Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
File: 2lPr-vXBh42KIqk44XMqigdxTzU.mft (raw, json)
Hash identifier: 9rv9E87fqYt63Xfte4i4Zekr2OYcyxpp3T7qILCwO6k=
Subject key identifier: 66:55:BF:31:C0:8E:90:D0:F9:DD:98:62:5C:D7:89:67:4C:A4:7E:C1
Authority key identifier: DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
Certificate issuer: /CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Certificate serial: 01A0D4CBD2A8D330C820D9282359138E4857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 19:02:02 +0000
Manifest this update: Thu 24 Sep 2026 19:02:02 +0000
Manifest next update: Fri 25 Sep 2026 19:02:02 +0000
Files and hashes: 1: 2lPr-vXBh42KIqk44XMqigdxTzU.crl (hash: LvVMpyIRmsu2bSyyaQ95i8xhnDmTe70j8i/+/jC/jAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:d2:a8:d3:30:c8:20:d9:28:23:59:13:8e:48:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Validity
Not Before: Sep 24 19:02:02 2026 GMT
Not After : Sep 25 19:02:02 2026 GMT
Subject: CN=6655bf31c08e90d0f9dd98625cd789674ca47ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:57:a1:00:53:a1:43:a7:38:43:7b:32:27:
2d:cb:05:9a:27:63:6c:04:85:39:bc:d1:e3:98:d3:
81:70:80:5b:92:cb:72:b4:d2:4e:b5:17:64:26:31:
9d:e1:47:61:0f:b0:37:04:62:a3:62:a5:bd:d3:12:
cf:ee:58:80:76:dc:e8:02:b6:e3:32:4b:8d:de:8f:
2a:5c:0f:ec:a0:5b:d1:fa:e9:20:a0:db:8c:81:e7:
52:75:9c:bd:84:a1:cf:a8:70:73:83:cf:63:c5:33:
80:eb:ac:45:46:67:7e:9f:d4:38:89:1b:86:b8:53:
49:2d:ed:54:2d:71:62:c4:3b:0b:31:70:2c:09:90:
b5:0d:e3:8b:97:d1:6d:d6:c0:66:20:8b:2f:07:49:
bf:18:8e:ec:69:b3:43:50:21:2e:3c:ae:5b:e1:ee:
f3:46:bc:11:c2:05:25:ca:cb:ff:d2:77:f7:0a:3e:
30:18:70:8a:c7:47:f2:63:dd:39:95:ea:6c:fe:c3:
1d:5d:2f:9d:f4:1b:16:60:38:22:31:af:da:8a:f4:
02:4e:79:0c:e7:2d:ce:21:75:24:c7:f3:e3:88:2a:
0f:a5:a7:cd:3a:30:ee:8a:ac:f0:a1:95:af:2b:f5:
1c:34:63:d6:83:40:6c:7c:2f:c4:88:42:3b:72:ed:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:BF:31:C0:8E:90:D0:F9:DD:98:62:5C:D7:89:67:4C:A4:7E:C1
X509v3 Authority Key Identifier:
keyid:DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:34:0e:ca:f6:91:51:d1:46:2d:3c:2d:85:82:c7:79:5d:c9:
e3:bc:01:09:93:ef:7c:cd:28:26:3f:bb:20:7f:1c:6a:54:4b:
9d:87:44:48:06:5a:60:52:3b:65:4d:d5:49:9e:cb:fb:55:56:
12:3a:c1:91:fe:47:dd:da:66:78:35:3f:f0:e3:af:5b:44:85:
2f:72:c7:03:c1:d2:be:e8:65:60:53:c0:dc:5a:dd:66:ca:d8:
81:57:98:97:d4:10:2e:93:61:7c:4a:2c:27:fc:1d:3e:6d:32:
ba:d9:ff:b1:40:a1:d6:05:a1:4e:1e:4f:b7:3d:76:de:d3:04:
8a:8b:dd:7d:b3:6e:fc:f9:a6:0e:b6:1f:c5:ee:b5:f6:4c:bd:
00:48:30:37:58:d8:ff:86:a7:ec:08:d8:c3:44:37:87:cf:02:
b0:a4:95:01:b4:c3:40:4c:3f:3a:5e:8f:b4:3a:0e:f1:db:97:
fa:45:83:60:83:14:e6:5c:d0:7a:05:7c:b4:b2:06:5f:a1:a6:
0f:e9:0f:f0:79:ab:65:6d:d5:a3:0e:b0:2d:0b:2b:0d:dc:44:
29:9a:d8:cd:ff:90:26:da:dc:ff:b6:0d:31:83:f2:33:ba:2e:
3d:7b:6a:6b:db:b5:a2:57:02:ec:6c:d3:e1:c4:27:91:31:d8:
e6:11:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:44:59 2026 by rpki-client