Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: pIUOmzt54yPR315Su2W1yQ4HnsyTuTUuHU0+MwzZYWM=
Subject key identifier: 1B:91:1B:35:67:9B:42:F6:AE:49:70:7B:B0:25:BB:66:7C:B2:93:88
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 019F8F7EDE6FC69052FBD5E78769261494CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 1955
Signing time: Thu 23 Jul 2026 15:01:23 +0000
Manifest this update: Thu 23 Jul 2026 15:01:23 +0000
Manifest next update: Fri 24 Jul 2026 15:01:23 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: agdvsuSyn6b56AFnO8p89rxOqEmW/uLSimrQ9L5Ed48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:de:6f:c6:90:52:fb:d5:e7:87:69:26:14:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Jul 23 15:01:23 2026 GMT
Not After : Jul 24 15:01:23 2026 GMT
Subject: CN=1b911b35679b42f6ae49707bb025bb667cb29388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:13:50:f8:f4:c4:e6:ed:51:db:31:37:f8:
6f:5c:fe:4b:73:8e:81:85:31:43:10:c7:e4:5a:0a:
15:28:d0:fd:bf:13:7f:7c:b3:90:d4:55:59:2f:ff:
a6:d4:bb:d3:c4:05:7b:e4:54:14:b7:37:10:b2:f4:
ec:66:ba:ec:b8:23:5e:ac:91:f6:1c:8c:e4:d9:c0:
3d:85:45:12:88:a4:08:57:e6:4c:ae:44:d6:39:e7:
21:4d:0b:f3:60:ad:08:bb:51:0c:0a:7e:d1:20:93:
89:c3:89:b7:ed:09:6d:b0:d2:b0:39:d0:66:bf:f6:
1e:f7:00:fa:f7:62:41:96:96:4f:2c:09:a2:f9:15:
f3:53:65:1a:e5:5e:cd:eb:24:48:0f:6c:80:33:01:
0c:74:fa:da:8a:eb:ed:c9:82:62:e4:a5:2c:5f:f9:
b5:79:8d:03:12:cd:d0:df:6d:96:e9:cf:0c:7b:3c:
68:7d:9f:38:97:ea:e1:4f:fe:f3:87:b3:8f:a9:22:
a1:90:11:68:23:f9:58:4d:73:b7:2f:29:a9:d8:08:
cf:d5:75:62:c7:26:73:15:6d:ff:58:89:10:0f:80:
ac:75:ae:2f:c1:c0:a1:26:d6:52:73:48:1d:fa:f3:
14:d1:ef:65:57:72:1e:1c:90:20:53:f1:0b:90:d8:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:91:1B:35:67:9B:42:F6:AE:49:70:7B:B0:25:BB:66:7C:B2:93:88
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d5:d0:c7:17:85:34:81:83:57:4a:06:2c:57:b8:14:85:e2:
34:38:83:e4:b1:95:c2:e5:55:86:60:52:c4:e3:0a:0d:1e:7a:
01:8d:20:8c:cf:8f:1d:63:82:23:a6:77:b8:27:d3:fa:e8:d5:
76:11:ec:7f:45:da:67:4e:02:a2:26:3e:6c:11:43:29:56:ed:
c1:26:f6:d9:4d:2a:c8:67:5d:1c:b6:1e:85:48:81:dc:c8:22:
93:0e:91:98:4e:27:29:95:13:ec:78:e8:48:9b:e7:d4:bf:a8:
32:e0:2d:3c:01:91:6f:e0:f0:d2:0d:f4:c3:7a:16:fa:ee:78:
e0:f2:9e:6f:d6:4e:8a:cd:81:84:fc:a9:1c:49:79:18:ae:dc:
59:e1:63:92:d8:a0:3c:1b:9e:e4:66:5d:f5:fc:ce:c0:10:53:
d4:e1:bb:97:1b:bc:7b:af:13:38:b4:ca:4b:00:87:7e:92:db:
76:8c:5c:46:ac:53:45:b7:4f:04:ce:07:d5:bc:97:b4:1e:c4:
b6:4d:77:fd:87:0d:cf:f5:b5:38:10:f4:70:1b:89:ee:cf:a5:
33:7c:1d:6a:3f:de:0f:e2:1d:c3:09:6d:8b:2f:96:ac:4f:d0:
73:ac:5a:69:f0:68:77:95:0f:65:78:d3:c1:7c:fb:a1:37:0f:
3a:87:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:05 2026 by rpki-client