Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: VjUrDX0c3XnRi0W4zddk6mp2lPZT1u0jHhP9Rta8ZtA=
Subject key identifier: 95:16:FC:38:B6:C9:0B:D2:B4:E9:95:6F:D0:41:05:97:8A:CD:47:A0
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 01A0CEFF316AFE600B37196CAB0471951FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 16FC
Signing time: Wed 23 Sep 2026 16:00:25 +0000
Manifest this update: Wed 23 Sep 2026 16:00:25 +0000
Manifest next update: Thu 24 Sep 2026 16:00:25 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: fdULOQJVqG9PbZxigNuA1Mb1Y63Dx8fMNBiC0DmmpFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:31:6a:fe:60:0b:37:19:6c:ab:04:71:95:1f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Sep 23 16:00:25 2026 GMT
Not After : Sep 24 16:00:25 2026 GMT
Subject: CN=9516fc38b6c90bd2b4e9956fd04105978acd47a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:fd:dc:e6:4f:40:36:88:31:f1:e5:85:ee:
22:14:d3:30:40:da:9c:b8:da:ff:18:9a:f4:36:8d:
84:01:b6:e6:d2:3f:62:0f:95:43:22:ec:ff:70:f8:
d9:a0:dc:03:a9:b7:db:a6:17:78:98:7e:78:31:1b:
67:38:dc:b5:27:69:20:e5:24:46:03:81:a9:43:e8:
ca:49:bd:e8:99:f5:1e:4f:eb:4c:1f:28:12:e0:b2:
e1:27:c2:46:c6:f0:4f:e1:50:5f:a3:32:ac:3f:31:
21:6e:d2:96:ad:1c:28:9d:1a:19:d3:8c:d5:2e:29:
44:85:51:0b:60:fd:a6:23:d8:f1:bb:3f:59:5c:90:
ab:50:3a:5b:f8:38:fe:b9:b3:b1:b5:f5:15:93:b9:
31:5d:e9:d1:ff:57:3b:89:92:1b:23:9e:9a:21:5f:
2a:b2:1b:3c:cb:06:e6:8a:24:0f:69:99:48:35:48:
02:1f:bf:1d:d3:46:4b:49:cb:71:74:71:08:e1:10:
b0:06:a3:2e:a0:68:ff:e2:ad:df:85:ff:80:ad:6c:
df:9a:d2:f9:28:03:81:be:96:ad:c1:6e:11:58:23:
78:a9:d9:82:82:6e:7b:db:7f:cb:fb:16:f6:11:ec:
37:59:f4:a9:69:f1:16:d1:27:90:eb:7c:c8:34:ca:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:FC:38:B6:C9:0B:D2:B4:E9:95:6F:D0:41:05:97:8A:CD:47:A0
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:21:ee:36:9d:40:63:14:8d:3f:35:5e:8c:97:14:76:e7:02:
f1:60:40:97:7d:05:8a:6a:f1:5e:45:57:db:c7:cd:c2:8c:cf:
fb:58:46:ea:44:b9:05:69:e9:96:a2:6e:49:ca:29:2a:43:62:
00:9a:07:01:11:d4:15:10:db:f2:a6:b9:d6:6f:3c:a8:72:ef:
03:7b:bf:02:41:63:2b:7d:c3:89:94:f4:3f:1a:08:d5:e0:78:
fb:68:6d:35:6c:9e:b7:66:ed:fa:24:c3:ca:78:c7:de:f1:46:
c9:63:51:6a:ce:41:2d:b0:10:e1:2c:98:ee:85:5b:8e:fc:12:
5b:62:6b:c6:58:9c:18:98:5b:d9:70:fe:24:b5:06:52:ac:10:
30:c4:a8:7c:60:d4:71:93:1c:ed:51:11:31:3b:ef:c0:25:58:
b0:59:60:5e:6c:46:d7:ce:81:8e:a9:6f:76:8e:c3:48:9f:4a:
70:1e:c0:a3:6e:0d:a8:9f:42:de:a3:f3:b2:5a:a5:b3:e6:36:
75:07:b3:89:46:f9:6b:4e:a6:d1:91:f3:ec:d4:ac:50:8a:c7:
6e:92:d0:92:6b:68:da:8f:b6:aa:d8:b4:51:88:d4:20:fb:de:
c0:d2:8c:5a:fe:e4:d8:7a:f2:d7:a3:b7:35:7c:41:5c:b3:7e:
de:71:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:24 2026 by rpki-client