Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: apkkJrisheiLLl31XlKuTlXlfkH7/PvuUX9w5IzEpSo=
Subject key identifier: C0:4A:EB:11:08:36:31:61:B6:DC:BA:BD:D5:A2:FF:5F:CC:CC:E0:B2
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 01A0DC169870557F700EF5C2E9D9BD34FAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 123B
Signing time: Sat 26 Sep 2026 05:01:03 +0000
Manifest this update: Sat 26 Sep 2026 05:01:03 +0000
Manifest next update: Sun 27 Sep 2026 05:01:03 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: N6XtJdaGWPNXyfNC1SgIAAH6l//I+b8ZLFzhSZt4CfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:98:70:55:7f:70:0e:f5:c2:e9:d9:bd:34:fa:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Sep 26 05:01:03 2026 GMT
Not After : Sep 27 05:01:03 2026 GMT
Subject: CN=c04aeb1108363161b6dcbabdd5a2ff5fcccce0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:ee:0a:4e:c6:d5:fd:a6:72:f7:2c:d8:4f:
ab:b9:d3:83:54:0e:de:44:7e:bc:7a:5a:e0:9d:c0:
4d:ea:29:12:13:fb:fa:27:51:31:0f:5e:0d:25:28:
c8:c7:d3:0c:46:64:65:30:d4:e6:cc:ea:b8:b8:a3:
f4:49:e5:e3:14:3b:68:d3:26:ca:53:ab:f6:ef:a8:
97:aa:72:67:3e:76:4c:1b:1b:20:28:bc:85:d0:db:
47:03:d2:cd:3b:3e:55:96:96:d3:42:14:b6:8a:13:
bc:6f:8d:74:e4:c1:94:3a:8f:c6:76:f6:ca:4f:51:
84:a2:33:3c:81:84:80:1e:69:11:9d:5f:8d:6e:c0:
fc:70:2e:01:ac:82:b0:0f:53:a4:57:76:7d:9e:9a:
60:dd:fb:cb:d9:02:b1:36:02:c1:f2:63:e1:3e:8d:
7e:8e:e5:ce:2d:1b:df:d3:6e:80:b4:17:5a:a5:4f:
c0:3b:6b:ac:2c:71:8c:12:2e:5b:f2:17:b7:63:25:
da:5f:f5:c9:7b:7a:e0:03:e2:27:c0:cd:e8:f4:2c:
c7:ec:98:6c:04:1e:c7:ca:8a:3d:15:ac:c6:b3:47:
3b:e7:97:a1:43:62:d7:b5:40:26:7b:44:10:e4:3b:
71:5b:71:0a:56:9b:ec:f0:cb:01:42:7e:a5:4a:17:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:EB:11:08:36:31:61:B6:DC:BA:BD:D5:A2:FF:5F:CC:CC:E0:B2
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:32:31:a6:8d:de:58:d7:b5:b6:d1:5c:89:03:33:03:a9:bb:
3d:16:f9:30:5e:0d:37:73:5b:cb:64:44:7a:3e:2c:48:ac:2e:
d5:ad:9f:9a:83:c4:c4:9a:23:68:b1:90:ee:c9:21:e8:b3:42:
bb:09:66:0f:a5:11:4c:ff:5a:12:ff:74:37:58:2d:fa:d6:53:
2e:fc:52:6c:d7:a7:c1:37:9f:9c:05:57:ae:e2:70:4f:43:22:
91:ed:6c:fc:85:3a:06:4d:e7:64:be:ee:e9:f8:f5:c9:15:a1:
fd:6f:6e:70:c3:6f:30:09:af:5e:a8:29:bf:33:98:42:1a:12:
88:34:b5:f3:e8:da:0a:a3:ea:36:01:c5:81:bb:cc:62:b6:42:
c4:c9:fb:db:d8:61:1d:a5:af:a4:6e:c2:ca:2c:be:95:0c:46:
d4:51:98:11:4e:95:ed:7a:63:c7:96:b5:ec:43:8e:b3:ae:5b:
88:2a:45:d1:14:a1:27:ed:70:e3:42:90:1f:a9:b9:09:fa:0e:
2e:0e:78:05:b5:7a:55:51:4a:fd:a5:1e:c5:83:bd:ef:55:5e:
0b:5f:c7:c9:4d:2c:9b:34:46:33:ea:84:e0:2b:38:ef:75:c1:
91:1b:55:11:27:47:85:07:20:15:8d:3c:f1:eb:42:05:48:94:
6b:47:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:18:48 2026 by rpki-client