Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File: 2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier: vDQFeSlwZW1gd9Scyqf3PFq0130ImXocsUSVHm6yT9E=
Subject key identifier: A8:4F:C2:73:8C:29:86:E7:34:80:4A:AB:75:96:84:D6:01:03:7B:A4
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer: /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial: 019F90FE62E43128CC9408FA30EB3AE80E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number: 117A
Signing time: Thu 23 Jul 2026 22:00:17 +0000
Manifest this update: Thu 23 Jul 2026 22:00:17 +0000
Manifest next update: Fri 24 Jul 2026 22:00:17 +0000
Files and hashes: 1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: UJ0d+3OSV9jhP2uYxYOro4p3sVfPjmM8IJGrTygNk+A=)
2: 5iwb34X7et8A-ZwDnoqtR_xqPsw.roa (hash: WeDprzbgEpDRHXWUflU5QUsB4X7FqUJMR6LQN8vcE2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:62:e4:31:28:cc:94:08:fa:30:eb:3a:e8:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
Validity
Not Before: Jul 23 22:00:17 2026 GMT
Not After : Jul 24 22:00:17 2026 GMT
Subject: CN=a84fc2738c2986e734804aab759684d601037ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:85:3b:db:ae:c2:ac:8f:ea:46:b3:2f:cf:
7c:88:ba:d2:5a:6d:36:3f:2b:a5:72:a3:20:77:af:
0e:96:f7:83:1e:03:d7:f2:f0:13:31:99:05:1a:96:
3c:30:d3:80:dc:7e:6a:70:99:8c:0e:9c:7c:0d:2e:
c2:44:1b:2f:15:0c:8a:86:41:88:b7:f5:f3:ce:40:
6a:b7:8f:87:1d:e5:28:08:c2:32:98:2f:d2:35:33:
38:35:ae:09:8c:76:20:02:b2:24:a6:36:e9:e6:8a:
56:44:d4:90:a4:95:fc:34:76:94:95:6d:57:e8:d1:
bc:49:34:13:f3:49:b1:18:16:0b:20:d5:bd:ea:d7:
b3:79:42:4d:1a:32:ba:5d:88:ae:5c:70:79:d2:24:
45:4f:32:d9:8e:0f:17:39:a6:32:c8:ec:8e:47:59:
f7:e0:70:0d:32:d7:9d:26:00:99:84:46:ef:df:33:
04:6b:fd:6e:9d:a4:69:af:6a:9f:8d:48:6b:57:8c:
e6:dc:65:bc:c2:c3:23:d0:2d:75:21:b1:84:81:c7:
dd:7f:cf:ae:aa:52:41:f5:35:1e:01:ba:4e:52:16:
fd:7e:13:82:62:ac:b8:93:95:2f:c0:48:ab:5f:58:
8b:1c:3a:24:bd:46:15:ed:44:4f:37:b1:46:f9:f7:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:C2:73:8C:29:86:E7:34:80:4A:AB:75:96:84:D6:01:03:7B:A4
X509v3 Authority Key Identifier:
keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ad:16:69:df:dc:7f:0c:85:5d:44:d1:e5:9e:c1:c7:64:0b:
59:ef:2a:d8:37:53:74:3b:6e:89:b3:be:6b:c4:10:6d:ac:50:
c4:23:ef:95:ec:8f:65:24:ce:66:86:8b:9c:2d:8b:06:13:57:
5d:40:39:46:7b:d6:a5:a1:d6:32:83:13:2e:43:05:1f:c7:fe:
8b:59:37:17:75:99:7f:26:38:74:27:67:f8:9d:9e:27:26:66:
a6:a0:0f:88:c0:6a:54:05:4f:4f:d7:1d:90:ad:b2:71:b9:da:
42:03:15:be:ac:c0:71:b9:57:00:87:d4:9d:4a:df:49:00:1e:
25:fc:37:dd:d2:58:ec:07:81:67:c4:6d:18:f7:df:f4:d2:ca:
e3:81:75:b2:5a:0d:95:8d:d9:56:20:f6:42:d5:cf:54:4a:d5:
d3:03:95:31:7c:1d:1f:c4:f6:a6:5d:dd:d8:fe:f2:61:8a:b2:
b7:d5:01:64:b5:d9:e9:c6:86:09:1b:59:7c:ab:66:83:bf:94:
ed:4c:7a:f1:47:72:90:5c:f8:ac:af:ad:68:6f:f4:87:ba:c4:
45:d6:3d:23:6f:43:09:c0:00:0a:d8:f6:d9:b9:e0:f1:8f:84:
c2:14:30:4f:27:f8:75:86:28:af:af:0d:ca:96:9f:76:6b:2c:
23:ca:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:09 2026 by rpki-client