Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
File: 2nGl-6KA1tAY7MOp1-WMPGEeav0.mft (raw, json)
Hash identifier: TmwBGDatSzsKM8s6htiEa2DocxtdVBML+Yn8empBhX4=
Subject key identifier: 1E:46:39:96:9F:E0:A3:0B:02:94:DF:A6:C8:C4:86:2F:F4:0F:2E:09
Authority key identifier: DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
Certificate issuer: /CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Certificate serial: 01A11AF544BA8A5A1E7311F9B94D7E238054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
Manifest number: 1A8E
Signing time: Thu 08 Oct 2026 10:00:43 +0000
Manifest this update: Thu 08 Oct 2026 10:00:43 +0000
Manifest next update: Fri 09 Oct 2026 10:00:43 +0000
Files and hashes: 1: 2nGl-6KA1tAY7MOp1-WMPGEeav0.crl (hash: TodepU/tH1Sc4Lt5MZdJ50bF4g1YxA18hoT4FakMY7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:44:ba:8a:5a:1e:73:11:f9:b9:4d:7e:23:80:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da71a5fba280d6d018ecc3a9d7e58c3c611e6afd
Validity
Not Before: Oct 8 10:00:43 2026 GMT
Not After : Oct 9 10:00:43 2026 GMT
Subject: CN=1e4639969fe0a30b0294dfa6c8c4862ff40f2e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:5e:0f:75:81:13:0e:ab:80:d7:48:a0:6c:
ae:eb:75:63:76:dc:1e:45:7f:18:43:6e:f0:a7:e4:
c9:9f:a9:65:ee:0b:e8:88:6b:e2:fb:ff:b7:56:c9:
67:65:7e:80:5a:1f:70:e8:6c:fd:01:88:93:02:23:
84:a2:7b:c1:e0:ca:10:a0:90:91:27:e6:be:b9:ad:
9d:09:4e:22:5b:4c:31:d5:ba:f6:65:41:30:d4:59:
58:4b:94:5e:cd:1b:7f:4b:de:d9:2b:cb:12:7a:2a:
1e:96:92:8f:45:da:50:2a:e2:d5:87:ba:1f:c5:07:
bb:fb:9c:58:3d:3e:ee:b7:39:4b:e9:0a:48:d6:7d:
0d:cc:04:fd:9b:14:e0:26:91:95:72:a1:bb:c6:db:
5c:be:12:a1:24:4e:af:d3:83:91:66:3c:7c:ba:81:
0f:35:2a:70:9a:16:5d:a7:3c:70:fd:f5:14:fd:06:
4b:a9:e3:29:be:d0:bb:a4:be:aa:dd:9f:eb:d4:b8:
16:7c:cd:ee:2b:a6:e0:55:8c:e3:fb:74:82:49:26:
d1:9c:85:22:93:d1:11:da:7a:89:84:de:4a:6c:ab:
36:b6:7f:fd:4f:58:48:7e:14:68:90:e8:d1:4a:91:
53:3a:c1:71:6f:11:95:3e:66:40:92:ce:3c:e3:1b:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:46:39:96:9F:E0:A3:0B:02:94:DF:A6:C8:C4:86:2F:F4:0F:2E:09
X509v3 Authority Key Identifier:
keyid:DA:71:A5:FB:A2:80:D6:D0:18:EC:C3:A9:D7:E5:8C:3C:61:1E:6A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nGl-6KA1tAY7MOp1-WMPGEeav0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/242692-a050-4783-8f7f-4c240a973d1e/1/2nGl-6KA1tAY7MOp1-WMPGEeav0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:6b:5e:75:35:0d:18:0b:06:f6:d7:9e:66:54:7e:88:16:5c:
85:27:f6:45:eb:39:4b:69:2e:85:3e:45:bd:4d:74:90:2c:4c:
52:30:c0:54:eb:49:dd:31:58:db:f3:e6:48:f3:3a:97:a7:a5:
42:53:ea:1f:33:2b:6c:99:e1:81:6c:dc:80:48:b6:13:98:63:
40:ca:3f:b3:b8:ac:44:65:21:b3:17:04:dd:52:ff:a6:f8:57:
d5:28:c6:39:fa:3d:d1:15:fa:05:2d:0a:8d:55:71:82:bf:58:
bb:fb:bf:21:06:c1:fb:ef:40:22:1d:07:ee:0c:f6:42:88:69:
54:45:4b:6d:53:c5:c3:15:d7:a4:ec:d2:92:67:54:1c:15:15:
0f:31:db:8c:4e:49:c0:79:28:d0:43:90:6f:06:91:37:30:b0:
a3:d6:a7:8d:a1:b1:dc:62:ae:7f:9a:14:46:10:f0:32:03:69:
c5:71:c4:5b:85:ed:9e:9f:35:bd:e7:19:4a:a6:25:2e:54:a3:
f4:78:05:16:e9:ff:0a:87:f2:f6:49:9f:39:2f:c1:ba:aa:f5:
d5:53:8d:e2:58:b4:98:14:8a:bb:a1:21:91:56:e0:85:43:1d:
77:e9:6b:41:aa:54:53:7d:33:1e:14:62:66:0e:52:d8:7d:b3:
32:77:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:48:43 2026 by rpki-client