Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: +5QsKY5wAC2x3xiAr0GWs/YfGKaVoszFPB1YKZzRldA=
Subject key identifier: 80:F4:8B:CC:B2:40:95:A7:0D:44:0C:CA:CD:F7:A7:E8:8E:8F:65:30
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 01A1DE39BD65D163C2EE929593D652FB551E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 1AF2
Signing time: Sun 15 Nov 2026 08:01:28 +0000
Manifest this update: Sun 15 Nov 2026 08:01:28 +0000
Manifest next update: Mon 16 Nov 2026 08:01:28 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: Q82/rFYJC8A9tEoDclZt6n5bp+WxYXACQtSRf0q5TjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:bd:65:d1:63:c2:ee:92:95:93:d6:52:fb:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Nov 15 08:01:28 2026 GMT
Not After : Nov 16 08:01:28 2026 GMT
Subject: CN=80f48bccb24095a70d440ccacdf7a7e88e8f6530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:dd:6e:5f:ae:ec:89:77:e1:eb:ee:a8:a0:
d4:ac:a2:07:8e:6e:c1:3d:ce:8e:ba:52:d0:33:8f:
4c:92:9f:43:8d:87:00:de:02:1b:fe:26:e2:1d:a6:
12:f9:74:85:61:b2:be:8a:e6:6c:3b:fe:19:2b:6d:
95:cc:34:b3:3d:89:40:a7:37:83:27:91:1b:78:6c:
5f:9c:c5:1f:75:b4:eb:e3:d4:31:3d:8d:f3:f6:2d:
4a:56:f9:8a:ff:7b:5f:d0:1b:f2:fa:e9:2a:a3:cf:
b9:7a:dc:30:e7:7e:8f:9b:fe:2d:c0:36:f9:cb:32:
6e:36:09:74:2a:72:fe:51:7f:29:98:68:a2:51:8e:
7d:59:63:eb:f7:1f:d9:7f:cd:e7:9a:ca:b1:ad:7b:
7d:00:32:bd:7d:25:c4:6d:1c:e6:3f:e6:31:f5:5d:
73:f3:32:1f:2c:f3:75:ec:96:43:9e:72:ba:f6:f7:
50:14:a5:08:90:c5:a0:0a:f6:93:93:d9:3d:ab:d9:
31:4e:eb:2b:d3:a3:a1:ed:79:60:e4:1e:ec:f8:d9:
d4:a0:3e:71:6c:79:fc:08:64:6f:4e:74:52:de:6e:
cf:09:01:d4:ed:01:f4:4e:46:9b:7b:36:13:96:e6:
35:b2:ee:03:13:e5:40:df:9e:ba:53:9f:50:e3:28:
2c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:8B:CC:B2:40:95:A7:0D:44:0C:CA:CD:F7:A7:E8:8E:8F:65:30
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:9a:aa:3e:c6:76:2a:2c:37:12:7e:7c:50:ca:e4:88:83:b7:
72:a9:80:a2:34:3f:3a:71:ce:0e:79:d8:2b:7c:0b:b7:27:d5:
54:26:58:1e:c1:fe:d9:83:8e:22:5a:2c:cb:c1:5f:16:6a:7b:
67:2a:d6:36:34:c8:c8:b1:5b:c2:26:25:39:29:e3:bf:9c:86:
d2:10:d7:1c:24:17:90:0e:c2:c7:02:97:7a:22:c9:ce:56:fe:
34:2d:1c:82:58:d5:98:66:01:92:ff:0c:6b:1a:a9:7f:6d:37:
80:a7:57:9f:11:76:67:02:53:4a:d2:86:f1:6e:f4:cf:d0:90:
e1:d2:0f:6e:e5:c6:c1:3e:6e:f6:ac:d7:14:22:ac:50:b6:c6:
6f:a5:87:86:6e:2f:9a:2a:81:25:6f:d7:b4:60:dc:fb:b9:54:
a4:d0:e9:4a:f7:bd:85:d1:24:b7:ed:dd:5f:44:d7:1c:ee:02:
7c:42:7e:5f:75:29:ce:a8:98:c1:ff:f3:d5:54:97:0d:8d:f3:
79:f4:ea:56:62:67:f4:22:bf:db:f9:bb:5b:a9:0d:69:05:eb:
dc:1d:58:be:21:a9:7e:32:a9:9a:1d:de:10:18:ef:98:bd:a8:
99:49:3c:2f:63:db:1f:fc:0c:74:54:c3:c9:d4:c3:e6:85:ad:
50:f9:a9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:19:47 2026 by rpki-client