Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
File: 2lTIIO5UFUMsaLATYZJ1_0xubqU.mft (raw, json)
Hash identifier: WWXHKFi5YcyTnolc8dVT44I5bpI1ssd6hRoYcmZmjkA=
Subject key identifier: AB:53:39:03:F9:C2:C8:92:86:08:77:03:40:85:63:BF:A1:48:C4:74
Authority key identifier: DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
Certificate issuer: /CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Certificate serial: 019F90FEE6BF4E71BAAC11C2C7CB238D63C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
Manifest number: 0A4A
Signing time: Thu 23 Jul 2026 22:00:52 +0000
Manifest this update: Thu 23 Jul 2026 22:00:52 +0000
Manifest next update: Fri 24 Jul 2026 22:00:52 +0000
Files and hashes: 1: 2lTIIO5UFUMsaLATYZJ1_0xubqU.crl (hash: SqPsWq+hDYwyr3TU05YdJaZUd1XDqKVM/FvNKeoslgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:e6:bf:4e:71:ba:ac:11:c2:c7:cb:23:8d:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Validity
Not Before: Jul 23 22:00:52 2026 GMT
Not After : Jul 24 22:00:52 2026 GMT
Subject: CN=ab533903f9c2c89286087703408563bfa148c474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:1a:b8:a1:04:57:ee:f3:f1:46:a0:4d:59:
33:0e:5c:5c:c7:39:67:91:41:71:2a:30:a8:db:37:
f6:b8:ab:e8:8f:8f:7e:66:fe:ab:9d:9b:80:bf:9f:
e5:7b:26:d0:1e:8f:d2:a5:6f:24:45:b9:af:0e:38:
a2:47:c6:fa:2f:47:53:a9:97:3c:d3:b6:a3:e7:b6:
20:59:ff:ef:5c:21:ee:53:f3:f2:15:89:f0:43:46:
8c:7e:4c:2a:af:74:81:23:4d:80:26:39:34:e8:ea:
49:d0:fb:96:1d:6a:98:34:2b:e6:2b:14:25:5e:da:
a5:c1:62:13:62:dc:22:6f:e7:e4:0d:6a:92:41:db:
48:38:3a:f5:59:52:a7:5a:f8:71:f4:f1:f9:85:d6:
ed:72:4b:67:fe:9e:0b:95:8e:9f:a8:7a:d1:34:b5:
8d:c4:e0:36:eb:0e:e6:f7:96:b2:69:70:18:d5:bd:
ba:ec:f4:67:1e:d5:ca:e3:fe:e9:ea:e3:b6:31:8b:
b7:84:90:62:33:cf:ae:ea:03:22:14:30:d8:43:d6:
ad:41:1e:a8:8e:48:ed:ed:cb:ea:74:87:6f:83:b1:
82:c7:aa:88:df:40:ac:4d:83:91:d3:3f:09:74:cb:
a7:95:02:8c:af:b8:55:45:59:13:ee:b6:25:63:45:
3a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:53:39:03:F9:C2:C8:92:86:08:77:03:40:85:63:BF:A1:48:C4:74
X509v3 Authority Key Identifier:
keyid:DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:0a:67:70:68:3f:46:8e:e9:85:9d:d6:67:36:fa:96:76:
6e:6a:fd:c1:26:78:0f:93:e5:d2:09:2c:fb:8a:6e:a1:14:03:
5c:33:fc:58:33:8a:87:2c:8d:26:92:ea:fb:a9:0d:02:6b:1b:
6b:6e:5e:55:67:48:86:9e:bd:e7:a9:35:48:99:a9:6e:94:10:
24:6d:8e:2a:ac:fa:0c:3d:9c:8b:ab:54:6b:4a:76:cc:3b:f4:
0f:0e:bc:40:89:37:cd:29:0c:63:1c:13:42:80:c1:e9:f1:f3:
ef:d4:c0:d6:73:28:69:75:ce:8c:15:1a:9e:56:81:b2:30:4c:
1d:f4:1d:8d:c1:bd:ca:5a:03:51:ba:aa:20:c7:b0:c4:cb:83:
5b:60:b3:c3:fc:fb:c7:59:fc:64:e4:17:3d:1c:7c:84:d8:cc:
12:10:df:53:67:f1:ad:09:72:16:e1:cd:ee:06:90:c5:5f:df:
9c:ba:47:29:66:33:00:54:66:2e:8e:8d:bc:c3:39:97:74:e4:
b5:98:67:4a:48:ff:47:76:39:6d:b1:63:2b:9d:b4:a5:fa:9e:
b0:14:d8:f8:e0:7b:72:d4:0b:86:2c:90:3a:ac:5b:4a:eb:78:
36:df:be:7b:1a:0a:64:63:26:a8:31:39:db:89:f6:2e:1e:b3:
2f:9d:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:29 2026 by rpki-client