Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
File: 2Znl1k5EsXM8YXNzN86CtKaUOkY.mft (raw, json)
Hash identifier: yNWeUFwQ/y8qDcvUZdeY5UxbqhkMohithSZSp8rv51g=
Subject key identifier: CD:29:33:98:10:E5:3D:0A:DD:91:5A:3B:E0:7F:D2:BF:91:37:1D:DD
Authority key identifier: D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
Certificate issuer: /CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Certificate serial: 019F9391B4017DCB5FF807A5D05533230050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
Manifest number: 0806
Signing time: Fri 24 Jul 2026 10:00:27 +0000
Manifest this update: Fri 24 Jul 2026 10:00:27 +0000
Manifest next update: Sat 25 Jul 2026 10:00:27 +0000
Files and hashes: 1: 2Znl1k5EsXM8YXNzN86CtKaUOkY.crl (hash: K2ii9bKVLolxLdRmi9iqHp5ISY7kir8iAgaQcjX7kYM=)
2: ucSPBgYBUYo8QSuoI_Y0Icy9e18.roa (hash: HWPghkFxbvF44RC0pt0Q9i6IdWhnoDgfcFXVwwuNG8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b4:01:7d:cb:5f:f8:07:a5:d0:55:33:23:00:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d999e5d64e44b1733c61737337ce82b4a6943a46
Validity
Not Before: Jul 24 10:00:27 2026 GMT
Not After : Jul 25 10:00:27 2026 GMT
Subject: CN=cd29339810e53d0add915a3be07fd2bf91371ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:d2:bf:2d:b4:85:d1:9f:82:bc:59:d9:4e:
f6:bb:94:c0:9c:3e:d4:aa:cc:1d:1c:61:b1:65:b6:
3d:98:66:a1:01:83:5e:d8:ea:c6:90:b4:50:1d:f4:
30:d4:bf:60:eb:bf:21:eb:db:8a:21:06:58:50:ea:
30:19:2c:48:55:d2:b7:f9:19:fb:9e:dc:11:ee:f2:
01:9a:44:2a:c2:61:88:14:ae:74:07:c8:52:87:5f:
cd:3e:7c:16:d3:eb:58:33:94:6b:59:a9:2d:6f:a2:
54:72:79:c6:d9:5c:11:df:75:a6:2b:12:0f:2f:ba:
82:24:d5:72:2f:e7:02:2b:84:26:72:28:dd:5a:2d:
63:bc:0e:05:af:7b:52:a6:9e:a4:27:72:53:a9:36:
ae:b8:0d:71:b1:1a:31:9f:96:a8:9f:13:f4:c6:7f:
dd:85:46:07:fe:0a:09:fd:fc:7e:8b:c0:d5:da:57:
a6:63:91:58:be:d6:39:8d:b0:1f:d9:e6:60:00:c4:
e0:0f:a6:ec:be:e8:7d:9e:b4:81:36:bf:ce:5f:f5:
48:e7:07:a3:93:0c:e1:fa:f1:86:c2:cb:08:a2:41:
d2:6f:2b:1d:aa:d3:cf:29:8d:02:df:78:1d:d2:39:
ed:44:9b:7b:bc:ea:d8:4b:cd:f6:a7:9e:27:53:36:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:33:98:10:E5:3D:0A:DD:91:5A:3B:E0:7F:D2:BF:91:37:1D:DD
X509v3 Authority Key Identifier:
keyid:D9:99:E5:D6:4E:44:B1:73:3C:61:73:73:37:CE:82:B4:A6:94:3A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Znl1k5EsXM8YXNzN86CtKaUOkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f01f99-bc01-4b39-9362-9f47c7410d41/1/2Znl1k5EsXM8YXNzN86CtKaUOkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ba:9f:99:db:0e:6c:17:e8:36:5f:88:1b:ae:45:f1:a7:7c:
94:cc:b5:82:19:e2:88:1a:6c:27:a6:ce:72:14:0c:f3:73:f7:
78:21:7d:6c:74:39:84:43:01:e0:67:4f:fe:21:53:2f:cf:b6:
e7:97:48:c4:22:cd:79:fe:e8:39:b9:82:3a:08:c6:8a:87:a4:
34:4f:31:7a:56:bd:b3:57:3b:4c:41:62:5b:ba:23:85:c2:f9:
07:c0:38:71:0c:cd:b2:ad:cc:7f:93:18:0d:27:6c:e0:99:98:
61:be:03:cf:a8:e4:82:1f:49:fd:f9:38:9c:d2:ba:af:62:01:
b5:8b:1d:7f:90:a2:78:82:d1:4c:12:bc:cb:21:47:7e:8c:92:
c4:2d:f3:8e:fa:46:42:7a:e3:30:bf:04:4c:5d:f6:ec:f9:aa:
d2:4d:86:d3:e7:d6:22:85:4d:ae:03:e0:29:b2:46:5b:d0:97:
3c:61:2c:1a:2d:c9:fc:44:20:d0:48:c0:4f:fc:a9:05:c0:5a:
5e:f7:05:b0:70:87:50:dc:25:52:94:a3:a7:c3:40:49:af:07:
ab:31:71:e0:18:c2:9c:63:59:02:4c:ac:b6:ae:45:c2:81:17:
69:bd:fb:2f:48:2d:cb:98:65:c5:43:73:e8:dc:96:09:d8:5f:
56:c2:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:12 2026 by rpki-client