Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: EmpOuvmDuEnQPQ9fsOCWfIPF0tE3geYxcaOWyU0IDsw=
Subject key identifier: 5A:E9:56:86:D6:24:D1:53:D2:F7:DF:E3:9F:8D:AE:0E:CE:2A:FE:1A
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019F905A6178B94FBBB1E47B7315DA011970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1657
Signing time: Thu 23 Jul 2026 19:01:09 +0000
Manifest this update: Thu 23 Jul 2026 19:01:09 +0000
Manifest next update: Fri 24 Jul 2026 19:01:09 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: HR3bYpcUm1G6YFx+96WQtA0BGnAi/1WOmKQm9Ln7qf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:61:78:b9:4f:bb:b1:e4:7b:73:15:da:01:19:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Jul 23 19:01:09 2026 GMT
Not After : Jul 24 19:01:09 2026 GMT
Subject: CN=5ae95686d624d153d2f7dfe39f8dae0ece2afe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:4c:28:ee:93:08:2c:60:a0:45:35:87:7d:
d2:32:07:22:f2:d1:91:c9:5d:b6:24:19:c6:ab:4e:
a1:f2:cb:85:3b:1e:61:9a:19:85:07:f8:32:3a:3c:
3e:f5:ce:e9:d3:c0:db:64:97:84:b7:db:d7:43:9e:
f3:16:9b:32:82:5e:d9:59:81:7f:79:a7:9b:1c:91:
28:2d:42:fd:ed:3b:e8:66:f1:c5:5b:e3:dd:c7:63:
b3:b5:ca:8e:5c:21:53:b9:23:6d:f5:39:71:f6:69:
ff:f5:f6:2b:e4:46:e0:45:e9:65:67:24:80:e5:36:
dc:cc:6a:ea:2a:0a:96:0f:eb:3d:8f:08:e0:88:cd:
d7:ca:83:d0:ba:90:35:6a:2f:55:04:a6:f1:4a:40:
42:fd:38:d9:4b:ee:f5:2e:c9:91:28:83:6b:41:a7:
7e:e1:c8:8d:06:f3:a7:95:84:5a:33:c4:ca:69:0d:
65:e0:57:48:8b:6e:93:1e:5e:78:12:5b:49:5b:e3:
51:5c:6d:0a:6e:a3:97:f1:a0:08:a2:e7:20:a2:1e:
aa:23:f4:01:e0:a0:10:f0:be:f7:ae:40:c2:55:ed:
5c:a9:9a:e7:3f:87:b8:9b:fb:f7:dc:9a:3c:37:0b:
3d:de:fe:4a:15:a0:33:4b:6c:43:b2:72:b4:50:f6:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:56:86:D6:24:D1:53:D2:F7:DF:E3:9F:8D:AE:0E:CE:2A:FE:1A
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:04:e8:48:df:d3:05:7b:da:4c:3a:54:cc:ad:03:f6:1c:b5:
c7:65:a0:d5:ac:c8:c3:2c:c0:bb:8a:62:74:8f:6c:b8:b9:3c:
87:6e:b4:dc:a1:4e:88:3c:da:1b:3e:25:8c:94:20:0c:69:36:
25:30:e9:77:c3:01:b8:7d:57:dc:d8:82:29:ec:a2:bc:0e:59:
a2:fd:67:4b:cc:96:d6:dd:05:0b:2d:b5:a4:35:7d:9f:d0:25:
63:61:c7:90:5a:2a:38:69:8e:64:8f:bc:ae:99:e6:19:94:36:
6f:50:18:11:35:bc:0f:2f:b0:43:7e:6a:f6:b6:56:f4:89:5c:
88:1f:a6:23:f4:c4:3a:9d:9b:1c:f9:c2:73:19:6b:a3:6a:80:
85:88:31:71:08:5f:cf:44:b2:60:f0:5d:e7:42:be:72:9f:70:
e8:1b:7d:e5:23:81:d7:d5:3a:2b:4a:30:19:d2:88:2b:b2:04:
7f:78:fd:05:f7:49:48:c4:f9:e4:a7:51:66:99:8e:15:ac:25:
78:88:e6:a8:49:d2:1f:b1:f0:ff:25:0d:8d:d7:62:72:fb:bb:
92:02:46:ed:4c:83:19:60:ce:30:41:5c:12:57:bb:be:9b:4b:
94:21:b3:e0:18:1f:79:19:91:5d:34:65:28:42:c9:be:2f:17:
3c:2e:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:45 2026 by rpki-client