Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
File: 2tT3n-03VtwzhVWiaD87My8rPaQ.mft (raw, json)
Hash identifier: jjWTyN4kBlwTLJyEV5KrRMonM3i62VY1elaldI0xrQk=
Subject key identifier: CA:50:8C:E4:5B:E2:79:A1:BC:06:93:F4:DE:5C:8B:7E:56:7B:C9:11
Authority key identifier: DA:D4:F7:9F:ED:37:56:DC:33:85:55:A2:68:3F:3B:33:2F:2B:3D:A4
Certificate issuer: /CN=dad4f79fed3756dc338555a2683f3b332f2b3da4
Certificate serial: 01A0E0984CF957A1EE4BEFA195564F6BAF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2tT3n-03VtwzhVWiaD87My8rPaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
Manifest number: ED
Signing time: Sun 27 Sep 2026 02:01:12 +0000
Manifest this update: Sun 27 Sep 2026 02:01:12 +0000
Manifest next update: Mon 28 Sep 2026 02:01:12 +0000
Files and hashes: 1: 2tT3n-03VtwzhVWiaD87My8rPaQ.crl (hash: 8UBiykBZTFBQUpGv54/FJQu/UOFLhrsSaeJSWpviVvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2tT3n-03VtwzhVWiaD87My8rPaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:4c:f9:57:a1:ee:4b:ef:a1:95:56:4f:6b:af:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dad4f79fed3756dc338555a2683f3b332f2b3da4
Validity
Not Before: Sep 27 02:01:12 2026 GMT
Not After : Sep 28 02:01:12 2026 GMT
Subject: CN=ca508ce45be279a1bc0693f4de5c8b7e567bc911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:80:89:d4:1e:5c:38:97:9a:50:70:6d:71:
7e:ed:30:bb:8d:39:ad:32:8d:b4:c8:06:21:cb:6b:
01:2b:ed:61:ef:b6:2b:e2:35:39:3c:de:4c:6c:b9:
02:6f:3e:20:fc:64:78:3e:6e:b3:a0:2a:28:d5:f2:
2f:93:16:12:ac:9b:58:b3:7e:1b:7a:bf:1b:12:20:
54:67:08:6a:5f:97:29:f3:d0:01:7e:7e:cd:98:a8:
b7:e0:52:04:4f:a2:f5:45:52:09:d8:46:f0:9e:ab:
f1:85:2c:9c:45:b7:d9:1a:cd:ca:dc:e7:3f:b6:ad:
5d:93:81:98:c2:23:84:3b:0c:26:df:5a:f1:ff:6b:
c6:5b:59:99:9c:f4:95:b6:84:4c:59:2a:f7:d0:a8:
03:65:8a:42:b3:24:c4:4a:13:02:01:69:f3:ab:20:
f0:db:a1:7e:0b:7f:2e:2c:27:45:72:22:d3:b1:44:
d7:4b:c7:ad:83:83:1c:48:ea:c4:7e:02:75:ce:fb:
38:5d:ce:d5:e7:75:18:24:a5:ec:71:a6:8a:3f:b2:
e7:dd:7f:0f:bd:e7:03:17:e6:1d:50:6c:af:09:6f:
20:52:30:e7:9f:7f:c4:19:0d:f7:f0:7f:ea:25:02:
ad:17:ab:94:74:7f:cb:13:7e:c0:df:78:43:33:89:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:50:8C:E4:5B:E2:79:A1:BC:06:93:F4:DE:5C:8B:7E:56:7B:C9:11
X509v3 Authority Key Identifier:
keyid:DA:D4:F7:9F:ED:37:56:DC:33:85:55:A2:68:3F:3B:33:2F:2B:3D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2tT3n-03VtwzhVWiaD87My8rPaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/6b168f-2d51-4882-a866-29b4f92ac8fd/1/2tT3n-03VtwzhVWiaD87My8rPaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:e4:ca:17:3a:0e:1b:8d:a6:15:50:93:f4:76:cd:02:50:
8d:fc:fb:8f:62:91:0b:5a:ad:52:76:8b:7e:3c:28:85:11:1d:
6c:f7:e3:be:5c:a3:cb:3b:e2:ef:67:5f:db:5e:3d:e3:27:01:
87:9c:c0:db:13:12:9c:d5:80:79:6f:9f:c4:d6:c9:a5:0a:30:
56:fa:13:38:51:05:ba:84:c2:dd:b0:91:cb:64:8b:1b:58:51:
fa:10:ea:cb:58:09:13:3b:81:b4:ae:2f:b7:ad:ba:0a:92:5d:
9e:79:7b:ec:0c:36:44:15:de:f0:42:4c:72:56:5c:68:bd:13:
1a:de:10:f2:d3:1f:23:5f:bc:a4:cc:85:24:42:e6:c5:e0:19:
48:f4:75:c0:a2:c7:d0:f5:a0:10:bb:68:ce:70:1e:fe:4e:53:
8a:86:f9:36:6f:a3:91:3a:e3:75:7f:9e:77:18:ed:44:b4:13:
09:2f:96:d2:da:d4:38:f5:86:1c:d0:e7:2e:4b:66:45:7f:f8:
42:8b:3b:24:c5:92:8e:d7:a8:de:20:d7:77:07:a9:ff:78:dc:
2c:0d:b5:0c:f1:99:b4:4e:86:30:a1:08:e5:7b:17:d9:67:85:
45:8f:45:51:a6:41:02:65:30:18:eb:36:83:28:52:13:61:89:
93:34:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:34:09 2026 by rpki-client