Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
File: 2iTzVyHKMag-L26TfhdAjm57LGE.mft (raw, json)
Hash identifier: MmFI1jCi7hlHDt0ZHDWh+M79PCyCmOiKH1Owq4IY0eM=
Subject key identifier: 8F:80:CF:98:7A:DD:D2:EE:CE:6C:5A:14:8A:CF:F1:2B:9A:F2:A4:B9
Authority key identifier: DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
Certificate issuer: /CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Certificate serial: 01A149BD3ED56102B8DA3344A026CF514383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
Manifest number: 1AB0
Signing time: Sat 17 Oct 2026 12:01:41 +0000
Manifest this update: Sat 17 Oct 2026 12:01:41 +0000
Manifest next update: Sun 18 Oct 2026 12:01:41 +0000
Files and hashes: 1: 2iTzVyHKMag-L26TfhdAjm57LGE.crl (hash: 8ZTdIT0VjcxkPFCbTxSyeLEk0yFgFX6vKQZzqP7v44g=)
2: EMYZWM6m9RpWCTQk3MWhN1mZ9-0.roa (hash: c9D6HF2YxGeHbf3oxM7nmQWg4IZpAm/i+q7H/DzFs4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bd:3e:d5:61:02:b8:da:33:44:a0:26:cf:51:43:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24f35721ca31a83e2f6e937e17408e6e7b2c61
Validity
Not Before: Oct 17 12:01:41 2026 GMT
Not After : Oct 18 12:01:41 2026 GMT
Subject: CN=8f80cf987addd2eece6c5a148acff12b9af2a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1d:da:c3:b0:a6:96:e5:bb:f0:f4:0f:47:2e:
44:c0:03:06:55:68:db:88:67:c5:e1:30:cb:0b:f8:
c8:13:04:5d:36:1d:62:b8:74:7d:7f:5e:98:b1:1e:
d1:0b:87:91:8d:61:ba:4d:9e:57:d1:ee:de:49:94:
2e:53:6a:2a:d4:5a:d0:cf:c9:20:3a:5d:59:36:b1:
a5:63:4f:97:f5:b6:86:90:0e:ea:e9:7f:e4:3e:16:
b5:80:be:81:f3:4a:c1:19:ba:89:17:f6:cf:6b:bc:
86:57:9a:fb:4e:65:8e:dc:f2:0c:f1:1b:45:15:51:
35:4d:0d:9f:45:48:9f:0c:48:dd:d7:5f:fe:2e:27:
57:cc:25:bb:1f:1f:f6:af:ea:7b:61:3c:e2:b5:87:
66:30:14:40:1e:93:84:3d:fc:b4:c0:ed:55:e9:a2:
5d:d3:06:9f:bf:3d:76:9e:c8:5d:e4:71:38:69:7b:
8b:5b:a4:8c:58:0d:0f:4d:31:f8:71:0d:5a:88:c9:
94:a5:9c:81:ed:f1:c3:4e:2d:2d:76:86:90:8d:c9:
03:8f:d9:8d:9a:8b:23:ca:53:2b:29:50:db:a1:67:
9e:71:85:fb:db:3b:f3:0b:4f:c1:9d:24:98:2c:52:
d8:7e:0a:46:9f:6b:a4:13:9c:d7:5c:05:f2:ad:9d:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:CF:98:7A:DD:D2:EE:CE:6C:5A:14:8A:CF:F1:2B:9A:F2:A4:B9
X509v3 Authority Key Identifier:
keyid:DA:24:F3:57:21:CA:31:A8:3E:2F:6E:93:7E:17:40:8E:6E:7B:2C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTzVyHKMag-L26TfhdAjm57LGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ececf4-e930-4192-84dd-80f31d3ea152/1/2iTzVyHKMag-L26TfhdAjm57LGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ca:26:4e:f9:15:3c:26:b1:6c:e4:59:a6:3a:b1:2f:f6:88:
d5:a7:bb:64:39:f6:d4:55:c6:d0:dc:54:2c:d7:a0:01:15:00:
53:4b:9d:a1:92:e1:a0:3a:59:5d:fa:b8:9f:35:4a:b3:98:a4:
07:db:1c:96:5f:d2:aa:3e:55:21:f2:74:9f:8c:a3:74:9f:99:
80:80:07:cd:5c:1e:c4:3a:8c:28:a3:d5:68:31:f8:b6:78:bc:
d8:b1:b7:19:58:38:5b:a0:d2:26:07:ce:0a:1f:b6:53:9c:cb:
8e:3c:4e:08:90:cd:c7:9e:56:47:95:2f:11:de:dd:87:76:7a:
e3:b8:27:67:39:43:32:46:ee:38:07:87:6b:89:0d:56:fe:88:
a1:aa:3a:a1:02:b1:9d:f8:10:9e:24:a6:ac:f9:60:6f:85:ae:
90:52:c6:be:be:73:7c:39:8b:c6:e9:db:45:7f:9c:f4:b3:96:
aa:ad:0b:99:a2:f7:2a:5e:c9:68:2c:b0:6d:f8:eb:c5:2d:28:
fa:2b:10:a7:87:64:b4:8a:d2:9d:6b:10:cf:97:10:35:cc:32:
71:b3:0b:e7:1f:c6:4a:83:20:56:bb:6a:94:57:2f:b4:fe:9d:
d5:a0:f8:03:a5:88:37:c3:b9:dc:76:99:23:65:28:9a:d6:a1:
30:ee:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:49:17 2026 by rpki-client