Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: NbqQZtOVEhd2HFOEv4pYXH7V23u6Fnvx66LkzvOHr38=
Subject key identifier: F3:51:1F:29:5D:D3:EC:7B:75:4C:DE:92:3B:9F:36:F4:FB:DC:C4:07
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019F90FF55E1EF49711933D9A106636D958F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0718
Signing time: Thu 23 Jul 2026 22:01:20 +0000
Manifest this update: Thu 23 Jul 2026 22:01:20 +0000
Manifest next update: Fri 24 Jul 2026 22:01:20 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: xi7UavAueR2ghT5eyOVpcnXuK8SVov7wIQd0pJCpoEc=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:55:e1:ef:49:71:19:33:d9:a1:06:63:6d:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Jul 23 22:01:20 2026 GMT
Not After : Jul 24 22:01:20 2026 GMT
Subject: CN=f3511f295dd3ec7b754cde923b9f36f4fbdcc407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c7:0c:d1:cf:00:4d:29:32:6d:97:06:8f:0b:
35:cf:a7:d9:5d:4f:e6:4b:91:77:df:ca:2e:41:ca:
af:5b:b7:29:fd:ff:ac:9d:cf:0d:20:d0:0e:af:86:
93:8b:ec:9e:4b:3d:42:28:04:31:10:5f:90:1c:c0:
d9:ae:4a:21:b5:ac:92:39:21:29:42:88:ba:d7:71:
db:a2:e9:56:4e:22:26:94:09:6b:3e:ad:84:78:7a:
bc:47:36:fc:d3:89:9f:77:2f:c3:97:96:2a:7b:be:
a2:8a:fb:57:35:5b:bf:af:a9:d2:4e:96:4e:37:8e:
69:8d:af:9b:4f:15:f7:14:ff:b1:8c:16:52:03:28:
25:bc:65:00:03:15:57:6e:eb:a5:7b:32:f9:30:c4:
d7:f7:ef:f7:54:8c:d6:55:11:21:f7:0a:a6:45:b4:
f5:eb:cc:a4:2d:dc:d1:d6:8d:c5:90:aa:6b:61:ca:
da:ce:3a:89:90:0d:59:d4:ab:54:9f:19:8d:f9:ae:
c5:4d:dd:ea:fd:3a:52:4c:b4:f2:ca:f1:6b:c9:e9:
06:e3:4f:b9:ee:e9:6e:ab:b6:65:71:b8:2f:c9:4e:
95:ca:a4:d1:2b:16:38:7b:4c:fc:56:9b:c3:2a:28:
a7:35:06:92:da:be:f9:b7:9b:36:0d:2c:67:9b:f2:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:1F:29:5D:D3:EC:7B:75:4C:DE:92:3B:9F:36:F4:FB:DC:C4:07
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8e:33:51:da:37:03:a9:81:8f:b1:72:14:9d:51:04:d4:3d:
ab:bd:24:9a:e2:62:6a:c2:bd:4e:93:bb:dc:e0:a4:91:04:98:
16:6b:05:71:33:99:cb:a1:11:33:78:78:be:1c:07:bb:27:a4:
e3:d6:b4:3b:26:f0:3f:2c:50:7d:cd:35:2b:95:8a:0e:53:51:
49:1b:0b:1a:1e:f8:c8:df:56:a6:cb:07:9d:5b:36:7a:c0:18:
dc:39:92:de:f8:c7:b5:5d:eb:6b:34:61:88:47:4c:8a:a4:70:
51:0c:25:b2:56:5f:11:41:8d:78:a5:7e:62:b6:54:9f:9a:29:
e0:33:ae:e5:84:ca:e9:c7:82:f2:0e:8e:a5:f1:01:48:61:2a:
93:a6:d2:f3:4a:79:53:8f:0b:b6:f5:25:e9:9c:2d:6b:1f:96:
85:b3:ba:d9:bd:bd:e8:90:be:3e:c6:9f:38:58:a9:ee:f0:ad:
80:38:4e:a8:98:bd:ff:72:5a:39:dd:63:72:2d:7f:72:83:77:
57:05:9e:ef:ac:94:41:d9:02:22:96:b3:74:70:16:52:ca:76:
91:18:7a:81:99:0b:ef:3d:db:ee:f4:34:13:b8:ac:ce:bb:d9:
e0:35:0e:34:78:3e:8d:d5:d3:fe:48:8d:d8:76:4a:1d:28:94:
7f:16:fd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:33 2026 by rpki-client