Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
File: 2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft (raw, json)
Hash identifier: y0j3LeZ9R/HjK0PgODIxFTpshFVFmzv7sDMnpE3gwiE=
Subject key identifier: 50:23:7C:B8:43:39:F9:7C:29:17:8B:CD:40:05:68:0E:B5:36:10:1A
Authority key identifier: DA:4C:9E:6B:83:85:01:5D:11:72:FB:79:CF:90:A8:13:FB:AF:FB:20
Certificate issuer: /CN=da4c9e6b8385015d1172fb79cf90a813fbaffb20
Certificate serial: 01A0D6151EF18F5EF7AF5D2E903B3C794051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
Manifest number: 9B
Signing time: Fri 25 Sep 2026 01:01:43 +0000
Manifest this update: Fri 25 Sep 2026 01:01:43 +0000
Manifest next update: Sat 26 Sep 2026 01:01:43 +0000
Files and hashes: 1: 2kyea4OFAV0Rcvt5z5CoE_uv-yA.crl (hash: 7YfJ22cjo+Hp3ymP9YdVmzvPoB5YGLDFJPTWAjNKx7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:1e:f1:8f:5e:f7:af:5d:2e:90:3b:3c:79:40:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4c9e6b8385015d1172fb79cf90a813fbaffb20
Validity
Not Before: Sep 25 01:01:43 2026 GMT
Not After : Sep 26 01:01:43 2026 GMT
Subject: CN=50237cb84339f97c29178bcd4005680eb536101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:e5:65:95:3d:73:f3:68:d1:b3:37:29:59:
7d:16:59:45:33:3d:3f:1b:f0:31:e3:12:82:43:b5:
06:88:86:2f:a4:bb:f2:9b:4e:da:50:dc:c4:2d:8b:
1e:23:c3:44:24:07:a1:60:51:fa:c0:77:be:62:0f:
4c:0b:6c:2c:90:cb:37:77:94:d2:63:29:d2:b6:7a:
ab:70:60:b2:51:b1:a2:2c:1b:94:78:73:77:44:11:
27:bf:0f:4f:0a:89:0e:de:c0:25:dd:00:14:0e:cf:
3d:87:1c:79:98:81:25:1f:e2:db:f3:ea:e5:52:12:
94:0b:7a:32:04:86:08:e5:b8:bc:17:dd:67:da:88:
be:3f:4c:47:3d:44:c5:4d:a4:19:f1:9c:cc:1d:30:
56:e7:4a:f7:ab:1d:be:89:1f:4a:92:4b:e7:c6:53:
27:b5:fc:ba:93:db:50:10:03:8c:37:43:37:4e:d5:
6e:c9:62:c5:3d:43:c0:7c:cc:35:8b:17:99:34:96:
47:d5:b4:34:f7:22:22:58:19:ca:4b:db:dc:13:9c:
ec:60:bf:1f:4e:13:01:78:8a:61:57:13:07:e2:7b:
71:02:9c:16:26:f5:4c:08:96:c3:27:3e:29:08:98:
e8:b0:7f:14:bb:1c:4d:12:ab:0d:82:79:32:c9:9c:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:7C:B8:43:39:F9:7C:29:17:8B:CD:40:05:68:0E:B5:36:10:1A
X509v3 Authority Key Identifier:
keyid:DA:4C:9E:6B:83:85:01:5D:11:72:FB:79:CF:90:A8:13:FB:AF:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c4:bf:cb:2a:16:a1:21:52:01:6d:34:a2:8c:5c:65:e9:9c:
21:66:ea:3f:8f:3a:16:f6:67:17:e5:cd:ed:d4:5a:29:e7:46:
ee:63:29:50:48:f8:c6:ba:d2:e9:68:e4:1b:df:59:56:b1:27:
2a:df:ce:bc:be:80:8d:74:af:5b:4f:91:cf:d8:59:ad:d4:cf:
e2:c3:3d:ac:15:80:4e:3d:b3:64:e0:f0:9a:d9:27:eb:df:86:
94:20:8d:ce:79:98:50:a4:16:ca:e0:d0:5d:e7:3c:84:02:61:
74:e6:94:4e:9f:ae:e0:9f:52:f1:48:cd:30:57:ce:f8:57:ae:
d8:58:cc:7b:08:a7:9d:2c:78:21:5c:27:22:0d:30:fc:1b:0f:
26:8e:3e:5a:64:88:8e:5f:e7:54:e4:20:1c:0a:99:ca:b2:e5:
d7:7a:71:ad:fd:71:dd:d3:87:05:84:2c:e6:38:70:5e:c1:ea:
06:ea:ca:85:f6:9a:df:08:3b:15:35:e1:43:4c:ae:3c:0b:db:
81:b2:f5:ec:0c:ea:4b:a7:72:a0:7d:37:96:96:2d:01:87:a1:
b9:d1:2c:a3:db:4c:64:0a:6f:19:50:31:4d:62:b1:b0:73:00:
fd:56:cf:08:a7:b9:06:0d:af:cf:a5:51:9f:1c:bb:ff:f1:c0:
b7:c8:60:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:31:31 2026 by rpki-client