Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
File: 2gKPaUMDSrdg84rkIJFU4iVciek.mft (raw, json)
Hash identifier: NuyfmUGWBQn5zFHBySr559CK9g+1gdzwR8CcrY90ueY=
Subject key identifier: 69:2E:FF:98:28:3C:7E:3D:19:A4:31:97:C7:56:92:32:CA:17:8E:2D
Authority key identifier: DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
Certificate issuer: /CN=da028f6943034ab760f38ae4209154e2255c89e9
Certificate serial: 01A0DA9607C388CAE45518283665D5254C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
Manifest number: 09D1
Signing time: Fri 25 Sep 2026 22:01:00 +0000
Manifest this update: Fri 25 Sep 2026 22:01:00 +0000
Manifest next update: Sat 26 Sep 2026 22:01:00 +0000
Files and hashes: 1: 2gKPaUMDSrdg84rkIJFU4iVciek.crl (hash: t9zm6mhpaw6IFyz4WrWJC2jDL7PEDNvY+aFzk+uDdck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:07:c3:88:ca:e4:55:18:28:36:65:d5:25:4c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da028f6943034ab760f38ae4209154e2255c89e9
Validity
Not Before: Sep 25 22:01:00 2026 GMT
Not After : Sep 26 22:01:00 2026 GMT
Subject: CN=692eff98283c7e3d19a43197c7569232ca178e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:04:7d:1a:4c:0f:f3:cf:78:2d:29:c2:78:
90:c5:16:e5:b8:92:72:f1:16:55:78:b6:ff:61:eb:
56:b2:b0:a8:36:c8:45:05:68:4e:0b:12:da:ef:95:
94:14:32:a7:fd:80:1e:95:56:bf:ed:32:bf:8d:00:
e9:c6:cb:0a:a5:d6:c4:ea:3b:bc:dd:b5:2a:06:11:
00:03:a3:6e:93:7d:20:ba:4d:0a:08:de:c2:10:75:
87:97:30:1c:56:4d:20:c0:1b:d0:01:6c:b3:f0:15:
06:4b:ff:27:a4:b9:e7:9e:02:7a:97:d3:b5:3a:3a:
fe:68:8a:67:aa:c5:c0:08:af:07:70:f4:cd:51:45:
54:c5:46:24:cc:6d:57:1c:6f:2a:21:a5:e5:86:2e:
4b:a5:9d:b7:d5:95:67:d4:e2:87:11:5c:f9:98:5a:
25:ac:43:75:d2:c4:e6:af:f7:3b:4e:b5:fe:08:fa:
f0:65:1e:ba:0e:16:d8:1f:00:d6:98:2a:ea:a6:ca:
9c:ec:cb:cc:46:cb:86:d7:cf:05:57:b1:f1:72:f8:
a0:b1:6a:9c:42:5c:af:b0:7d:c0:dd:de:07:19:21:
12:7b:99:7d:bc:18:8c:61:03:79:62:f5:7c:c9:5c:
00:bf:f9:36:2e:ce:36:9e:64:0e:7d:79:8a:99:1f:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2E:FF:98:28:3C:7E:3D:19:A4:31:97:C7:56:92:32:CA:17:8E:2D
X509v3 Authority Key Identifier:
keyid:DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:e4:f6:ac:81:0a:11:2f:4b:33:36:3b:71:1c:5f:77:9f:
9e:f9:e5:28:b0:59:b4:e9:3d:24:36:fc:e7:44:df:c2:99:cd:
29:a1:2e:a1:c4:11:41:42:29:b9:ea:2b:82:94:7f:27:8c:5e:
4f:69:b4:79:61:e4:f1:86:db:b5:16:d9:93:fe:15:62:12:c9:
89:36:be:11:a5:4f:cd:8b:e5:9b:3e:3b:1d:75:bc:7e:6d:de:
09:31:2d:0a:ea:0f:88:da:75:a9:e6:f8:8d:d7:cd:e5:60:69:
23:50:84:5f:1d:47:af:fe:a7:1e:9e:63:29:eb:3e:60:d1:71:
d0:22:eb:85:4b:87:55:a5:a9:c5:c5:66:c9:8c:84:f6:47:73:
65:f2:b5:ca:ff:16:52:16:ed:aa:11:3a:65:09:b6:fd:a7:52:
f7:95:e9:e9:0b:df:0a:ce:48:22:39:97:89:cf:c8:76:59:2a:
32:9b:72:9c:7d:0b:2f:6b:b7:f8:9c:bd:59:3a:0f:6b:fb:c2:
c3:c6:72:dc:35:87:f9:05:29:ca:34:f3:cf:d2:6c:b5:7c:5e:
c8:98:43:c8:f1:d8:9b:e9:6a:f9:02:d6:cd:e4:dc:c0:78:f3:
4f:26:fa:0f:97:5a:18:73:c3:dc:84:1f:9f:86:bb:1f:bc:af:
9c:81:a2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:52:11 2026 by rpki-client