Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: EPiOFzShsGk6AN4xz4+57eRF2/KWdbkClgcyMmN3AQw=
Subject key identifier: 22:26:A2:BF:7E:34:B5:23:5E:FA:85:EA:28:D5:B4:9F:D4:75:44:85
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 019F9091233DD77B50F7E228935A5CDF1F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 072B
Signing time: Thu 23 Jul 2026 20:00:58 +0000
Manifest this update: Thu 23 Jul 2026 20:00:58 +0000
Manifest next update: Fri 24 Jul 2026 20:00:58 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: l3m33co3De31+xt5x7QjPNB+Imy5qfNhmQ21ER53FPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:23:3d:d7:7b:50:f7:e2:28:93:5a:5c:df:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Jul 23 20:00:58 2026 GMT
Not After : Jul 24 20:00:58 2026 GMT
Subject: CN=2226a2bf7e34b5235efa85ea28d5b49fd4754485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:fb:42:cf:ae:d6:1e:08:86:4f:08:c7:30:
98:cc:cd:b8:08:4e:e4:b6:fe:fa:69:05:06:c7:f5:
bc:31:86:2c:4e:bc:89:bd:27:c8:54:91:6e:99:ba:
c6:c1:1b:e4:07:3e:75:30:b9:a5:e2:8f:33:19:56:
cf:d0:13:d3:53:f3:8b:6f:c5:0c:b7:01:1f:93:c2:
83:e3:94:28:57:5f:2c:b9:d7:70:df:8f:7c:dd:d6:
4b:24:8d:c2:28:a8:74:7d:f8:2b:0a:f8:11:8c:ac:
c9:1d:71:ed:6d:3f:4e:fd:35:25:d2:00:4f:f5:30:
ef:c0:65:ce:4a:98:5a:23:68:77:ee:6b:e3:f6:b6:
14:1c:77:e3:7b:96:cf:28:32:6d:dc:47:7d:94:4f:
82:45:c4:f1:f0:42:79:68:26:02:94:b6:91:e6:b0:
6b:f5:2d:4e:ea:4e:94:99:61:bb:15:f7:b1:c9:23:
47:c1:7a:25:fd:ab:ef:9a:02:d9:94:aa:3a:ed:8b:
3f:ed:2f:35:4d:41:9f:99:e6:bc:ae:24:49:48:51:
02:93:6f:fa:93:7a:be:c9:92:54:78:34:f1:f3:bb:
1e:02:de:69:1a:a1:91:8e:a0:4f:b4:49:39:3c:ea:
bc:89:c9:f8:b8:85:b9:73:cb:3a:2d:68:82:82:d5:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:A2:BF:7E:34:B5:23:5E:FA:85:EA:28:D5:B4:9F:D4:75:44:85
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a1:d1:9f:c6:a3:cf:27:60:20:26:36:3c:ac:d1:ec:8a:b4:
5d:34:fb:12:c7:59:83:f4:b4:73:85:3b:8c:9d:ca:4b:c0:66:
48:e5:f1:21:24:bb:95:28:d0:86:98:59:8b:59:ef:14:0b:79:
07:29:17:48:dc:1f:23:f1:fb:24:9b:00:57:50:d1:b0:85:3d:
37:8e:8c:d8:e7:6e:ba:b0:af:e9:01:6a:a2:3a:85:08:c5:9e:
37:6b:40:ff:b2:63:10:1e:da:c9:93:1a:00:16:89:b3:c8:2f:
6e:c6:63:7c:24:61:d2:4f:e1:6c:7d:12:8b:81:87:4a:ed:23:
9e:54:83:7b:95:ae:66:92:a9:27:99:02:22:65:26:6f:66:9e:
d4:e0:ef:22:c5:b9:ec:c8:44:09:e2:b2:71:0c:aa:0a:ff:ce:
1e:ba:ea:38:94:66:2f:84:1d:82:57:55:ce:c2:b8:4c:c1:40:
69:dd:d4:8f:d5:51:f1:19:f8:5b:ca:89:91:43:6a:33:53:82:
d7:b1:df:ab:03:d7:56:77:2c:f6:10:c6:87:0e:a5:4d:26:bb:
ed:4d:49:c7:cc:49:41:59:c5:14:c3:de:c7:b9:40:5e:cf:8a:
4a:3d:41:63:85:24:08:00:ae:0a:38:cc:54:9b:60:cc:45:b2:
ce:f8:5d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkSM913tQ9+Iok1pc3x8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTM0MDk2ZWMzZjdiZmM1NGQ2NTRmY2UwZjAxNjhhZDk2
NjIyY2QwHhcNMjYwNzIzMjAwMDU4WhcNMjYwNzI0MjAwMDU4WjAzMTEwLwYDVQQD
EygyMjI2YTJiZjdlMzRiNTIzNWVmYTg1ZWEyOGQ1YjQ5ZmQ0NzU0NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+/7Qs+u1h4Ihk8IxzCYzM24CE7k
tv76aQUGx/W8MYYsTryJvSfIVJFumbrGwRvkBz51MLml4o8zGVbP0BPTU/OLb8UM
twEfk8KD45QoV18suddw34983dZLJI3CKKh0ffgrCvgRjKzJHXHtbT9O/TUl0gBP
9TDvwGXOSphaI2h37mvj9rYUHHfje5bPKDJt3Ed9lE+CRcTx8EJ5aCYClLaR5rBr
9S1O6k6UmWG7FfexySNHwXol/avvmgLZlKo67Ys/7S81TUGfmea8riRJSFECk2/6
k3q+yZJUeDTx87seAt5pGqGRjqBPtEk5POq8icn4uIW5c8s6LWiCgtWhGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCImor9+NLUjXvqF6ijVtJ/UdUSFMB8GA1UdIwQY
MBaAFNpTQJbsP3v8VNZU/ODwForZZiLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxOQWx1d19lX3hVMWxUODRQQVdpdGxtSXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80MDUyYjUtYjU5ZS00MzNmLTg3YWEt
ODZmMmExYWY0ZDc5LzEvMmxOQWx1d19lX3hVMWxUODRQQVdpdGxtSXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80MDUyYjUtYjU5ZS00MzNmLTg3YWEtODZmMmExYWY0ZDc5
LzEvMmxOQWx1d19lX3hVMWxUODRQQVdpdGxtSXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKHRn8aj
zydgICY2PKzR7Iq0XTT7EsdZg/S0c4U7jJ3KS8BmSOXxISS7lSjQhphZi1nvFAt5
BykXSNwfI/H7JJsAV1DRsIU9N46M2OduurCv6QFqojqFCMWeN2tA/7JjEB7ayZMa
ABaJs8gvbsZjfCRh0k/hbH0Si4GHSu0jnlSDe5WuZpKpJ5kCImUmb2ae1ODvIsW5
7MhECeKycQyqCv/OHrrqOJRmL4QdgldVzsK4TMFAad3Uj9VR8Rn4W8qJkUNqM1OC
17HfqwPXVncs9hDGhw6lTSa77U1Jx8xJQVnFFMPex7lAXs+KSj1BY4UkCACuCjjM
VJtgzEWyzvhdPQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:21 2026 by rpki-client