Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
File: 2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft (raw, json)
Hash identifier: fFaWQnW/JAIQA+8bXjfVTluoZKoBeQB0IqSkfI00TBg=
Subject key identifier: 71:0D:C6:DC:A4:51:65:16:10:EC:91:2C:4C:BF:36:DD:95:DD:AA:32
Authority key identifier: DB:23:CB:8D:0F:C9:F2:C7:29:E6:A5:6F:1B:E7:97:0D:19:D5:BE:E2
Certificate issuer: /CN=db23cb8d0fc9f2c729e6a56f1be7970d19d5bee2
Certificate serial: 01A0CE236507107C6AE3B369DC95DBD239BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yPLjQ_J8scp5qVvG-eXDRnVvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
Manifest number: 94
Signing time: Wed 23 Sep 2026 12:00:21 +0000
Manifest this update: Wed 23 Sep 2026 12:00:21 +0000
Manifest next update: Thu 24 Sep 2026 12:00:21 +0000
Files and hashes: 1: 2yPLjQ_J8scp5qVvG-eXDRnVvuI.crl (hash: 9m/pBybDSF1GM3bb9Atx6qH9oYmMWa+w8BdgZ2p5bHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yPLjQ_J8scp5qVvG-eXDRnVvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:65:07:10:7c:6a:e3:b3:69:dc:95:db:d2:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db23cb8d0fc9f2c729e6a56f1be7970d19d5bee2
Validity
Not Before: Sep 23 12:00:21 2026 GMT
Not After : Sep 24 12:00:21 2026 GMT
Subject: CN=710dc6dca451651610ec912c4cbf36dd95ddaa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:ce:97:3e:31:80:a3:9a:13:ce:b3:0c:66:
0e:ac:9e:1a:9e:65:6d:2f:db:f7:52:32:6d:14:6e:
58:b3:b9:b7:9f:17:a5:18:90:85:8f:0e:bf:7d:06:
04:6a:bf:9a:ff:77:f0:7a:07:55:1a:69:56:3e:3d:
27:1f:b9:2b:fe:fe:42:18:55:1d:38:d4:7f:35:d4:
60:82:39:40:6e:f4:72:aa:0b:e5:c8:6a:28:17:a9:
c9:10:be:b8:4b:3b:f3:84:92:3d:d8:3a:b2:0e:58:
c0:46:e1:88:25:fa:c6:05:c2:4f:4e:f0:d4:30:c6:
df:45:41:f0:29:68:6b:ab:81:75:3e:8c:e7:8d:0d:
20:61:40:44:36:8f:36:91:26:91:4c:87:d8:d0:4a:
24:63:93:d2:e8:64:4d:90:f8:e5:de:92:57:01:d9:
8b:19:c8:8b:88:c9:56:9f:ff:af:e1:01:5c:f2:4d:
8b:88:9c:ef:e9:f0:76:a5:5d:18:69:1d:30:44:f8:
a1:10:84:2d:3a:80:3d:1c:c0:28:ea:ca:0c:8d:a4:
de:45:9f:a2:03:52:4c:99:31:c4:23:9d:e5:9c:c9:
c0:6e:4c:5c:22:a9:98:cd:51:f1:0f:b4:b3:df:e9:
3b:a4:13:9c:95:e6:8d:2f:85:18:8a:bf:c4:12:c1:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:C6:DC:A4:51:65:16:10:EC:91:2C:4C:BF:36:DD:95:DD:AA:32
X509v3 Authority Key Identifier:
keyid:DB:23:CB:8D:0F:C9:F2:C7:29:E6:A5:6F:1B:E7:97:0D:19:D5:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yPLjQ_J8scp5qVvG-eXDRnVvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ac:7c:07:0b:69:22:5f:d6:bf:1b:c7:29:3d:51:fe:b1:4c:
8e:e3:d4:0f:c7:84:40:69:ef:0d:7f:84:b2:c0:34:ba:3f:07:
e7:b2:ee:c0:48:6f:28:51:9c:98:dd:79:8c:e5:80:fd:5b:17:
5b:1d:ed:1c:8e:57:96:36:41:ef:42:66:bb:8b:18:d7:9f:70:
39:29:73:95:14:c6:9e:42:22:d9:bf:3d:b3:20:cd:23:22:e1:
80:80:0f:d3:bb:32:ee:20:b8:5f:4f:8f:26:a5:e8:73:4a:4f:
67:89:30:1d:6f:78:bb:88:56:4d:fb:6d:61:09:bc:1d:37:3c:
32:1a:1c:2b:8e:eb:31:dd:5d:d8:d4:35:9f:f7:9b:f3:8e:e4:
3c:b3:ac:49:6b:19:75:b9:a0:c8:ee:90:ae:17:d3:bd:81:02:
16:26:c5:16:60:64:07:82:85:0e:2e:3a:8c:b6:dc:5d:34:16:
ac:51:fe:30:1f:5f:96:c2:82:30:e3:71:a7:cd:22:e0:b9:38:
eb:ee:c7:fb:70:c0:76:6b:81:3b:59:50:59:26:74:ce:80:c3:
f5:8f:e4:cd:55:a8:89:41:1a:ef:14:0c:5b:99:83:e8:6c:9d:
9d:b0:ea:d7:3e:28:43:6e:b5:ad:2b:65:1f:fc:29:99:2b:5a:
e0:b4:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:20:50 2026 by rpki-client