Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: ZRLNEcMCJi2EaD0HmxztPkx46n7ePLoDgkpy143hW6I=
Subject key identifier: 36:D5:1F:F7:6C:C5:56:93:0E:5B:73:E1:26:39:4E:59:07:FD:B8:10
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 01A0CBC73ED47EDC86CFDD8AD16BDC8203DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1A65
Signing time: Wed 23 Sep 2026 01:00:27 +0000
Manifest this update: Wed 23 Sep 2026 01:00:27 +0000
Manifest next update: Thu 24 Sep 2026 01:00:27 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: Voci0J/AQKDeoTOatJogtWnlY8bj2rrWOPbDadjpeeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:3e:d4:7e:dc:86:cf:dd:8a:d1:6b:dc:82:03:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Sep 23 01:00:27 2026 GMT
Not After : Sep 24 01:00:27 2026 GMT
Subject: CN=36d51ff76cc556930e5b73e126394e5907fdb810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:50:e5:9d:0e:05:3e:7e:1d:77:ef:1d:aa:1f:
14:ca:96:fe:ac:99:ed:da:24:75:81:08:8d:4a:32:
a4:c5:36:4e:29:47:85:d3:3d:44:55:41:82:24:d5:
f2:11:e9:a8:d4:36:dc:f1:cc:bb:c9:d0:aa:ea:03:
45:39:06:4f:0f:2e:43:02:a2:65:9f:9e:96:6b:7d:
9c:ba:30:13:47:36:85:61:5e:bb:c5:8e:f0:34:bf:
ce:50:c9:c8:54:78:e8:06:e4:f9:4b:1f:4f:fb:08:
27:43:b9:4f:a5:28:7c:d6:42:6a:b5:78:23:b6:d8:
de:d2:ba:26:b9:63:29:62:39:c9:af:3e:36:46:f2:
d9:fd:2a:e2:20:90:d9:0b:22:e7:98:84:f9:ba:df:
13:46:bb:29:03:04:a4:d6:b1:b5:d4:42:f0:5e:df:
e5:56:eb:78:54:85:64:74:c6:17:d6:41:b1:30:8a:
2c:9c:30:a7:0c:3b:67:23:3c:7c:8a:6a:72:39:db:
85:25:e9:77:6e:b4:6a:a7:47:ac:01:85:06:c1:4b:
d0:5a:e3:ba:48:07:e8:6e:67:f5:cb:c4:66:81:bb:
22:1b:25:25:69:ad:14:52:47:10:cb:b6:46:81:00:
98:e1:80:9c:65:a6:07:d8:8a:1a:f0:04:a5:7b:00:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:1F:F7:6C:C5:56:93:0E:5B:73:E1:26:39:4E:59:07:FD:B8:10
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:f3:6a:d0:0c:01:d4:e6:cb:b0:fb:16:63:ac:4c:12:ac:
90:4e:88:ac:b2:02:f8:38:0b:31:af:bb:6f:2e:b2:b1:57:f6:
17:f9:19:67:60:01:30:a1:11:8b:6a:91:54:78:b2:91:0b:00:
b8:74:a1:55:72:cf:52:69:c6:78:f7:4e:f8:65:f2:c6:1a:7a:
f1:47:0a:0a:90:39:26:a1:49:2f:09:84:87:4c:66:3c:34:6a:
48:f7:f6:40:0c:04:5c:a7:c2:47:ae:dd:31:63:e7:29:09:fb:
d0:92:72:ba:f4:93:42:05:e5:11:4b:54:24:f4:56:89:0a:fa:
bd:83:5a:96:49:f8:1f:15:31:82:a0:7d:06:26:77:48:c1:87:
24:a6:82:e1:04:79:02:f4:af:12:77:db:ba:0a:33:8b:48:f8:
e5:ed:79:05:4a:04:49:71:ea:1f:ef:2b:59:81:f2:69:98:ac:
ef:46:ea:b4:ee:45:3f:be:c2:ef:1b:ee:dc:bd:e9:21:4e:a9:
3b:d1:d5:e1:8b:0d:f9:00:e2:40:77:42:b2:53:b3:4f:81:08:
5f:82:bb:1f:4c:a5:78:d4:82:0b:de:2c:82:74:81:88:11:3d:
9a:aa:6a:58:82:d1:e9:c1:ad:2a:74:18:da:21:0a:5c:12:51:
b6:1e:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:55:44 2026 by rpki-client