Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: adYSFAYeQRREBZBXaahj7MnD+gxIxnRiM8CZxVSzsKs=
Subject key identifier: EB:0B:B5:EA:D6:EB:0A:70:78:C3:DD:DA:F6:CC:6E:70:D4:31:5B:DC
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 019F91A3879F1C3B9A83479371A6A7C28522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 1923
Signing time: Fri 24 Jul 2026 01:00:41 +0000
Manifest this update: Fri 24 Jul 2026 01:00:41 +0000
Manifest next update: Sat 25 Jul 2026 01:00:41 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: X//Q3Id5mz33veTPJxcwvqY9s+CYAQlYzlFMkxFCC6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:87:9f:1c:3b:9a:83:47:93:71:a6:a7:c2:85:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Jul 24 01:00:41 2026 GMT
Not After : Jul 25 01:00:41 2026 GMT
Subject: CN=eb0bb5ead6eb0a7078c3dddaf6cc6e70d4315bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:c1:8b:33:c5:c6:80:24:db:e3:72:ef:f9:
3e:a3:0e:2b:1e:70:9d:18:32:68:27:91:a5:17:2f:
be:3c:6c:ac:01:5e:12:d0:08:24:55:32:13:81:43:
76:39:66:78:fa:ed:c4:e8:d4:49:ed:2d:15:38:27:
71:22:31:96:92:97:2f:b2:ff:86:22:fe:ea:00:f3:
97:cd:52:af:c5:76:26:77:5e:1f:aa:be:14:4d:d4:
ef:a1:17:3e:69:2f:d0:82:c7:a2:3d:f4:f5:2e:73:
4c:d6:91:27:f7:c6:fc:7e:ba:75:ed:be:93:99:a5:
ec:1c:4a:33:26:02:bc:75:d0:39:c4:d3:22:34:22:
d1:f1:27:91:b6:7a:74:c2:41:db:dc:1d:4a:cc:08:
3e:0d:ab:ba:0f:db:eb:61:31:11:46:79:4b:7f:d2:
1d:4a:d1:5a:ce:22:0d:77:98:f9:e2:85:d4:40:eb:
a6:9c:4c:a1:19:21:67:b1:31:40:9d:04:91:25:f9:
c1:b1:b3:67:f3:7c:72:04:92:96:02:0f:92:a3:46:
5d:06:ad:e1:7d:cd:f4:54:94:d9:59:ec:3c:2c:9e:
f0:aa:0c:ab:2a:af:36:b1:7e:bc:16:f2:82:d3:10:
71:b2:29:2f:78:3b:14:86:d8:7d:26:65:6c:c6:58:
2a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:B5:EA:D6:EB:0A:70:78:C3:DD:DA:F6:CC:6E:70:D4:31:5B:DC
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ed:e1:d1:af:ea:ad:49:f0:13:8c:db:e7:18:e8:b5:34:57:
69:fa:45:e5:a4:b1:8c:38:b1:4c:89:73:35:05:ac:ac:c1:9c:
63:95:23:f1:53:c1:ea:af:6a:5d:c5:65:8e:78:29:8a:ac:af:
14:5b:6c:88:6d:11:e8:06:6f:cd:9a:07:2c:55:df:93:f4:7d:
cd:a7:50:9c:57:d2:ee:ac:66:cf:f8:fc:c8:4f:21:b8:41:7a:
52:d6:11:ff:3d:2d:13:d6:8d:9a:75:72:ff:f2:c5:7a:54:48:
8d:60:3e:17:34:14:37:ef:a1:c7:e4:c1:d5:5e:ff:48:6a:66:
f1:00:09:84:3b:c0:a4:55:6b:bc:c5:b6:bf:30:77:4e:5d:cf:
10:55:c9:22:a7:5a:51:66:c1:6c:6a:25:90:4b:1e:7a:eb:47:
a2:a2:55:22:aa:2f:36:c8:15:16:81:9f:f4:84:74:d0:c4:57:
f9:63:9e:5e:91:59:81:99:a6:78:0b:58:51:3a:51:11:9f:3d:
af:2f:81:4c:81:0d:6f:be:e1:2b:c4:72:08:db:37:fa:37:6c:
d2:e3:b2:71:b5:37:a3:61:c1:00:94:73:40:45:d7:93:68:34:
eb:2b:e2:96:58:e5:f0:bc:1b:80:14:12:1c:b2:a6:c5:54:a6:
aa:e2:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:16 2026 by rpki-client