Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File: 2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier: 8VeLScYLkzzEbYqQadWcrkRgySQQqMawBkRoSKGxECU=
Subject key identifier: 27:FF:A9:61:FE:0A:1D:18:BB:FA:68:F4:47:3A:B8:09:3F:C0:97:D8
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer: /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial: 01A0CBC6FFA7F7AE118B432B491FF47192F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number: 136E
Signing time: Wed 23 Sep 2026 01:00:11 +0000
Manifest this update: Wed 23 Sep 2026 01:00:11 +0000
Manifest next update: Thu 24 Sep 2026 01:00:11 +0000
Files and hashes: 1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: E5S4J1PAlA1w5AR0VicOstNgaYz8NIhC1OfAaDytjXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c6:ff:a7:f7:ae:11:8b:43:2b:49:1f:f4:71:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Validity
Not Before: Sep 23 01:00:11 2026 GMT
Not After : Sep 24 01:00:11 2026 GMT
Subject: CN=27ffa961fe0a1d18bbfa68f4473ab8093fc097d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:28:bd:a3:69:6d:12:d0:f5:66:64:8b:b6:
65:e0:ed:f3:1c:5d:d1:7e:9d:90:17:4c:3f:f3:91:
27:16:a8:7c:e5:89:f6:c2:ce:eb:5d:9a:57:89:64:
27:f2:81:b7:fd:2a:0f:60:12:f6:a6:42:bf:ba:ba:
9e:3a:b5:67:f1:cb:e8:ef:a9:9a:e0:4e:12:91:ce:
48:ac:9c:35:ce:7a:76:5f:d1:cc:36:04:df:fc:29:
b2:ae:53:55:e0:63:99:d2:f2:8a:6a:fe:f5:22:6f:
9c:68:f8:d5:a5:89:18:33:79:e9:b0:39:61:b3:af:
17:4c:f9:9c:f6:94:dd:21:47:c1:d3:61:56:dd:8c:
33:6d:83:e7:47:80:6a:71:4c:2f:26:93:e8:ab:24:
c1:c0:68:37:81:cf:81:c1:51:0c:34:39:b4:ea:39:
4f:c9:84:92:6d:3e:b7:13:c6:10:68:53:98:3d:98:
43:2a:10:ad:de:e8:84:57:d6:f4:08:ec:3c:61:e0:
7e:0b:42:12:4d:6a:1d:64:36:d3:a9:a0:d5:cc:c4:
19:d0:71:d5:3d:75:21:ac:a2:f5:af:fe:2b:83:c6:
d9:e3:89:9b:d9:ca:d3:7f:0c:62:3d:46:f9:49:1f:
30:f7:dd:7b:a9:26:e9:13:44:64:92:4c:6a:2f:71:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:A9:61:FE:0A:1D:18:BB:FA:68:F4:47:3A:B8:09:3F:C0:97:D8
X509v3 Authority Key Identifier:
keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c4:f2:1c:88:26:13:5d:7e:b8:6d:b4:ad:6b:af:64:34:dc:
24:38:c9:0d:0f:0c:3c:46:1e:20:fa:f5:a9:0b:32:a5:cf:9e:
6c:9d:38:c1:f7:09:08:67:3c:5d:30:b3:c4:af:f6:e0:e0:fd:
40:6f:91:5d:03:f0:80:c4:cb:31:10:a9:bd:14:d3:f2:09:be:
74:52:ea:ec:bc:08:f9:c8:64:1f:f3:a8:e4:0b:c4:c9:2d:b9:
b1:88:d6:0f:f2:33:9d:4e:6f:5c:1b:09:52:99:82:d7:76:23:
eb:1d:ad:e1:95:10:ec:fa:65:b7:d3:86:0c:9c:ae:ea:a6:24:
53:81:67:2c:39:30:12:70:92:f2:89:6f:52:df:5b:81:b9:ee:
8b:79:e9:18:a6:02:07:0c:c1:10:d5:92:16:78:67:bb:ac:9e:
cf:e2:f0:87:a9:46:8c:e3:8c:59:26:20:af:31:5e:fc:62:db:
7c:30:9d:b3:f0:f9:53:41:62:44:a5:96:ed:d2:ae:6b:bd:b1:
be:b9:d9:e3:62:cc:41:c2:0c:5b:d6:be:51:b8:c8:60:d8:49:
92:32:27:5b:70:9e:fb:36:5a:05:71:e7:ba:c5:2e:3b:60:7f:
8b:00:2d:1c:ea:36:fc:b9:8e:1d:5a:e1:21:fe:6c:47:dd:54:
a2:af:c0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:55:52 2026 by rpki-client