Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
File: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft (raw, json)
Hash identifier: onMbIpn838+IvmB1qQnAInKrfVStElX2KuqRaIenYAg=
Subject key identifier: 74:8C:9D:61:51:49:84:CD:0B:9E:9B:51:3F:A3:58:8B:E8:50:75:30
Authority key identifier: D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
Certificate issuer: /CN=d9a23485fed8c850745232e3dc51ccead47254a4
Certificate serial: 019F90FF9EFAD0937BF3EC78ED77CA684CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
Manifest number: 0DD4
Signing time: Thu 23 Jul 2026 22:01:39 +0000
Manifest this update: Thu 23 Jul 2026 22:01:39 +0000
Manifest next update: Fri 24 Jul 2026 22:01:39 +0000
Files and hashes: 1: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl (hash: ASDSY6Ggx8+28/tn8AMMXW3TYt9g3KVWQqGHCZQl+/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:9e:fa:d0:93:7b:f3:ec:78:ed:77:ca:68:4c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a23485fed8c850745232e3dc51ccead47254a4
Validity
Not Before: Jul 23 22:01:39 2026 GMT
Not After : Jul 24 22:01:39 2026 GMT
Subject: CN=748c9d61514984cd0b9e9b513fa3588be8507530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:08:14:bd:6c:08:63:fd:a0:45:52:6f:19:
2c:c6:72:5c:6e:cc:0e:54:d3:3f:e1:8e:a4:dc:3f:
a4:22:28:30:bb:c8:08:fa:5c:5c:c7:d0:98:f3:07:
49:58:42:35:21:2d:6b:f0:f5:56:01:06:ab:65:4f:
a9:80:d1:6c:d3:1a:05:2c:35:bb:1d:d2:42:46:5f:
bc:f6:90:7e:7b:32:ed:2c:c5:01:28:c6:81:d1:d4:
e9:c8:4a:c1:ce:54:68:b5:ab:96:a9:5d:fe:8a:54:
e7:18:dd:88:50:7b:94:ea:99:69:50:ee:50:6c:29:
1d:43:ba:94:87:5b:9b:3c:80:85:f4:32:51:ff:93:
50:19:61:14:c3:2b:4b:b2:b5:59:b0:36:5c:e4:06:
1c:87:0a:04:cf:2d:16:9c:08:8b:98:6c:57:ef:c7:
88:4c:e1:a7:fd:64:a8:92:ef:ea:a4:51:7d:1a:87:
af:e2:b3:aa:bb:43:ca:6e:49:83:f8:ce:b0:8b:f7:
76:de:59:6e:67:bb:5f:28:dd:ba:8e:e2:14:73:e0:
72:77:20:70:b4:60:6a:ad:e4:7c:00:70:84:c4:5f:
83:2a:b3:00:67:3e:15:4e:fa:75:09:1b:1f:40:33:
13:1c:96:b8:f2:4f:53:68:5d:46:87:10:ee:73:bf:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8C:9D:61:51:49:84:CD:0B:9E:9B:51:3F:A3:58:8B:E8:50:75:30
X509v3 Authority Key Identifier:
keyid:D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0a:da:04:51:9e:b3:bb:32:93:07:96:7b:ba:4b:b7:e5:26:
c3:a8:c0:73:f5:22:41:a3:f8:69:9c:fb:54:0a:ed:29:e4:57:
8b:bb:96:ba:fc:70:1e:d7:ad:c4:2e:f7:0f:93:40:34:0f:21:
c0:67:45:d5:58:41:85:16:9f:93:fd:e6:ce:f3:b9:94:f5:5a:
c7:46:7f:a8:9e:92:87:c9:92:95:0e:86:82:59:1a:e2:c2:e7:
96:f6:50:08:72:05:ad:66:cc:c1:e5:2b:36:95:1d:ad:2d:7c:
fb:bb:80:70:5d:90:08:78:da:f5:a9:9e:12:e2:1d:5e:79:4a:
f5:4e:ee:71:5e:39:eb:d7:2f:3b:5d:a3:c4:5d:29:19:03:75:
5a:7e:d6:0c:d6:35:dd:a0:7b:ec:fa:e5:b8:aa:32:c2:0a:16:
45:ee:1c:be:9a:bd:55:d2:d6:f0:65:ea:0d:23:7a:0e:69:70:
4b:ea:23:0d:9c:dd:a3:35:dc:4e:7c:bb:9d:ff:a1:9b:a2:c7:
3d:25:dc:7f:44:fa:6c:38:ec:f3:25:3c:ff:9f:d0:51:b3:de:
f0:a5:a9:ab:cb:48:8c:16:55:4d:dc:54:25:1a:07:2d:97:c2:
22:33:a4:d2:1d:ed:90:11:ce:14:2f:01:72:70:41:96:4f:f4:
ee:60:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:11 2026 by rpki-client