Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File: 2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier: F+VyG2FhdvCdPIj1SHvWNunfj1w2zR+Ptch1hnP24kE=
Subject key identifier: C2:15:9A:27:F9:5C:0F:0C:3A:42:E8:E0:E1:35:92:D2:66:A2:CF:03
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer: /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial: 019F93920A5E08B052A49BFD663A340C875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number: 1073
Signing time: Fri 24 Jul 2026 10:00:49 +0000
Manifest this update: Fri 24 Jul 2026 10:00:49 +0000
Manifest next update: Sat 25 Jul 2026 10:00:49 +0000
Files and hashes: 1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: +JdzypJyon6zJA3uB/LDZ3tp0KyGF0QCZCoquevSVwk=)
2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:0a:5e:08:b0:52:a4:9b:fd:66:3a:34:0c:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Validity
Not Before: Jul 24 10:00:49 2026 GMT
Not After : Jul 25 10:00:49 2026 GMT
Subject: CN=c2159a27f95c0f0c3a42e8e0e13592d266a2cf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:f2:53:9e:cf:dd:2c:bb:15:e8:62:4e:b3:
43:1b:dc:b8:d4:7c:0c:2c:d2:47:d1:49:49:bf:e9:
6b:8e:db:27:b3:a9:e6:14:29:53:15:d8:bf:c9:85:
8a:db:3d:02:bf:8f:7f:8f:38:1f:ed:52:cf:7c:4d:
26:12:a0:47:6b:81:20:c6:98:be:23:17:29:ba:6c:
2d:d3:4d:a3:bf:a6:8d:ac:ab:3b:ca:e4:a8:e5:4c:
c4:81:73:6e:48:0d:aa:87:71:6d:42:04:36:51:1a:
14:45:5b:b8:cc:46:e6:db:0e:1e:33:96:16:80:8d:
7f:55:78:db:ee:dc:36:d0:4b:b1:12:56:bc:14:f2:
61:d9:c1:00:8e:c8:fc:9c:94:b2:52:8c:20:26:78:
44:94:39:27:c8:22:2b:c6:ab:d1:ea:2b:31:53:c7:
95:f0:ab:25:c0:11:ce:f8:a4:8a:60:a3:25:ed:d1:
02:29:95:12:d0:2c:26:2f:b0:a3:eb:12:5c:64:ed:
34:2e:1b:e2:1d:a5:ae:da:55:9e:8d:ef:7a:8a:f8:
2d:fe:c6:25:b1:16:86:f2:4c:0f:f3:cf:d4:5d:d5:
01:22:3e:25:9e:ff:af:37:b8:f4:73:15:77:f3:b6:
7d:1f:42:72:c7:93:d0:f1:92:e4:4a:e1:36:84:0c:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:9A:27:F9:5C:0F:0C:3A:42:E8:E0:E1:35:92:D2:66:A2:CF:03
X509v3 Authority Key Identifier:
keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:35:b8:ed:60:92:b4:3f:ef:0e:2d:33:70:5d:c6:f5:29:91:
4d:fb:5b:00:e2:fe:12:3a:13:84:21:42:61:c7:5a:dc:89:7c:
18:95:ee:39:9e:34:96:67:e9:04:38:e7:c3:8b:f4:24:ee:84:
db:0a:9f:33:58:94:68:81:8d:46:9b:ce:92:4a:76:8d:55:ec:
67:e9:47:50:bb:8c:da:8f:4d:dd:53:36:40:5a:f0:cf:d4:5f:
0b:53:d6:46:5b:11:c5:f3:a1:6c:5c:56:e6:85:73:c8:c0:d6:
38:44:3e:90:39:93:e6:24:29:28:e1:87:12:d7:12:b9:60:ec:
1b:61:c2:35:5d:60:8e:8d:11:1f:22:91:78:ef:b0:fd:60:fe:
89:ba:e5:b1:96:87:30:b9:18:26:9c:6a:3f:65:96:d8:e5:66:
5a:57:72:ba:13:8e:8e:9f:34:1c:37:81:7b:79:7b:e4:36:22:
ae:a1:b8:d7:d6:df:e0:2b:92:30:61:74:75:5c:70:e2:e8:33:
7d:00:80:ce:30:eb:28:cb:cc:95:33:e8:9d:51:3e:88:ad:a4:
a2:fd:f8:fd:63:22:7d:6f:2b:bc:7f:29:75:a4:ab:23:f9:51:
4e:90:9b:79:6a:bd:13:40:36:0e:c2:af:59:37:13:79:ad:ff:
cc:7a:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:45 2026 by rpki-client