Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
File: 2x3NeuqJI6iq_So40dw9BmhAeaY.mft (raw, json)
Hash identifier: qQ+biZBNNHzpzxWE5MdnBZH1najvlkKIztff4JeGH/8=
Subject key identifier: 28:A5:E0:F0:C8:39:26:05:06:FB:B0:45:BD:06:57:D1:9E:47:8E:C1
Authority key identifier: DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
Certificate issuer: /CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Certificate serial: 01A0CBC786A5CB9D0B825E8965D428AE930D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
Manifest number: 0D00
Signing time: Wed 23 Sep 2026 01:00:46 +0000
Manifest this update: Wed 23 Sep 2026 01:00:46 +0000
Manifest next update: Thu 24 Sep 2026 01:00:46 +0000
Files and hashes: 1: 2x3NeuqJI6iq_So40dw9BmhAeaY.crl (hash: H8qnllrhydXSVgR609H0lIqBxuwZV/8e8bbNJQocQpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:86:a5:cb:9d:0b:82:5e:89:65:d4:28:ae:93:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1dcd7aea8923a8aafd2a38d1dc3d06684079a6
Validity
Not Before: Sep 23 01:00:46 2026 GMT
Not After : Sep 24 01:00:46 2026 GMT
Subject: CN=28a5e0f0c839260506fbb045bd0657d19e478ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:a8:31:03:8c:92:fb:ce:d4:99:f1:2b:4e:
71:ad:cb:26:9b:ae:94:a4:d3:10:9e:97:b5:45:34:
dd:bd:1d:4c:fb:6a:9e:60:6e:68:47:d5:c3:86:72:
6e:4f:e1:74:7f:e6:11:5d:69:af:4c:6b:e9:08:73:
c7:07:a3:08:f1:0d:8a:e8:8b:a8:5b:97:37:5d:e4:
1d:98:9d:20:f1:65:99:6e:4a:39:32:0d:08:12:41:
8b:6d:41:ef:65:c7:3b:8e:20:df:16:cf:5f:e0:94:
db:e3:22:84:23:97:0d:b6:1a:6c:24:be:ba:ca:f6:
66:d9:0d:f0:9b:ed:e3:b7:82:5c:a8:28:aa:34:c7:
50:06:58:af:c5:f9:83:ff:ec:c1:ad:27:14:06:8a:
39:d7:4a:0d:60:1d:05:e1:34:a6:44:32:8e:b1:07:
1d:98:ee:e8:80:46:ac:30:dc:47:3a:06:42:44:3d:
bb:2c:32:98:b6:d5:09:eb:56:eb:d0:e0:c6:a7:e3:
08:2b:de:99:c9:e1:f9:38:f2:52:91:1f:78:cf:a1:
0a:0c:e5:b3:bd:c5:fc:fb:e4:f8:a9:63:cf:11:fa:
d7:e1:38:f9:4c:ca:65:a0:35:e6:2c:21:71:8a:6b:
34:d8:00:b8:ca:f5:be:59:b0:e4:fe:b1:d9:0a:78:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:E0:F0:C8:39:26:05:06:FB:B0:45:BD:06:57:D1:9E:47:8E:C1
X509v3 Authority Key Identifier:
keyid:DB:1D:CD:7A:EA:89:23:A8:AA:FD:2A:38:D1:DC:3D:06:68:40:79:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x3NeuqJI6iq_So40dw9BmhAeaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/35ad6e-4d6b-4f9c-90f3-90b18ca8c20c/1/2x3NeuqJI6iq_So40dw9BmhAeaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:6d:04:1b:20:10:67:8d:68:f6:24:5d:7a:90:b5:9c:3e:
b4:1a:37:76:5f:cd:23:e0:95:6f:87:bb:ce:84:e8:99:f0:1c:
8e:04:41:d9:16:4c:e1:00:27:e5:0a:5b:48:ed:56:dd:c4:dd:
a8:25:32:d5:ad:09:e1:bd:1e:a8:c0:99:30:12:04:8b:8a:00:
d8:71:bd:e6:0a:68:7c:62:03:67:59:70:de:5a:b2:ce:15:92:
c7:1f:45:db:5c:7a:78:a9:50:da:fb:86:68:a7:51:3f:a5:90:
69:e2:2b:67:a1:88:45:08:db:96:36:41:7e:66:4c:d4:18:c2:
96:82:45:c7:f5:16:18:a0:1b:7d:ea:23:aa:b2:3f:ed:a8:90:
e9:4c:a4:48:3d:3b:4d:d0:8d:ba:69:42:14:d1:8b:8a:d4:eb:
93:66:5d:2f:3e:04:79:3d:14:68:f2:96:ab:2a:f8:ab:a5:ab:
2a:69:91:48:5a:89:a9:33:34:0e:96:1a:f3:42:53:01:73:73:
5e:2d:21:e9:cc:cc:41:a2:3f:88:03:86:b3:94:a7:20:c2:48:
2d:73:3b:60:c8:b6:15:f5:18:36:be:3c:26:37:b7:69:82:42:
87:e9:d2:4a:09:3b:2a:2e:06:89:0a:e2:07:02:c1:e7:32:bc:
c5:cd:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:26:37 2026 by rpki-client