Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: bq6d/veXS8vCRb4wLXiaGyW5iCwTqDyfJL/r7ju+gzc=
Subject key identifier: EC:87:7B:EF:89:7F:8E:26:B6:E6:9A:21:C8:CB:55:C4:0F:06:25:9B
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 01A0016EDCE25D400E8C91E94C49CC6A384C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 18:00:37 +0000
Manifest this update: Fri 14 Aug 2026 18:00:37 +0000
Manifest next update: Sat 15 Aug 2026 18:00:37 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: G1lVM5ZdPDVcCdEfcIpgcoWCvF5zafQe6rLuwvUSvnE=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:dc:e2:5d:40:0e:8c:91:e9:4c:49:cc:6a:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Aug 14 18:00:37 2026 GMT
Not After : Aug 15 18:00:37 2026 GMT
Subject: CN=ec877bef897f8e26b6e69a21c8cb55c40f06259b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:64:1c:6c:25:72:ea:fa:80:12:49:90:fa:
4b:39:d4:2c:9e:c0:f1:a6:47:6b:b4:d3:c1:d4:f5:
f5:5f:b9:94:04:70:21:02:bd:f0:26:cb:68:73:60:
7d:b9:a9:e6:58:cf:a1:38:d4:90:42:b2:f6:d3:7c:
9b:11:46:33:d0:f9:9f:40:90:96:23:d2:e7:cf:4a:
8a:44:e5:de:67:d9:77:4c:2d:b9:0c:05:f3:8c:13:
e4:a5:ac:4f:99:13:9d:e8:ec:02:1b:58:10:da:2f:
24:f5:f4:9e:57:ac:69:a7:01:3a:c7:da:63:a3:be:
3f:b4:56:26:99:dc:1e:c7:67:16:5b:e7:38:48:64:
3d:d7:43:50:47:30:a6:ce:03:15:f4:10:c2:f6:a4:
d5:ec:50:ea:82:8a:1e:79:9a:08:b1:44:0e:8c:78:
21:09:4a:c7:a6:51:4d:29:11:55:dc:46:69:d1:ac:
34:ee:63:25:ad:fe:5e:f3:e1:46:54:ea:b0:41:ed:
b4:97:fe:b9:9f:b6:4c:8a:44:e3:c7:33:14:61:5c:
a1:93:f5:0d:c9:27:d0:a2:7a:d5:dc:d6:2e:b6:11:
13:6e:c6:fa:ec:4f:df:7a:18:29:33:68:2f:70:bc:
0c:78:2e:66:5c:00:7d:f2:d0:a9:bc:2d:10:24:d6:
b9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:7B:EF:89:7F:8E:26:B6:E6:9A:21:C8:CB:55:C4:0F:06:25:9B
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:ea:82:5b:ba:6c:98:00:e0:64:20:cb:b2:74:7e:a3:2d:
a2:1b:b0:71:48:b2:6b:bb:bd:ef:6a:9a:20:2b:a8:c5:0a:5e:
42:f9:2e:29:d9:bf:bc:72:0e:9e:4e:3d:69:e9:75:70:95:22:
36:0c:47:0f:ec:04:c5:4b:96:8c:11:61:de:85:70:9d:2d:64:
24:46:d7:59:ce:6c:1e:85:79:c4:b5:5e:34:7d:6c:35:fb:d6:
72:71:45:c5:82:fc:97:b7:75:3e:6c:09:16:8f:16:95:7b:41:
85:7c:df:6e:08:e1:11:b6:0b:16:cb:c3:ab:57:53:8d:8c:63:
53:6e:2a:d6:73:cd:55:af:93:58:37:c5:2b:a8:91:42:ee:8e:
6d:54:bc:d6:18:40:8c:9e:a3:52:1e:81:a7:07:84:db:18:08:
8f:de:f2:c6:0d:4e:0a:34:b3:a6:01:e3:bc:97:2e:2f:94:4c:
ed:6c:4a:08:90:9e:a3:62:5e:84:a1:64:64:dc:4d:7c:3a:e8:
31:fa:f3:57:5d:4c:71:c1:08:a4:ac:2a:1f:aa:0a:d4:75:fe:
f4:54:c5:40:3a:fd:e8:68:f0:3a:23:11:ad:8b:e8:6f:ac:26:
e7:b3:62:df:ca:9d:33:c1:3c:1b:2b:96:ef:5b:5e:a5:90:35:
cb:6e:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:18 2026 by rpki-client