Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
File: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft (raw, json)
Hash identifier: jtvGX4lFPMO41crUEJ5Sjq36XYjmmc6iswTcAQ36ePE=
Subject key identifier: E3:68:1D:19:77:2B:84:74:56:92:8B:4B:94:8D:A9:BE:48:2A:6A:44
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 019F91A3EEB5FE374654B0ED00BF5CAC4665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
Manifest number: 19DE
Signing time: Fri 24 Jul 2026 01:01:07 +0000
Manifest this update: Fri 24 Jul 2026 01:01:07 +0000
Manifest next update: Sat 25 Jul 2026 01:01:07 +0000
Files and hashes: 1: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl (hash: 6prQPzMVpHIV4p7iDm9CTJ1p3kGAGFYyAbPH7pcybmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ee:b5:fe:37:46:54:b0:ed:00:bf:5c:ac:46:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Jul 24 01:01:07 2026 GMT
Not After : Jul 25 01:01:07 2026 GMT
Subject: CN=e3681d19772b847456928b4b948da9be482a6a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:c8:26:2f:a3:48:19:23:e0:b5:ae:38:48:
82:8e:bb:19:36:7b:1a:2b:21:74:e8:10:5e:b7:f2:
ea:28:9b:7d:08:a9:c0:a0:a7:98:12:3f:8a:c5:e8:
3b:3c:d7:a4:d0:a5:2f:76:a1:41:f9:db:0d:90:70:
b7:7b:6f:ab:4f:5f:cb:da:30:e4:e3:47:6e:fa:5f:
c3:05:24:28:a2:1f:cb:b3:30:b3:72:c6:cd:26:d6:
d4:4f:64:cb:6d:ea:10:81:c2:40:81:86:c9:b5:fb:
ef:ba:1e:1f:d7:9b:a7:bc:1c:07:df:b3:e1:1f:2e:
9c:37:ec:1b:97:91:1e:43:c2:60:ab:ba:44:b6:0c:
7a:fb:b5:1d:7d:24:e9:c4:44:26:4d:26:a9:6d:a1:
b1:0d:3c:27:7d:69:52:e6:b7:2e:10:62:e9:43:3e:
c4:46:c8:18:2c:80:1a:a5:53:f4:01:e8:7f:1d:fc:
91:76:11:d7:fb:c1:75:36:af:b9:9e:27:bc:c5:12:
b4:35:a7:2d:80:74:39:08:02:28:63:6f:33:41:2c:
bd:41:4d:e7:d5:04:ab:0d:15:89:05:42:db:85:8a:
7a:b6:61:7e:1f:c2:d2:13:0b:21:59:50:88:15:62:
dd:8f:fe:5b:34:b0:82:c1:59:9b:8a:de:71:38:92:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:68:1D:19:77:2B:84:74:56:92:8B:4B:94:8D:A9:BE:48:2A:6A:44
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:74:f5:4d:ed:95:91:46:3b:c2:42:1a:76:bb:49:23:1d:03:
b2:48:97:09:ba:74:87:66:e5:3a:4d:4f:38:29:f1:db:54:19:
53:30:5b:07:93:88:63:ee:38:40:fb:c3:9b:f3:57:ee:9e:9b:
ff:96:29:04:d9:4b:00:99:52:e1:2f:8b:15:6e:6c:82:3c:cc:
4b:e3:bb:90:da:7f:54:2f:1c:ef:df:84:27:7d:75:82:24:b7:
44:dd:79:1a:6f:69:92:7f:d8:16:ac:01:1f:e3:b1:16:17:35:
6c:58:fc:8e:1b:e8:cb:3d:8d:21:7d:c7:c8:5c:b8:62:9b:fb:
36:73:7f:44:2d:d3:39:47:c8:06:a3:aa:22:76:45:bc:2c:6c:
ae:f3:48:f6:3c:60:be:aa:c9:40:44:6f:67:44:08:84:f3:fe:
a3:5f:8b:c0:83:14:4a:57:8b:9f:13:cd:e4:85:31:cb:29:b2:
dc:7d:c1:0b:67:31:c7:f4:43:62:9c:dd:bc:de:89:91:04:a3:
a4:8e:3e:bf:e2:64:c5:ce:e6:1c:67:6f:86:00:36:04:b2:7f:
bb:95:4b:8d:db:6c:2c:64:20:d9:17:98:e5:79:57:d9:f5:c2:
c1:6f:10:a7:c0:cb:85:ff:86:3b:c4:77:df:a4:c9:55:1f:4f:
6d:74:01:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:17 2026 by rpki-client