Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
File: 2lTIIO5UFUMsaLATYZJ1_0xubqU.mft (raw, json)
Hash identifier: zBqjhTmfteoJnO8x9PfE5Wcxs+oJTebgfoSYJr0h9dg=
Subject key identifier: 79:7B:80:34:2A:7E:B0:DE:00:89:9B:FD:23:BF:C2:B4:C5:A4:B6:AB
Authority key identifier: DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
Certificate issuer: /CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Certificate serial: 01A0C9D935C2D51519E0550F8574FD45BA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
Manifest number: 0AEC
Signing time: Tue 22 Sep 2026 16:00:50 +0000
Manifest this update: Tue 22 Sep 2026 16:00:50 +0000
Manifest next update: Wed 23 Sep 2026 16:00:50 +0000
Files and hashes: 1: 2lTIIO5UFUMsaLATYZJ1_0xubqU.crl (hash: iR2/UsYLigpnopBTadOtpnUk96FEBXSILyCscOdvR3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:35:c2:d5:15:19:e0:55:0f:85:74:fd:45:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Validity
Not Before: Sep 22 16:00:50 2026 GMT
Not After : Sep 23 16:00:50 2026 GMT
Subject: CN=797b80342a7eb0de00899bfd23bfc2b4c5a4b6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9d:a1:bf:6e:a3:f7:95:0a:f6:a3:bc:91:8d:
92:cf:36:f6:1f:70:d2:1b:74:85:d7:cb:c5:42:ae:
a7:2e:6a:5b:36:e9:3a:45:ca:e1:98:ad:fd:82:ad:
f2:1d:b2:69:75:e8:c0:e8:2a:1d:e5:91:a7:dc:3a:
76:32:52:9f:12:69:b9:bd:4c:2a:be:44:1b:3d:94:
32:a4:81:02:7d:52:d2:a6:3c:a6:67:d4:86:d9:1c:
a7:7f:fa:31:50:2c:ed:55:f5:a9:25:d7:52:8d:23:
29:48:04:ff:c5:af:86:b3:2b:10:dd:e7:b9:18:c8:
b9:1c:a2:a9:30:4b:2e:ee:8c:c6:f8:b8:1a:e9:36:
19:aa:6c:b2:b8:4a:b6:69:2c:0e:44:78:fc:c0:7e:
bd:4f:98:6e:ae:68:84:5d:ea:d4:6d:ed:fd:d3:2c:
df:ed:3f:7f:ad:f5:1e:66:d5:11:1b:5c:c2:37:32:
5a:59:1e:2f:da:b8:a6:11:d5:20:89:77:be:05:6e:
e1:0e:c3:54:2a:40:39:bb:7c:f5:c8:1b:5c:45:ff:
9a:6f:d8:23:7c:06:33:f2:86:45:3c:c4:37:65:65:
9b:39:b4:26:e8:b0:19:51:e9:f6:55:c0:7e:d1:f9:
80:73:88:f4:e8:fc:10:b0:7b:29:55:ea:89:48:81:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:80:34:2A:7E:B0:DE:00:89:9B:FD:23:BF:C2:B4:C5:A4:B6:AB
X509v3 Authority Key Identifier:
keyid:DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b6:05:80:01:48:e5:76:02:40:a7:00:19:5c:26:19:59:b6:
97:0c:f9:1b:bf:8c:b5:de:39:b8:06:b5:8c:0e:27:cd:04:9e:
8e:d6:a5:a5:8a:97:a4:47:7b:4e:fc:20:6c:2c:ae:90:36:0b:
d3:62:82:09:b1:f6:e6:68:14:18:52:e2:46:fd:c0:d6:3e:a4:
14:64:63:19:51:9f:b0:03:cd:c2:0a:d3:fd:f7:0a:11:ce:cd:
1d:2a:ce:07:c1:11:c9:66:3e:10:4d:a5:02:cc:c3:8b:5c:6f:
e2:86:6a:70:c7:81:ff:d7:18:d3:4a:ff:09:67:89:fc:e7:1a:
22:62:8f:d6:1f:dc:2b:88:28:20:61:55:d0:84:8d:11:e1:cb:
69:bd:b5:0a:34:3b:c0:c3:cd:84:63:ae:97:b9:71:5f:ac:28:
43:ce:c5:5b:b1:b7:b7:f0:af:9f:e0:da:2f:5d:c3:08:4a:be:
ab:4c:eb:ac:c2:4f:95:f0:90:b7:74:5a:2e:44:b5:c1:9f:a8:
04:8d:84:12:ea:0d:45:48:c0:34:ea:0c:64:f9:44:28:d8:59:
6f:52:04:a1:e2:97:98:7b:17:26:52:5c:a5:2c:e8:a9:4d:66:
86:bc:3d:93:ac:66:f2:87:56:fa:31:c4:d9:df:80:01:6f:a0:
02:3e:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:39:25 2026 by rpki-client