Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: FNQs98Kj5T8CFZrIrvba0TcYYXIlgh/KnrpeWSqE5Kw=
Subject key identifier: 52:C6:D8:45:D5:6A:61:ED:6F:9B:05:5F:3C:6D:AC:41:E8:04:71:6A
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 019F91DA48F3DB6789253E2DD69D179F98BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 1190
Signing time: Fri 24 Jul 2026 02:00:29 +0000
Manifest this update: Fri 24 Jul 2026 02:00:29 +0000
Manifest next update: Sat 25 Jul 2026 02:00:29 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: XIvNT3T2FTHzebeCE6zbDXbBa5ovbgb539TT1/z02Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:48:f3:db:67:89:25:3e:2d:d6:9d:17:9f:98:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Jul 24 02:00:29 2026 GMT
Not After : Jul 25 02:00:29 2026 GMT
Subject: CN=52c6d845d56a61ed6f9b055f3c6dac41e804716a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:e4:f2:0e:8a:11:a5:10:49:e3:b1:8e:3d:
5f:bc:9b:d3:bf:65:52:1d:32:28:db:c6:38:bd:07:
05:6a:72:2d:e5:8c:9e:d3:a5:56:3f:87:38:2c:68:
4b:18:78:f4:7b:8c:90:a4:7a:40:81:18:fa:11:f3:
69:3b:3c:ff:fc:1e:e9:05:37:b0:46:7b:7e:2f:03:
3c:76:2d:e5:77:d9:c6:39:8f:3c:35:b3:bd:8a:a3:
c4:8a:14:52:3d:02:b1:ff:5c:67:00:d8:9f:a4:0c:
e0:9d:6c:e8:4a:6c:88:cc:dc:df:2f:c3:66:21:5b:
1b:c6:bd:6b:ef:35:36:73:75:2d:b1:e9:95:57:50:
e5:d9:e6:f4:ae:d6:c8:b4:7f:6b:ca:c0:ee:1c:5f:
78:f9:69:c1:aa:09:fe:08:1a:b6:7c:c7:26:3f:e3:
9f:73:9e:10:e9:b8:ac:32:32:8d:d4:11:af:82:a1:
7d:05:20:e1:4f:9c:af:86:9c:b9:8b:3b:60:31:57:
84:22:2a:92:4c:f3:41:4a:ef:3b:1c:ed:be:bb:42:
bf:71:77:e5:c3:66:ec:db:2c:e0:16:a6:e4:52:66:
f4:85:a5:32:97:27:ab:09:c3:11:25:99:7c:cc:0f:
d3:a8:61:6c:a1:c7:4f:c3:7b:08:c7:28:d5:d2:4b:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C6:D8:45:D5:6A:61:ED:6F:9B:05:5F:3C:6D:AC:41:E8:04:71:6A
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f2:89:5b:fa:c5:1c:d2:50:96:56:f1:65:01:ff:c3:9a:29:
60:11:78:e8:a1:43:0c:39:2b:65:5f:d1:c1:a9:ef:4f:bb:5a:
5b:50:32:8b:88:fe:9d:03:4a:f3:cd:79:9a:f9:d7:05:66:2d:
03:29:8c:fd:53:98:76:0c:fa:2d:b2:68:f8:b9:99:c6:d9:51:
c3:51:34:ec:d6:c2:44:7f:d0:20:85:59:6e:df:b8:0a:22:60:
bf:c4:df:23:ee:1e:fb:77:35:ed:f2:4f:81:dd:81:5a:90:32:
0a:56:50:cb:dc:49:23:4e:3e:97:f7:a4:23:9e:66:5f:86:f8:
11:5b:f0:bc:23:aa:95:28:b2:71:2e:94:16:ad:c2:b5:69:bd:
3d:71:44:7f:ac:7a:df:fc:69:6c:55:31:1f:11:89:97:2b:dc:
89:f4:50:49:e5:19:ed:a7:b2:74:2d:5f:c5:3b:5d:c3:99:9c:
70:69:93:1e:a1:2f:a4:6c:48:21:09:94:eb:b1:25:c9:e3:ba:
46:2b:aa:29:ff:a3:26:22:91:01:70:fb:9c:1a:21:d5:31:cf:
58:90:35:63:8f:6f:45:11:b4:cb:b7:73:fe:fb:d9:12:e1:04:
86:61:ce:a6:0d:29:d3:13:ef:b7:08:15:a8:bf:5c:7c:e6:ae:
76:8c:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:34 2026 by rpki-client