Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: YGvwB8QNQLYjjW/4669kQ2uILYOYNUXDd5OA4bozn6w=
Subject key identifier: B6:8C:92:5C:98:CE:6D:EE:8E:AF:17:A5:7C:20:8A:B9:2D:65:EE:F7
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 019F8F4775EC494BB2DD628B29CBB16632CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 0674
Signing time: Thu 23 Jul 2026 14:00:52 +0000
Manifest this update: Thu 23 Jul 2026 14:00:52 +0000
Manifest next update: Fri 24 Jul 2026 14:00:52 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: MSCNA/grBi1lEV5Fp0TYXCTRFqq+xcXbcYRwbEQfz0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:75:ec:49:4b:b2:dd:62:8b:29:cb:b1:66:32:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Jul 23 14:00:52 2026 GMT
Not After : Jul 24 14:00:52 2026 GMT
Subject: CN=b68c925c98ce6dee8eaf17a57c208ab92d65eef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:34:b8:b8:a5:72:63:bb:ed:50:97:0e:63:
32:4c:e7:31:9e:b2:36:c4:50:85:1d:b6:3b:ab:03:
92:ac:84:ce:7d:4b:d0:2b:68:67:90:5b:58:9f:72:
ac:66:b5:a6:22:cb:9b:45:85:da:32:bd:28:63:29:
75:e4:c1:e2:76:ef:9f:05:44:7d:31:50:9a:b2:95:
89:eb:ad:a7:0b:1f:fb:c4:b5:78:be:97:20:11:42:
42:5f:21:c5:0c:43:c3:41:31:07:48:4c:f7:68:7e:
c4:99:f6:3b:b2:68:b9:7c:86:48:f8:28:73:02:6b:
e9:5a:03:b5:22:ce:1d:2d:10:ff:37:26:17:19:ca:
50:77:e2:c1:ff:b8:c7:69:e7:63:ab:17:38:2e:aa:
cb:a9:97:dc:98:e0:03:88:59:d0:10:5e:bb:99:23:
b9:9d:8d:fd:2d:c5:4f:38:a1:eb:e3:60:b4:7d:9e:
54:e3:31:4c:d4:9f:db:67:04:8d:2c:3e:89:dc:a0:
db:84:18:d8:d9:d2:fe:a0:fb:63:90:54:f2:c7:34:
a8:ac:c8:11:16:35:2b:06:87:dc:ee:a3:b9:2c:ea:
27:b8:01:5f:66:98:ed:02:29:29:6e:c1:b6:60:22:
2d:3e:83:24:a5:e8:db:e8:90:37:79:da:26:51:70:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:92:5C:98:CE:6D:EE:8E:AF:17:A5:7C:20:8A:B9:2D:65:EE:F7
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0a:f9:f9:c7:00:47:b7:c8:24:2f:7a:88:17:3c:4d:72:ad:
43:e3:6d:73:80:4a:54:e3:cf:65:42:b5:33:9d:6a:87:bf:dd:
d8:b3:46:4f:4f:ee:0a:68:17:cb:8b:d4:07:c5:d8:46:36:b1:
c9:a3:e5:c0:a1:85:80:d8:3f:74:10:61:5b:f3:ec:63:c7:ea:
c3:39:b2:33:08:9f:f2:e9:93:3e:71:c7:c2:87:e3:74:d9:da:
8f:28:72:17:1f:f9:92:de:57:d8:b4:46:1b:64:24:2e:1f:0f:
d8:74:b7:5d:7c:d9:74:6b:94:26:cd:6e:4c:a3:58:72:a3:4d:
3b:6b:0a:5c:ad:e0:e6:cf:9a:b0:c0:34:1b:43:2d:2b:a1:9e:
5b:f1:ec:6d:d2:f1:99:6b:f2:b1:07:f0:e9:0d:05:2a:ce:f3:
f2:2b:31:a9:56:23:4a:95:fc:24:83:a3:b4:7c:53:e5:bf:91:
56:5a:0d:4f:7d:7e:e1:c8:52:0f:70:a8:9d:25:e3:58:cc:10:
15:67:dc:af:59:a5:ea:6e:60:6e:2d:9d:32:02:26:ec:48:56:
5f:dd:35:f3:c5:49:66:b1:c2:94:44:55:87:6b:ce:14:4d:9b:
ce:cb:64:17:8a:0e:91:a5:90:a2:d1:6b:1b:ef:a4:cb:67:69:
1a:01:42:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR3XsSUuy3WKLKcuxZjLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4Yjk3MWExYTIwYjY0ZjE0MjUxODAxZjhmNDM0YTQwNzVm
N2VhOTEwHhcNMjYwNzIzMTQwMDUyWhcNMjYwNzI0MTQwMDUyWjAzMTEwLwYDVQQD
EyhiNjhjOTI1Yzk4Y2U2ZGVlOGVhZjE3YTU3YzIwOGFiOTJkNjVlZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1U0uLilcmO77VCXDmMyTOcxnrI2
xFCFHbY7qwOSrITOfUvQK2hnkFtYn3KsZrWmIsubRYXaMr0oYyl15MHidu+fBUR9
MVCaspWJ662nCx/7xLV4vpcgEUJCXyHFDEPDQTEHSEz3aH7EmfY7smi5fIZI+Chz
AmvpWgO1Is4dLRD/NyYXGcpQd+LB/7jHaedjqxc4LqrLqZfcmOADiFnQEF67mSO5
nY39LcVPOKHr42C0fZ5U4zFM1J/bZwSNLD6J3KDbhBjY2dL+oPtjkFTyxzSorMgR
FjUrBofc7qO5LOonuAFfZpjtAikpbsG2YCItPoMkpejb6JA3edomUXChVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaMklyYzm3ujq8XpXwgirktZe73MB8GA1UdIwQY
MBaAFNi5caGiC2TxQlGAH49DSkB19+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkxseG9hSUxaUEZDVVlBZmowTktRSFgzNnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS85YmQ2NjktMmFiYi00OTliLWE5MWYt
NDQ0NWE0ZDc4NmQ0LzEvMkxseG9hSUxaUEZDVVlBZmowTktRSFgzNnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS85YmQ2NjktMmFiYi00OTliLWE5MWYtNDQ0NWE0ZDc4NmQ0
LzEvMkxseG9hSUxaUEZDVVlBZmowTktRSFgzNnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQr5+ccA
R7fIJC96iBc8TXKtQ+Ntc4BKVOPPZUK1M51qh7/d2LNGT0/uCmgXy4vUB8XYRjax
yaPlwKGFgNg/dBBhW/PsY8fqwzmyMwif8umTPnHHwofjdNnajyhyFx/5kt5X2LRG
G2QkLh8P2HS3XXzZdGuUJs1uTKNYcqNNO2sKXK3g5s+asMA0G0MtK6GeW/HsbdLx
mWvysQfw6Q0FKs7z8isxqVYjSpX8JIOjtHxT5b+RVloNT31+4chSD3ConSXjWMwQ
FWfcr1ml6m5gbi2dMgIm7EhWX90188VJZrHClERVh2vOFE2bzstkF4oOkaWQotFr
G++ky2dpGgFCVg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:47 2026 by rpki-client