Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
File: 2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft (raw, json)
Hash identifier: YfydMAuAAB1gtXmsrQlGB2gDN7s1GKEwOT45eitDAp8=
Subject key identifier: 8A:82:40:0D:09:0B:51:13:3B:8F:6E:FC:60:F7:62:EC:04:9C:F9:1D
Authority key identifier: D8:A2:CB:BF:F5:AA:65:36:83:AB:61:5A:63:27:18:1C:30:92:C5:9D
Certificate issuer: /CN=d8a2cbbff5aa653683ab615a6327181c3092c59d
Certificate serial: 019F9059E9279BAEE6A213173725B9849368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KLLv_WqZTaDq2FaYycYHDCSxZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 19:00:39 +0000
Manifest this update: Thu 23 Jul 2026 19:00:39 +0000
Manifest next update: Fri 24 Jul 2026 19:00:39 +0000
Files and hashes: 1: 2KLLv_WqZTaDq2FaYycYHDCSxZ0.crl (hash: dEkKKnNhmle8xrWE2/jvUWdORmbil5POzXZyAk2/RQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KLLv_WqZTaDq2FaYycYHDCSxZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:e9:27:9b:ae:e6:a2:13:17:37:25:b9:84:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a2cbbff5aa653683ab615a6327181c3092c59d
Validity
Not Before: Jul 23 19:00:39 2026 GMT
Not After : Jul 24 19:00:39 2026 GMT
Subject: CN=8a82400d090b51133b8f6efc60f762ec049cf91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:9d:a4:68:99:98:b9:d5:a2:75:94:10:90:
02:70:b5:ce:4b:64:fd:43:77:10:fb:7d:03:55:94:
8e:47:4b:d3:d0:63:df:de:59:fa:bf:eb:09:30:fd:
80:4d:b7:f6:7a:8f:44:8c:eb:eb:17:44:98:88:30:
11:3b:6f:de:28:d7:de:cb:55:e8:aa:8f:d8:ff:da:
e4:90:01:ea:d8:a7:8a:8f:52:77:72:9a:33:c4:52:
e0:03:f7:f9:10:42:dc:cc:d3:4c:92:78:5c:ed:24:
9b:26:be:05:a0:7b:79:ae:22:f0:5d:79:e9:3c:4e:
cf:8f:f1:8c:9a:7d:2b:17:8b:95:5f:0f:72:65:2b:
68:23:d9:4f:e6:fb:b2:68:5e:f6:13:73:31:b4:6f:
a5:99:75:22:66:12:a1:0f:0f:24:c6:c5:f3:c6:20:
42:13:b6:33:ff:26:e3:2a:65:15:2a:b6:af:4e:03:
80:74:07:6c:e5:7f:b9:5d:d2:37:35:d6:69:39:67:
38:fa:be:fb:8d:19:d6:b2:1c:3a:a6:e9:c0:3b:c3:
d2:69:7e:03:3b:60:34:76:64:ef:08:fb:48:db:2e:
8e:7d:12:3e:dd:eb:ba:6b:3d:71:c9:6e:c4:90:ee:
b3:0d:be:91:4f:d4:0d:d8:7a:58:e3:e1:8f:c7:b8:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:40:0D:09:0B:51:13:3B:8F:6E:FC:60:F7:62:EC:04:9C:F9:1D
X509v3 Authority Key Identifier:
keyid:D8:A2:CB:BF:F5:AA:65:36:83:AB:61:5A:63:27:18:1C:30:92:C5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KLLv_WqZTaDq2FaYycYHDCSxZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:5a:90:93:87:c5:b2:45:43:ed:27:96:92:81:e6:06:99:
1e:cc:e5:6d:16:f4:a4:7f:c6:be:6e:b6:ba:3a:bb:c7:6f:50:
a4:78:a5:15:4c:bf:0b:1e:88:d6:c9:9c:61:5c:f2:92:36:54:
f0:d4:a1:c7:f9:39:bd:25:99:0e:56:9b:ae:00:5b:92:cb:e8:
b2:da:b0:5d:9c:d3:63:48:f6:ef:a4:81:f5:e5:e1:09:f9:41:
49:ee:be:69:4f:ad:ae:36:a4:ac:68:34:de:fb:cd:82:bb:86:
6b:96:67:5d:df:e5:e1:83:fd:6a:ca:0d:3f:43:66:21:68:a9:
6b:85:69:3c:29:ca:f0:1a:e9:bc:e7:4a:a4:20:29:d0:c6:03:
36:fc:cd:22:44:9e:88:42:f0:b5:4d:69:e9:96:2b:d5:6e:a8:
f9:4d:6a:b9:ad:7f:52:29:03:a8:e3:70:1c:a8:a3:4a:bc:08:
78:c9:5a:9a:6e:d8:3a:0d:f3:80:f4:02:fe:b0:dc:42:74:1d:
d5:bd:ba:85:4b:c7:5f:92:a8:ad:1f:ed:fa:55:ef:ca:9d:71:
2f:21:88:f2:a3:d0:10:27:40:b1:e5:50:49:d8:37:35:47:09:
66:76:53:68:67:c2:d9:72:9f:8c:dc:ff:c3:fa:41:e1:44:c1:
3d:32:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:45 2026 by rpki-client