Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: HRxu2xwpcPJi77LJeaAoszSTe/DpHTCXyPD61nnqPpk=
Subject key identifier: F3:6C:C1:3A:7D:DB:81:EB:BA:81:EE:9C:98:29:C1:DD:F0:7D:DD:D9
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 01A0D426057F910533C60A2F076686CAA572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 19FD
Signing time: Thu 24 Sep 2026 16:00:56 +0000
Manifest this update: Thu 24 Sep 2026 16:00:56 +0000
Manifest next update: Fri 25 Sep 2026 16:00:56 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: pJ5A6qmZixT2JA6Lq0M6LJ4uiPJU2dj3AXFPF0NZ+J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:05:7f:91:05:33:c6:0a:2f:07:66:86:ca:a5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Sep 24 16:00:56 2026 GMT
Not After : Sep 25 16:00:56 2026 GMT
Subject: CN=f36cc13a7ddb81ebba81ee9c9829c1ddf07dddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:68:ba:20:57:8f:aa:92:e8:6d:a6:7f:41:
47:3e:7c:5c:64:ea:06:a6:db:36:40:ad:f7:9d:9f:
9c:1d:76:c4:83:05:28:cf:da:ce:fc:a5:d3:69:4e:
4f:42:24:cf:f2:8d:3f:a8:9a:bc:77:6b:2e:5a:5c:
ea:57:a3:9d:f7:dc:81:3b:ed:b0:7d:bc:7a:f3:89:
98:25:2e:a2:97:50:f9:db:d0:75:63:76:a1:d8:90:
2c:3a:3f:7d:86:94:d1:0d:87:96:a4:3d:d3:f0:17:
23:27:89:c8:57:03:70:c8:c0:82:23:c3:66:72:49:
d5:cd:64:e9:89:e9:10:ca:4f:1e:f7:0b:28:20:38:
46:6a:fc:d4:47:ad:2a:3a:98:6f:8b:a1:5f:90:67:
ce:b8:3f:7d:b8:f8:7b:56:ce:12:62:37:1f:6e:3d:
07:5d:95:24:fb:21:13:81:20:57:48:bb:da:6b:cf:
b9:1a:25:ee:19:e7:5f:11:f3:8b:62:77:e9:d4:2e:
92:b9:14:8c:89:62:9c:3a:03:7c:0f:ff:2e:19:99:
ca:ac:84:3b:07:77:2b:b3:35:ea:1b:99:94:85:9d:
65:8f:c0:12:d8:30:74:ad:ff:52:e5:d0:87:7c:a8:
5c:89:8a:01:48:a9:11:73:84:63:9c:a1:d6:0f:9c:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:C1:3A:7D:DB:81:EB:BA:81:EE:9C:98:29:C1:DD:F0:7D:DD:D9
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a2:ea:52:e8:c8:0c:c6:8f:e5:87:fa:73:22:c9:81:7e:15:
de:16:59:13:2a:49:cc:e5:23:86:56:06:78:f9:6e:17:e1:cc:
5d:34:98:40:35:0b:01:be:f7:b5:07:a2:bd:63:cf:15:17:2a:
82:50:85:0b:5f:5b:16:90:7e:7b:93:a8:28:05:cf:7d:b8:18:
6b:f0:7d:6a:39:6d:fa:36:2c:9b:d0:58:c2:41:4c:c6:08:d2:
26:79:63:e7:7b:4c:9d:23:2c:68:69:40:6b:67:c8:31:ac:68:
9b:fb:83:fa:f7:ea:b7:a6:e2:5c:3a:c6:6d:d6:e8:52:ab:98:
21:d5:2d:4d:9e:53:a3:1e:e2:61:3f:85:1e:93:10:30:92:88:
73:92:b8:93:4b:5f:df:e2:a5:18:39:d3:c7:d0:a4:78:aa:c2:
d2:16:da:b5:68:52:11:5e:51:a8:cc:98:0b:03:0b:f2:69:84:
a2:af:c1:98:e8:67:e4:af:f9:ac:2e:8e:07:a7:33:b0:1d:7f:
95:03:4b:84:ba:0f:61:f9:39:de:1d:9b:6f:b9:ae:37:4a:18:
60:e5:e7:fe:84:da:9d:9e:d2:e3:37:1b:9d:f3:43:ff:3f:27:
7c:64:a2:94:91:db:60:40:c6:ce:36:b6:de:68:d4:5f:b5:1c:
fe:76:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:19:22 2026 by rpki-client