Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
File: 2u6A610wBIVU0K79Q7zu0z791Kk.mft (raw, json)
Hash identifier: qN2ytvxD0MMqiwTtwRuFW0WYepIc2kmRJzm+G2zcSEY=
Subject key identifier: 3A:88:74:6E:0F:03:D3:21:6C:BE:6C:8C:9A:C1:0A:E2:0B:C7:F3:E2
Authority key identifier: DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
Certificate issuer: /CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Certificate serial: 019F92ED89A7BD982CF22E1B29E7E9E66E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
Manifest number: 1656
Signing time: Fri 24 Jul 2026 07:01:08 +0000
Manifest this update: Fri 24 Jul 2026 07:01:08 +0000
Manifest next update: Sat 25 Jul 2026 07:01:08 +0000
Files and hashes: 1: 2u6A610wBIVU0K79Q7zu0z791Kk.crl (hash: 4TEPOcTLBGCMgtD6Ftdhlz6Az5VLiXJXICNyBMyRA/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:89:a7:bd:98:2c:f2:2e:1b:29:e7:e9:e6:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daee80eb5d30048554d0aefd43bceed33efdd4a9
Validity
Not Before: Jul 24 07:01:08 2026 GMT
Not After : Jul 25 07:01:08 2026 GMT
Subject: CN=3a88746e0f03d3216cbe6c8c9ac10ae20bc7f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:31:66:45:39:b1:e9:7f:8c:98:31:52:17:
19:5d:7c:7c:b0:19:93:7e:e8:51:d6:1c:63:bb:65:
a3:a6:bb:f2:1e:11:3f:30:2a:e4:99:de:83:20:92:
24:8a:1e:4a:f7:7b:ec:c6:d5:1d:8f:dc:63:90:d4:
4b:70:2b:12:e3:ab:99:5b:6e:64:4e:c4:fd:88:dc:
b2:c8:a1:85:12:74:0d:1c:0f:c9:ee:86:60:1e:4e:
e3:31:a9:00:79:75:40:76:5f:b9:2f:d3:a0:fd:b5:
48:6e:08:2f:8f:36:db:9c:ac:c8:da:42:4d:f1:89:
19:05:f3:b5:6e:3f:35:99:09:07:f6:92:d8:37:94:
c6:a3:33:b9:c0:61:98:75:e9:28:9c:02:ac:5b:b8:
1c:8b:03:99:51:14:6b:45:82:0e:ad:28:53:6e:73:
cd:52:e8:b3:00:c3:56:4c:fe:e5:26:30:6d:90:59:
85:07:77:05:b9:5b:72:51:f8:41:55:0b:aa:b3:4a:
7c:60:0a:ba:28:4f:6f:d5:c7:82:66:d4:36:c6:68:
38:0a:9a:29:06:df:ea:5e:47:6f:3c:32:d8:e3:2f:
7a:4b:37:08:93:1e:ca:58:36:86:ce:13:36:2e:84:
0e:4c:85:c1:f1:66:bd:3d:36:73:b1:8a:49:22:5e:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:74:6E:0F:03:D3:21:6C:BE:6C:8C:9A:C1:0A:E2:0B:C7:F3:E2
X509v3 Authority Key Identifier:
keyid:DA:EE:80:EB:5D:30:04:85:54:D0:AE:FD:43:BC:EE:D3:3E:FD:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2u6A610wBIVU0K79Q7zu0z791Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d20642-8a5d-4778-a9a5-6ca76322e084/1/2u6A610wBIVU0K79Q7zu0z791Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b0:4a:ed:da:b6:65:6d:18:6c:fd:a9:22:18:6b:55:af:a7:
1c:2a:cd:69:f5:7e:7f:90:5f:8b:40:43:d5:d8:15:69:83:5c:
08:4a:18:03:94:f2:10:88:a9:23:27:95:f2:8d:0e:6c:45:70:
b4:9e:18:32:97:26:33:d0:49:c7:6b:c5:e2:0e:44:1e:a0:8e:
46:f7:db:24:df:bb:f3:0c:56:bb:db:52:f7:2d:dc:29:2d:e1:
7b:32:e5:b1:67:61:1d:e3:05:b8:76:54:27:06:a6:36:cf:53:
59:47:0e:54:cd:02:83:31:b4:b7:6b:69:61:1c:d4:0a:3d:49:
de:d2:ef:a6:c5:1a:e8:04:ff:e9:58:bd:cc:1b:83:c1:f5:93:
87:e1:80:7d:a1:18:7b:94:41:d4:78:be:ae:3c:63:30:6c:89:
d5:fb:d7:63:ed:cb:6c:9c:27:45:30:fd:88:f5:f6:d0:0c:80:
73:45:a1:5a:fc:b4:28:fe:1a:7e:d9:e5:9b:72:8a:aa:87:98:
ab:fd:14:03:27:ce:6a:16:16:65:31:68:25:0d:f3:0c:1b:0d:
22:8d:d7:be:0d:72:f5:27:e5:e4:62:ff:f6:e5:c4:c2:5c:50:
23:94:ef:8e:2b:88:2f:65:b4:40:ce:2e:9f:da:fc:49:1c:c3:
2d:ca:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:49 2026 by rpki-client