Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: hxXbMZ+RQcWxc/NYLUAmH8Tqe73DdBNVwHvAsdwUuMY=
Subject key identifier: B0:FD:0F:DD:E4:D8:DA:51:47:4D:84:CF:F6:CA:ED:7B:AE:28:F2:2E
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 01A0CB59AF4B4C239DC7A38E421DF94062D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 07CE
Signing time: Tue 22 Sep 2026 23:00:47 +0000
Manifest this update: Tue 22 Sep 2026 23:00:47 +0000
Manifest next update: Wed 23 Sep 2026 23:00:47 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: yJ3NLqI9DXGzvRXLXW1fZcD4zqb6pdctBvZ7NUoc1lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:af:4b:4c:23:9d:c7:a3:8e:42:1d:f9:40:62:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Sep 22 23:00:47 2026 GMT
Not After : Sep 23 23:00:47 2026 GMT
Subject: CN=b0fd0fdde4d8da51474d84cff6caed7bae28f22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:16:30:67:ed:4e:b9:06:49:1e:c6:bc:7e:
2b:79:7c:2e:3c:45:39:8c:a3:d6:7a:03:69:7b:75:
17:46:cd:b3:af:ab:a8:d5:f7:2d:20:38:d8:06:0a:
a8:01:d1:e8:b5:94:b1:c4:0c:ea:81:55:2e:17:52:
4d:f3:d6:ff:c6:bc:97:93:49:5c:0a:db:19:59:46:
3b:2b:76:f9:ce:f9:cb:07:d3:fd:25:21:a2:c5:9b:
72:c4:e5:80:82:49:1b:b4:08:1a:c1:e5:95:52:ab:
d0:6f:11:b5:13:31:e0:5c:63:6a:a7:c3:55:47:a4:
dc:cd:17:95:e1:2e:84:38:d3:71:77:c3:f4:f6:20:
7a:5c:14:06:ad:93:cd:9b:18:d9:01:9c:1c:64:0f:
87:59:62:61:e5:3d:c7:da:bb:21:a1:17:ba:f9:22:
55:d5:c2:58:d4:dc:0f:c4:52:54:20:8d:40:c8:e7:
05:c1:b0:4b:5e:57:01:4f:8a:54:0b:72:bc:3e:f5:
13:d7:9b:2a:a8:70:8d:26:6f:ab:5e:84:18:22:4a:
21:9d:88:2b:ed:82:13:cd:4b:a4:53:14:49:5a:d7:
bd:43:70:83:7f:a9:52:24:43:b9:d8:4b:42:23:ab:
c5:98:6e:bd:46:20:08:45:a0:46:c4:ce:ef:28:0f:
10:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FD:0F:DD:E4:D8:DA:51:47:4D:84:CF:F6:CA:ED:7B:AE:28:F2:2E
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:50:c8:c7:1f:e6:4a:09:39:77:16:e0:87:a0:b6:bc:a4:6d:
ed:fa:e7:49:86:14:8e:cf:b1:c3:c8:24:41:c9:ed:10:df:71:
2f:47:4e:e1:df:f8:c4:31:d2:9b:29:be:bd:15:5a:22:30:f7:
c3:5e:11:a5:34:66:13:93:40:7c:4c:6f:6d:35:50:ba:ef:f8:
86:5f:1e:4b:41:29:49:3c:2c:14:7d:f8:65:d1:2b:73:9c:6b:
e3:be:30:4d:9a:5b:3b:e3:36:ff:87:66:36:dc:7f:5a:d0:ae:
cf:ee:e1:df:fa:00:5b:50:43:16:24:54:c5:aa:b4:09:90:c8:
c8:87:8f:e2:82:39:60:02:ff:45:23:41:7d:9b:f5:e6:32:ba:
7b:9c:db:73:0c:c7:7b:92:1b:5b:6f:af:e2:ec:a3:08:91:65:
4d:40:80:4e:75:81:30:ed:e2:c1:70:03:c4:62:98:55:4a:eb:
76:51:12:49:1a:64:e7:e6:a2:3a:e6:3e:c0:b1:bc:a7:f2:8a:
60:ef:0a:20:3b:f7:74:95:25:05:5b:4b:4f:b1:9b:b0:23:20:
cf:3e:40:99:c5:ef:d2:59:6a:2a:2f:e5:ee:02:3f:4b:e6:d1:
a1:9c:4c:43:9e:e7:0e:9c:e2:69:7a:52:74:b0:f8:92:8e:e8:
46:ab:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:25:08 2026 by rpki-client