Subject: CN=ec010a1d88d990586a1136b8e4ba48b3fe644838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:53:20:5b:4c:df:77:06:1d:07:3b:8d:16:bc:
d3:c4:b5:89:c6:31:27:cb:eb:9e:21:17:29:f4:a7:
ca:64:25:16:cc:71:8f:80:f1:8d:bf:45:c5:33:a6:
d7:c6:88:08:d2:08:f1:2a:8b:fd:f2:54:61:de:15:
9a:94:34:b1:d5:ac:e0:56:fb:89:e1:3d:6d:07:d4:
e9:0c:bd:ee:cc:9d:f4:a9:d2:d4:a9:d1:2b:15:2f:
00:fd:f0:0d:17:d0:8e:07:6a:12:a3:94:e4:e5:6d:
cc:12:ff:fe:d6:36:95:af:55:a5:8a:a9:65:53:63:
ba:21:1a:64:73:5b:50:48:eb:64:d7:3c:40:f3:b7:
be:56:87:71:d9:eb:3d:2b:2a:9a:bf:f0:61:c5:4e:
19:f6:aa:13:dd:c8:a0:02:f3:ce:c4:e6:bf:b2:dd:
5b:a5:f4:52:bc:44:bc:e2:77:a9:20:ae:93:9e:2c:
14:09:8d:aa:a6:e8:58:6f:ef:d9:a3:87:62:9a:cc:
5b:8f:54:36:d5:88:79:97:09:8c:9f:a2:5e:d7:c1:
b2:41:4f:1d:d3:51:b9:e6:46:0a:db:91:58:47:6d:
f2:c8:a9:58:bb:01:5d:dc:9d:f2:d0:0e:43:32:19:
28:76:a1:10:d8:66:3f:fe:5e:06:f2:18:b4:5a:52:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:0A:1D:88:D9:90:58:6A:11:36:B8:E4:BA:48:B3:FE:64:48:38
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ba:ba:26:fd:86:c4:e5:92:49:b7:4c:c2:ab:d6:36:6e:26:
a5:5b:e9:3a:f6:8a:7d:2a:68:98:bf:2f:37:03:b3:d2:9e:80:
24:0e:c9:1e:77:0a:a0:95:2a:e2:03:69:1c:6f:bb:67:f3:b3:
6d:57:9c:a1:17:01:75:f0:b2:19:0c:eb:93:46:d5:fc:2f:f7:
a7:73:f6:bf:c2:6e:eb:22:df:dc:02:3a:3f:b1:ed:5b:2b:97:
cf:5d:01:a6:45:6c:a7:f7:35:27:26:72:2e:51:34:50:6d:bd:
56:bb:34:d1:b5:ae:bc:8f:02:75:ac:86:9f:d9:98:82:45:21:
3d:10:f4:d4:14:c7:a6:47:3e:63:f4:aa:46:0b:e5:1b:b8:47:
88:73:df:b4:57:6b:f6:3f:09:c3:f5:50:32:1e:3b:23:3a:83:
d3:0b:c5:9a:14:66:e2:84:61:48:c7:01:f1:3c:9e:02:3f:d8:
c3:36:69:83:63:00:9c:0d:4d:23:b0:d7:42:22:d3:4f:a0:78:
b1:c2:b1:fa:ac:e1:83:ad:37:2d:a2:18:58:5d:d6:a3:bc:f3:
f8:a9:a9:f9:72:56:bf:4c:3e:d1:9e:50:71:bd:54:81:86:ca:
25:dc:eb:6b:12:7d:f5:8b:55:1e:69:0d:3d:df:dc:9b:d8:f5:
c2:ba:8c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:18:39 2026 by rpki-client