Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: FePgXhUyIvuzRgMuT53hB41rIFpxwex2ywecl6mF/1A=
Subject key identifier: 82:E2:A7:F1:D2:FE:59:E8:EA:C8:C6:A9:BB:CD:1A:FF:37:F3:5C:F1
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019F91A3FCAAAF374A8C355BE4B02D75CBA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0FB8
Signing time: Fri 24 Jul 2026 01:01:10 +0000
Manifest this update: Fri 24 Jul 2026 01:01:10 +0000
Manifest next update: Sat 25 Jul 2026 01:01:10 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: BprlbzQAZoSMWPXE8cDpI1/dYETCtkqItIVcYFttfE0=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:fc:aa:af:37:4a:8c:35:5b:e4:b0:2d:75:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jul 24 01:01:10 2026 GMT
Not After : Jul 25 01:01:10 2026 GMT
Subject: CN=82e2a7f1d2fe59e8eac8c6a9bbcd1aff37f35cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:68:73:82:b9:63:24:b9:4b:35:a2:97:b5:
92:9c:43:e9:ab:5d:7b:30:77:0e:59:bc:3d:37:6a:
d2:03:e4:9e:5b:9b:8b:6c:92:c3:7a:c2:2c:29:2e:
77:48:83:f5:dd:d0:0b:4f:b9:12:c0:23:8e:84:0d:
92:ee:f7:20:57:4c:1e:c0:3f:07:c8:01:3a:90:35:
3e:79:b4:f6:01:1a:1a:d6:cb:0a:7a:d3:ca:8b:57:
9b:60:83:68:6a:f7:7f:1e:d9:2e:2d:55:13:f2:50:
56:24:31:82:c0:56:af:41:7b:e9:a3:ba:a5:97:91:
43:99:20:af:81:d5:95:16:27:a8:35:99:8c:48:3f:
9e:c2:65:d5:9c:9d:46:86:9b:76:6f:d7:cb:74:e2:
26:18:39:48:c6:20:ab:6a:45:10:6d:56:43:59:f7:
4f:70:1d:02:74:c5:5c:48:37:5d:75:89:6b:f6:1c:
73:56:af:84:e7:bd:e3:91:4a:6d:88:97:5a:11:7b:
eb:9f:61:37:4c:82:32:8d:fe:3f:b5:04:9b:c3:83:
9f:71:33:a4:2c:be:9f:8a:5c:bd:81:2f:23:44:7d:
56:2e:78:bc:ff:8c:ac:91:7f:76:52:85:42:3d:d3:
6a:26:e2:6a:9b:4e:06:a4:ec:cd:1e:d2:28:d9:10:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:A7:F1:D2:FE:59:E8:EA:C8:C6:A9:BB:CD:1A:FF:37:F3:5C:F1
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e0:7d:5b:d6:88:23:47:01:53:54:30:55:31:ef:71:b0:5e:
51:16:65:23:58:f8:d2:90:22:55:32:6b:ae:0b:71:69:1a:b5:
65:17:24:82:a1:71:de:ad:2c:94:f8:66:46:b5:57:d5:97:e3:
81:d9:1c:d5:1c:e4:46:91:5f:00:92:68:cd:68:a4:37:4a:24:
56:bd:f2:3d:4d:7b:91:a1:38:62:a1:a6:a4:44:f5:da:9f:c5:
eb:3a:63:75:b6:d5:98:26:0c:3a:53:c1:1b:5b:4b:5d:01:44:
ed:c9:81:5d:19:d9:57:bc:74:df:e5:87:a6:1d:62:27:47:3a:
53:01:4b:3e:57:4f:e9:23:52:47:d0:32:8b:12:fe:9e:87:11:
cd:fe:fd:90:d6:bc:62:00:16:ba:b8:95:4e:54:b4:58:80:a6:
ab:8b:e7:8d:b4:46:a6:f1:9b:65:2f:46:a8:71:1f:c1:87:a4:
5c:0f:08:86:66:64:d9:53:a6:d4:89:64:81:e3:6c:a1:4d:0a:
e9:91:64:b0:9b:72:f3:19:95:81:06:3d:86:ab:bc:0c:68:bc:
cb:d9:1c:6b:91:5f:b3:ae:15:75:f3:28:60:c0:e4:b6:c9:e1:
40:95:c4:49:29:05:eb:b4:52:25:9e:dd:d7:4c:83:8d:34:51:
60:2c:6c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:30:03 2026 by rpki-client