Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: Id2mgI7pDHQVmyJlllFMWm5GUhLhpUsst/triRMCd28=
Subject key identifier: 75:43:01:6D:17:B2:33:97:5A:F8:50:65:07:A3:DE:9D:E3:33:8B:37
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 01A0CFDAC95500A234BFF13664F79376BFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 071A
Signing time: Wed 23 Sep 2026 20:00:17 +0000
Manifest this update: Wed 23 Sep 2026 20:00:17 +0000
Manifest next update: Thu 24 Sep 2026 20:00:17 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: EW7LQBhygh3Xm96ul/IiiL+yYZT/uCV3xphPccq0D/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:da:c9:55:00:a2:34:bf:f1:36:64:f7:93:76:bf:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Sep 23 20:00:17 2026 GMT
Not After : Sep 24 20:00:17 2026 GMT
Subject: CN=7543016d17b233975af8506507a3de9de3338b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:e6:b3:54:04:07:77:7f:1b:fc:81:5d:1a:
b3:2d:d8:e0:10:78:bb:ee:fb:b0:aa:a8:f3:d4:b0:
a5:62:80:4f:29:30:f6:54:5d:4c:74:c3:06:17:49:
6b:a2:8b:08:ec:b6:08:c3:0f:83:7f:64:a1:b0:54:
7d:17:3d:5a:dd:51:eb:ba:3c:e0:9c:e4:08:90:aa:
14:3e:e2:6f:d5:19:94:b2:d5:fd:35:e8:5e:7f:74:
8a:d1:29:d1:0c:79:e8:e3:d9:be:a5:60:20:de:5d:
3c:5a:50:46:7c:28:14:d0:f2:84:0f:6c:f0:fb:94:
cd:ec:07:3a:ab:f6:b6:f6:24:96:0b:4e:cd:ce:89:
51:ab:0a:7a:73:9e:6a:39:c9:d1:41:ca:38:58:50:
ca:02:ea:d3:89:a6:88:28:3e:06:37:4c:3b:54:89:
a0:53:53:df:b7:74:33:8b:75:46:b0:5a:93:f2:a8:
2c:a2:b8:b2:32:21:6a:a8:06:32:fd:d9:06:bb:20:
34:c6:69:da:62:ce:1c:a9:ce:8b:4e:ec:f2:a0:23:
3e:da:4f:49:2d:a5:c0:e6:49:22:86:74:33:a4:c5:
9a:c3:82:38:3e:55:d9:44:5d:a2:84:97:25:1d:f3:
3a:b8:b4:bb:4e:42:ed:6a:ae:d1:97:6f:f6:59:10:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:43:01:6D:17:B2:33:97:5A:F8:50:65:07:A3:DE:9D:E3:33:8B:37
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:91:e3:27:aa:6f:39:d3:91:cd:55:e0:3a:8d:06:41:33:5d:
63:e6:17:4b:b0:50:e0:77:68:76:fa:02:11:ee:b2:11:e3:2c:
fa:30:f5:8b:92:0e:bc:2a:58:9c:3e:df:74:67:81:93:be:c9:
4d:37:3a:0f:b8:e8:39:dd:09:59:a6:70:96:c2:94:47:99:06:
18:47:9e:74:a5:1a:94:ba:fe:28:c0:35:3d:72:de:30:be:8b:
ee:8c:89:24:dd:f9:15:3d:4d:07:19:f8:1d:3f:23:fd:d4:80:
dc:ed:95:3f:76:18:78:e4:f1:a5:8f:b0:c9:ff:4d:a8:44:08:
82:5b:6d:4c:2b:34:ef:65:29:69:35:f1:ea:38:10:97:25:09:
f0:02:5c:3b:50:a0:79:70:22:73:86:05:6f:eb:93:d9:0f:c2:
86:a2:62:50:ee:86:ff:3c:97:46:ac:a8:a4:15:4b:1e:0e:0e:
f3:d8:82:2c:c7:6b:67:d7:0b:3d:57:c6:f5:10:40:4e:f6:3b:
c5:e9:17:f0:11:18:38:71:6f:69:98:f5:04:ed:63:94:b5:b2:
37:40:1c:e5:6b:6d:b5:4e:d7:62:df:ae:ce:43:bd:54:09:39:
27:1d:fb:ec:ec:2d:60:3e:21:6c:67:eb:b9:d0:a4:12:a0:05:
c4:9e:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:50 2026 by rpki-client