Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File: 2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier: /c9cFf4UZLb1RVXBQaE/ag57dXcOyS0JNkVlo4Nd0X0=
Subject key identifier: FA:E5:CB:7C:EB:2E:20:68:36:A8:68:ED:61:93:11:4F:83:C4:AA:19
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer: /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial: 019F90FF5CE9A4597F3F1BB1D76208F6D9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 22:01:22 +0000
Manifest this update: Thu 23 Jul 2026 22:01:22 +0000
Manifest next update: Fri 24 Jul 2026 22:01:22 +0000
Files and hashes: 1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: Pi9psYhH7qXYTOvr3OG6S7ZpRiqXyOwVcfcI7ZvqsPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:5c:e9:a4:59:7f:3f:1b:b1:d7:62:08:f6:d9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Validity
Not Before: Jul 23 22:01:22 2026 GMT
Not After : Jul 24 22:01:22 2026 GMT
Subject: CN=fae5cb7ceb2e206836a868ed6193114f83c4aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:63:7e:75:22:bb:ca:e9:c0:f7:33:39:77:
8c:5c:1e:f2:43:86:97:7d:9a:6b:e0:9c:b6:48:b5:
48:40:09:b3:d1:e1:c9:88:87:81:8c:7d:52:fc:22:
70:f6:b3:71:6e:7a:d2:3f:df:0b:f0:b2:91:7b:9d:
13:71:c0:9b:27:5d:64:a9:bd:5a:4f:c9:ed:18:aa:
39:53:cc:b2:50:22:3b:ae:e9:e8:12:64:49:fb:43:
dc:23:83:d5:9d:c5:53:f1:1c:79:35:bc:f1:1b:56:
fc:ec:6f:a2:ab:b0:b7:9a:58:5a:12:f6:b5:78:b8:
bd:c2:64:98:7e:09:12:36:46:86:92:cd:fb:ea:95:
c8:39:7b:45:5a:82:dc:bb:79:59:53:3d:8c:3b:11:
71:04:08:ad:70:5f:94:90:1e:a1:72:3e:3a:fb:7d:
d2:48:47:15:a6:14:5e:eb:0e:9f:c0:e4:66:85:87:
68:a9:f1:70:07:09:a3:c8:9a:24:79:25:75:d4:c2:
5d:29:0a:f8:f0:88:e0:53:fa:d9:07:92:7a:9d:17:
1d:de:44:97:51:d4:1e:41:13:17:30:73:2f:5d:b9:
fa:b1:18:11:17:b7:89:5d:75:68:51:f2:65:e2:3c:
9b:1d:df:1f:a7:89:66:f9:f7:fd:d0:97:71:96:b5:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:CB:7C:EB:2E:20:68:36:A8:68:ED:61:93:11:4F:83:C4:AA:19
X509v3 Authority Key Identifier:
keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bf:77:95:f8:6f:e0:c2:4b:83:db:62:7f:a8:ce:bb:5e:c5:
b9:86:a5:3d:f3:64:ef:08:d7:bb:3e:7c:ea:0a:41:40:39:0c:
18:17:31:83:1d:3f:d2:46:b1:6c:03:62:2a:14:38:60:e5:93:
96:19:5f:52:e6:b7:95:eb:a5:f1:16:1a:ce:96:31:fb:68:11:
79:47:c1:24:7d:a5:fe:be:f1:00:cb:98:5d:61:3b:06:e6:75:
9c:bb:eb:aa:f3:3f:ab:8f:49:67:6c:4c:14:be:57:c2:00:1f:
26:36:5e:03:b6:fa:fd:91:ce:b5:13:66:df:25:ed:0a:cb:75:
4d:c7:7e:c2:77:cd:19:ca:8e:a8:41:c5:a3:fe:41:67:af:3d:
50:9b:09:df:0d:93:54:9c:e3:00:43:7f:50:dc:17:00:80:6b:
c0:5d:eb:68:02:69:b4:46:ca:3f:53:f3:ef:68:61:47:0d:96:
29:78:00:3b:49:1e:a1:df:ae:b7:05:f8:5c:48:d5:1c:9d:34:
d8:14:a2:59:19:fc:cb:47:23:48:c8:19:dc:f8:bd:34:2c:a0:
97:4e:bb:db:ab:9c:1a:a5:8e:93:8b:00:19:54:d0:8b:33:fe:
06:d7:1b:39:a0:84:a9:86:e2:f6:17:2d:30:18:5c:85:f0:fd:
eb:6b:8c:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/1zppFl/Pxux12II9tmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNWVkZTY1ZWZlZGVlZGY4YzhhMDRiMjQ1YTNhNWRmNjNh
NjllODQwHhcNMjYwNzIzMjIwMTIyWhcNMjYwNzI0MjIwMTIyWjAzMTEwLwYDVQQD
EyhmYWU1Y2I3Y2ViMmUyMDY4MzZhODY4ZWQ2MTkzMTE0ZjgzYzRhYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta1jfnUiu8rpwPczOXeMXB7yQ4aX
fZpr4Jy2SLVIQAmz0eHJiIeBjH1S/CJw9rNxbnrSP98L8LKRe50TccCbJ11kqb1a
T8ntGKo5U8yyUCI7runoEmRJ+0PcI4PVncVT8Rx5NbzxG1b87G+iq7C3mlhaEva1
eLi9wmSYfgkSNkaGks376pXIOXtFWoLcu3lZUz2MOxFxBAitcF+UkB6hcj46+33S
SEcVphRe6w6fwORmhYdoqfFwBwmjyJokeSV11MJdKQr48IjgU/rZB5J6nRcd3kSX
UdQeQRMXMHMvXbn6sRgRF7eJXXVoUfJl4jybHd8fp4lm+ff90JdxlrVvxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrly3zrLiBoNqho7WGTEU+DxKoZMB8GA1UdIwQY
MBaAFNpe3mXv7e7fjIoEskWjpd9jpp6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmw3ZVplX3Q3dC1NaWdTeVJhT2wzMk9tbm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hNmE5ZGUtNjAzMy00YzlkLTg2MWIt
YWZmNTBlNGEwZTMzLzEvMmw3ZVplX3Q3dC1NaWdTeVJhT2wzMk9tbm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hNmE5ZGUtNjAzMy00YzlkLTg2MWItYWZmNTBlNGEwZTMz
LzEvMmw3ZVplX3Q3dC1NaWdTeVJhT2wzMk9tbm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL93lfhv
4MJLg9tif6jOu17FuYalPfNk7wjXuz586gpBQDkMGBcxgx0/0kaxbANiKhQ4YOWT
lhlfUua3leul8RYazpYx+2gReUfBJH2l/r7xAMuYXWE7BuZ1nLvrqvM/q49JZ2xM
FL5XwgAfJjZeA7b6/ZHOtRNm3yXtCst1Tcd+wnfNGcqOqEHFo/5BZ689UJsJ3w2T
VJzjAEN/UNwXAIBrwF3raAJptEbKP1Pz72hhRw2WKXgAO0keod+utwX4XEjVHJ00
2BSiWRn8y0cjSMgZ3Pi9NCygl06726ucGqWOk4sAGVTQizP+BtcbOaCEqYbi9hct
MBhchfD962uMqw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:12 2026 by rpki-client