Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: jpEgcsPYisfbkbp9wIT/USiWr6ye/5zC6uf06j+5Rd8=
Subject key identifier: 28:3C:5B:C8:87:ED:A6:AA:04:83:D6:01:F3:D4:D1:18:56:01:27:5F
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 01A0D5A6A99C053D3BBDB252C5E86852DFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 1176
Signing time: Thu 24 Sep 2026 23:01:04 +0000
Manifest this update: Thu 24 Sep 2026 23:01:04 +0000
Manifest next update: Fri 25 Sep 2026 23:01:04 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: IRZNzrgUx6NfdWWrG2G1LmQuZ63McG9AEWeeibBH8Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:a9:9c:05:3d:3b:bd:b2:52:c5:e8:68:52:df:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Sep 24 23:01:04 2026 GMT
Not After : Sep 25 23:01:04 2026 GMT
Subject: CN=283c5bc887eda6aa0483d601f3d4d1185601275f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:45:dd:3a:c7:e5:5b:f8:5c:01:86:76:e7:
9c:35:ea:85:1b:9c:b1:ea:36:76:25:be:c7:c9:8a:
d4:f3:34:c4:1b:1b:9d:75:36:9a:05:ff:24:d1:1c:
12:be:9e:22:47:08:21:c9:a9:67:55:68:10:7c:3c:
ab:6c:9e:7e:eb:2d:b3:5c:08:55:d8:32:d6:c5:a8:
3e:d0:b4:04:c3:c2:d6:70:8a:23:ee:06:31:df:fd:
9e:f7:87:5e:cb:c1:3b:f0:de:66:49:84:9f:2b:05:
92:6e:f9:b2:af:10:59:e7:0a:0c:53:5f:9e:28:db:
9b:99:a7:26:44:94:85:a8:8d:ea:df:c2:f0:45:25:
7c:5c:38:6d:35:f4:09:bb:e6:35:34:07:da:9d:a5:
76:cb:bd:64:7c:08:38:d9:8a:ab:71:3d:99:4e:bc:
1e:f4:22:8f:7b:fd:8f:db:a9:ea:1a:3b:fb:6d:01:
94:3b:e3:19:eb:54:18:7c:56:c6:4c:7f:eb:cb:fa:
a6:c7:44:2a:b1:38:ba:ce:b2:a4:95:95:91:83:aa:
4d:ab:42:e6:22:88:b8:8c:19:b6:c7:39:e1:ad:ba:
8f:b6:80:58:c5:1d:42:69:a6:c6:e5:84:45:8a:1a:
da:92:cf:80:9e:84:3a:cf:5d:fc:0e:65:3b:75:ab:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3C:5B:C8:87:ED:A6:AA:04:83:D6:01:F3:D4:D1:18:56:01:27:5F
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8b:ca:e4:8f:8b:e7:85:6c:98:38:14:6c:21:d8:d2:c4:fe:
9f:59:d1:39:ba:28:e6:97:bc:dd:28:b8:e1:c5:2a:d6:89:96:
72:46:0c:5d:f4:84:c2:c3:4e:a1:2d:a0:2d:5c:6f:5a:e7:ad:
ca:db:f8:c6:12:a6:a6:a4:ac:97:25:30:61:9c:62:6e:9e:23:
35:ea:27:cb:58:c2:3e:1c:60:63:d7:7f:c8:c1:6f:1d:0a:b0:
74:7b:d6:4d:47:12:da:f8:21:48:dc:76:38:2e:f9:e8:52:a9:
59:8a:5e:a8:b0:7e:5c:c7:3b:e2:70:70:e6:e1:b1:b0:25:be:
29:52:5d:49:2a:24:ee:ef:a5:cc:06:3e:3e:ce:0a:7c:23:be:
ca:69:1a:ef:29:e2:38:64:33:7c:6a:3d:e0:4b:ca:15:8b:20:
a6:16:bd:d8:6f:73:0d:b7:e0:bd:90:5c:d9:55:f0:9f:a3:50:
a8:5b:93:3e:8f:ac:b8:5e:ff:90:85:00:7f:e3:a5:3a:d2:dc:
84:ae:4a:28:bd:04:92:9e:fe:8e:20:42:46:ae:06:d4:22:05:
83:4f:81:2d:14:9d:83:bc:65:e1:c6:c1:83:8c:52:88:4a:06:
15:f7:a1:1e:ef:99:8a:ff:ae:f5:f8:de:f0:8e:72:b8:0c:98:
86:2f:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:58:48 2026 by rpki-client