Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: xmJYvKeaj0TaPUv7OrdwSRQCOs6IlOEr4fsZkxBD4S8=
Subject key identifier: 75:2D:EC:9D:64:C3:91:93:2F:CC:E3:08:11:46:A8:F7:CB:FE:70:B8
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 01A0CFA432E15B2C47E09A7B0D8E198D26DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 19:00:39 +0000
Manifest this update: Wed 23 Sep 2026 19:00:39 +0000
Manifest next update: Thu 24 Sep 2026 19:00:39 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: uxxIe4JgGE73xYs6j/UH/k5FU3mKDJ5Wj0BkLEk7H6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:32:e1:5b:2c:47:e0:9a:7b:0d:8e:19:8d:26:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Sep 23 19:00:39 2026 GMT
Not After : Sep 24 19:00:39 2026 GMT
Subject: CN=752dec9d64c391932fcce3081146a8f7cbfe70b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8c:a3:11:6b:19:44:0e:fc:25:c0:e9:ff:c9:
81:ea:ff:5c:ed:d5:4a:48:8e:25:f1:8d:89:62:6f:
1b:73:ce:5b:96:f7:45:c9:bd:5d:f2:2f:af:a6:22:
c0:55:6e:e8:71:15:17:36:6c:82:a0:d4:0b:cb:ac:
2a:71:ec:7b:ff:c4:ef:fa:37:ea:e3:0f:5d:05:4d:
c0:0c:6a:c6:b5:06:9c:b9:ea:58:f6:1d:18:b2:3e:
f2:9d:73:3b:12:bb:16:99:d9:a8:0f:53:40:89:35:
95:a4:a1:95:4b:62:e7:a4:f4:7d:d2:33:47:3d:df:
08:90:cf:c7:ab:55:9e:a2:69:7c:e6:94:3f:46:a7:
6f:c8:fd:ec:b5:aa:7e:b7:b6:cb:57:8a:c7:bf:b0:
4c:10:7f:cc:85:99:f2:5f:e8:d7:02:0b:7d:b4:60:
2d:3d:e8:32:eb:e1:9f:04:1e:f0:ef:5a:1e:a2:69:
55:4e:22:2c:e0:fa:b6:8f:57:da:24:7f:3c:0c:72:
8d:e5:f5:b7:be:a1:0a:30:ab:7d:14:20:f7:5d:17:
5d:a1:38:a1:fc:65:e0:26:83:0c:39:33:83:55:0f:
1d:5b:83:a4:10:55:22:c0:38:88:92:08:0b:b0:1a:
7a:e3:2d:f7:1f:52:aa:89:c8:84:98:d5:7c:10:05:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2D:EC:9D:64:C3:91:93:2F:CC:E3:08:11:46:A8:F7:CB:FE:70:B8
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:30:0c:2b:81:ea:0f:01:6d:3b:82:b2:05:b6:27:62:79:ca:
3c:72:f3:7a:62:b3:a1:c2:3b:59:f8:b2:42:c4:d9:38:37:cd:
a8:3d:04:cc:3f:a6:f2:74:44:26:8c:41:88:ba:0d:0f:20:fd:
14:e1:37:3a:1c:63:2d:da:30:b0:dd:6e:36:4d:e1:99:2d:31:
39:9a:46:ef:56:3c:3e:c1:4f:1f:fa:3d:df:1e:86:dd:82:88:
42:89:9e:ec:41:10:f8:7c:56:5d:f8:8e:c2:75:6a:df:bf:eb:
3d:e5:3b:ad:aa:6d:05:ac:b4:c4:47:34:88:4c:a7:0f:a4:99:
f4:ed:4f:d2:1c:9f:2b:48:04:c0:57:2b:6e:7e:b8:70:58:54:
c1:71:70:d4:87:61:4b:80:be:22:69:0e:7e:4c:a2:8f:18:18:
be:e3:09:36:89:6a:12:aa:9a:bd:bf:56:5a:22:b6:32:d9:d9:
4f:e3:de:6c:96:a1:1f:07:44:cb:34:13:63:96:4b:bc:f8:dd:
75:dd:21:61:c8:2c:58:77:fd:00:23:78:8d:fc:67:17:fa:39:
6b:8d:b6:fe:a7:25:05:b8:33:b1:f9:bc:3d:8e:c8:97:75:3f:
b7:d8:74:71:fb:e8:a5:51:7c:b9:cb:25:84:7c:23:4d:c4:45:
27:79:71:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:28 2026 by rpki-client