Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File: 2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier: /dhDHa8TNyG/nlFhuZYD2HSfwXkG73eoKVHglTANEdM=
Subject key identifier: 6A:37:66:81:A3:AB:F2:D8:38:D2:22:C7:98:25:CC:EA:CD:5B:C9:F0
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer: /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial: 019F90FEE847E1F89954A46ED24462CE7AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number: 12CB
Signing time: Thu 23 Jul 2026 22:00:52 +0000
Manifest this update: Thu 23 Jul 2026 22:00:52 +0000
Manifest next update: Fri 24 Jul 2026 22:00:52 +0000
Files and hashes: 1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: JKu+lKOzT5ROReN6OieisJP64na5q73j3Gwoip7qH1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:e8:47:e1:f8:99:54:a4:6e:d2:44:62:ce:7a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Validity
Not Before: Jul 23 22:00:52 2026 GMT
Not After : Jul 24 22:00:52 2026 GMT
Subject: CN=6a376681a3abf2d838d222c79825cceacd5bc9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:f0:50:43:0e:ae:ba:2b:1b:32:55:e7:ad:
4f:a7:0f:3c:ab:4b:62:d5:37:48:05:30:cb:fd:a7:
5e:8b:d0:54:a7:28:f8:71:a2:e8:86:ef:86:f9:76:
26:26:9e:9b:4c:ef:f7:33:90:e4:60:ce:c0:df:9c:
5a:c9:4f:c4:f5:90:df:6b:4f:02:ba:a0:f0:f1:9e:
5b:dd:36:66:2b:df:85:eb:5a:83:89:20:f0:75:cf:
5f:b8:73:c9:48:1c:74:83:7a:d4:1f:43:ae:5c:04:
55:de:c0:27:79:64:11:a2:a0:57:b5:4a:1e:f3:4b:
35:13:be:96:bb:03:76:8e:64:d6:69:86:af:c3:80:
dc:eb:d5:32:a5:b2:45:a8:0f:c3:76:56:d0:bf:c1:
48:6a:13:36:5c:db:c7:f9:c6:f1:27:f3:51:34:4e:
4e:97:a1:bc:78:77:d8:1b:82:3d:80:e7:d1:1d:51:
54:c5:32:bc:c0:6b:99:8f:2c:63:1a:89:fd:0b:2c:
e9:7a:ae:2c:cd:dc:c2:98:72:11:cc:1e:b3:1f:30:
63:21:df:39:86:55:15:7c:b0:cd:5a:d2:23:6a:65:
32:68:3b:07:83:1a:c1:a4:46:72:b4:56:f4:2b:2a:
5d:3d:06:ee:c9:6a:14:ed:f9:38:60:ec:4d:68:9a:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:66:81:A3:AB:F2:D8:38:D2:22:C7:98:25:CC:EA:CD:5B:C9:F0
X509v3 Authority Key Identifier:
keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:59:64:47:bc:fd:a3:06:5a:bc:f9:11:be:be:1f:34:93:5a:
12:55:38:39:76:55:76:4c:85:a0:5f:f2:65:69:79:b8:27:eb:
41:72:0d:5e:2f:f4:56:e6:88:47:26:89:73:b5:91:c0:73:3d:
12:c9:ea:f9:26:a2:b2:c5:91:0d:46:a6:85:aa:d6:9e:51:b0:
60:6b:59:80:9e:ef:0e:ef:5e:1b:98:a7:c8:18:4f:fc:6f:ea:
cc:18:c2:db:cb:3d:2f:0c:cf:d8:32:65:1b:68:0c:a8:3b:e8:
1a:8f:08:fd:ad:c0:ad:e3:6a:a0:04:0a:8a:5b:28:d4:ae:d6:
8c:74:00:2b:2b:38:ad:63:da:c8:55:c8:a8:0d:0e:67:8f:44:
a1:d8:87:fa:ba:e9:2b:35:b0:00:e8:70:19:9a:ec:de:db:24:
f0:73:58:12:76:a7:58:68:8e:1a:d2:be:f9:61:f2:01:4b:df:
07:62:49:85:81:a0:c0:d5:e6:e8:4f:10:b8:83:3b:54:ca:44:
82:64:66:b3:3c:d2:e4:1a:83:e4:36:b3:d1:f9:f5:12:55:48:
36:c5:2a:98:f4:10:19:88:99:7c:37:cf:4a:6e:27:cd:a0:2b:
6f:f5:4d:7f:6f:ec:ea:d7:4d:d5:ba:42:d9:9a:68:cd:e0:72:
32:2f:55:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:05:43 2026 by rpki-client