Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
File: 2iHQJGSziv86MckIeNYnI7nHQqY.mft (raw, json)
Hash identifier: So8ZEL0Fjut+WI4X3yu4TTxGuLd7u3S677wYIeezMJk=
Subject key identifier: 7D:83:B4:88:DC:ED:32:0C:06:57:2C:6C:F4:20:22:6D:46:35:DA:79
Authority key identifier: DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
Certificate issuer: /CN=da21d02464b38aff3a31c90878d62723b9c742a6
Certificate serial: 019F91DAC23414CCAE94BD80AFC0F5A1A6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
Manifest number: 03C4
Signing time: Fri 24 Jul 2026 02:01:00 +0000
Manifest this update: Fri 24 Jul 2026 02:01:00 +0000
Manifest next update: Sat 25 Jul 2026 02:01:00 +0000
Files and hashes: 1: 2iHQJGSziv86MckIeNYnI7nHQqY.crl (hash: KUVDz2BZco7bNMqN+GSGwuAj5b822qq413/eR9lwR8U=)
2: ULNyY9ornMb2XkpkkXNvWN1gP2I.roa (hash: r5UnkkjvCogYCq6Zu3PdGG9tZrgdqzPy7q2Pvmc7Y4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c2:34:14:cc:ae:94:bd:80:af:c0:f5:a1:a6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da21d02464b38aff3a31c90878d62723b9c742a6
Validity
Not Before: Jul 24 02:01:00 2026 GMT
Not After : Jul 25 02:01:00 2026 GMT
Subject: CN=7d83b488dced320c06572c6cf420226d4635da79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:b7:44:e2:13:0a:21:75:28:1a:dd:f8:b2:
2c:b7:26:49:f3:0b:b1:9c:14:62:42:99:5c:da:4f:
31:1e:62:97:b1:8d:2c:50:5f:b2:3f:3c:ed:15:85:
8c:91:d0:b5:3d:02:c8:eb:c9:3f:e9:c2:b2:af:e0:
6b:60:9b:a9:64:ee:6b:88:73:34:fa:f0:b2:36:28:
47:7c:18:4d:cc:49:83:23:4d:ad:6b:80:2c:d8:59:
4a:64:56:4e:f2:95:b2:23:1a:22:d3:e0:53:1b:8e:
b0:3e:65:4c:d5:8c:0e:10:0a:e8:f2:63:54:36:e8:
5b:48:21:31:7a:e9:1e:fc:61:2f:ef:1a:e3:45:43:
1f:82:b1:eb:39:96:20:61:8f:d4:92:4a:13:cb:b1:
57:56:ac:02:a7:3b:d7:3f:ce:f4:f2:88:3d:4b:ee:
b2:bd:7a:7e:c4:e1:5c:b3:83:68:65:02:d3:92:86:
56:33:18:f4:d9:e5:b8:66:87:e0:f4:74:6b:7b:92:
44:21:a1:5c:3e:c5:8d:04:69:19:c4:57:24:f5:c9:
d9:5b:c2:54:68:34:a2:aa:fb:9a:48:a6:78:19:96:
01:ee:80:64:9a:92:61:49:e2:de:c7:f1:c1:0d:9f:
1f:e9:02:a6:8d:56:c0:fb:e5:2b:69:ad:1e:86:aa:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:83:B4:88:DC:ED:32:0C:06:57:2C:6C:F4:20:22:6D:46:35:DA:79
X509v3 Authority Key Identifier:
keyid:DA:21:D0:24:64:B3:8A:FF:3A:31:C9:08:78:D6:27:23:B9:C7:42:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iHQJGSziv86MckIeNYnI7nHQqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8e61f4-1a41-4cca-b85c-76f52b1dd718/1/2iHQJGSziv86MckIeNYnI7nHQqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f8:17:d1:e2:5d:0c:7b:da:db:7d:8b:75:b2:a1:40:a5:14:
c9:03:6b:a6:3b:f9:57:55:a4:5a:cc:ec:e0:2d:c6:cb:f5:c3:
33:26:c4:26:2c:df:ac:65:c9:76:5f:23:0d:4e:99:61:8e:c2:
3d:b8:e1:ab:1a:3b:be:49:3e:c0:8c:66:5f:be:f8:1e:16:55:
da:50:dc:16:83:ed:d5:25:67:c5:01:c7:3a:57:24:96:8f:a3:
0a:a3:f0:a8:94:30:fa:d4:7e:60:c6:8a:32:7b:1f:23:4e:5e:
95:bf:b7:5a:e0:34:24:d0:37:2a:fb:ba:9b:b8:8d:8b:bd:fd:
9f:2c:10:d7:24:3b:10:ed:08:bb:19:b5:24:27:76:40:15:dd:
18:26:6a:7f:88:32:ff:7d:a1:16:a5:f5:26:11:03:f6:c1:ed:
f3:a5:76:c1:95:77:04:87:91:7a:35:92:6b:e4:ae:b0:2a:8b:
cb:e3:c9:49:fc:a1:e5:ab:02:9c:38:80:82:b9:a1:3d:7c:91:
97:ee:52:29:10:43:ed:0a:ca:d8:0a:5d:49:b8:f5:c7:31:62:
ff:34:4d:ec:32:2e:ac:e0:4a:b6:44:51:9c:b3:75:cf:cf:cd:
94:c7:ba:a9:dd:e5:b4:f4:6a:d7:82:c5:c3:75:ae:ee:bf:69:
17:5f:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:52:37 2026 by rpki-client