Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
File: 2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft (raw, json)
Hash identifier: lnAntcBior7aaZ7/Bsen5FJYOQIdRxKsDv+KGk2/OM8=
Subject key identifier: 85:AA:61:BE:BE:9B:CF:F9:05:21:56:A0:A9:35:B5:E1:09:B2:E6:AE
Authority key identifier: DB:21:1B:E3:75:55:59:CA:10:25:20:C1:36:70:D0:85:80:D7:03:34
Certificate issuer: /CN=db211be3755559ca102520c13670d08580d70334
Certificate serial: 01A0CC6C45AF6C555D32C7763518E9868637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
Manifest number: 0356
Signing time: Wed 23 Sep 2026 04:00:42 +0000
Manifest this update: Wed 23 Sep 2026 04:00:42 +0000
Manifest next update: Thu 24 Sep 2026 04:00:42 +0000
Files and hashes: 1: 2yEb43VVWcoQJSDBNnDQhYDXAzQ.crl (hash: 9kQ5FU6GaP6EBdFY72dCe5s4En9TC+6JgOg7kTTz29U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:45:af:6c:55:5d:32:c7:76:35:18:e9:86:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db211be3755559ca102520c13670d08580d70334
Validity
Not Before: Sep 23 04:00:42 2026 GMT
Not After : Sep 24 04:00:42 2026 GMT
Subject: CN=85aa61bebe9bcff9052156a0a935b5e109b2e6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:0c:6f:bf:18:69:3a:a0:69:4a:f0:9e:21:
d2:cd:04:0b:3c:2d:3f:1e:4c:78:eb:9c:ce:87:04:
98:bb:8a:6a:99:9f:01:b3:07:0a:d0:49:0a:6c:70:
8f:7d:b8:d6:4c:0c:3b:e0:13:16:49:3d:b8:29:bc:
2d:6a:db:31:a7:5c:2d:b4:d4:8d:76:71:8c:f1:bb:
0e:7c:aa:9a:19:20:97:b4:94:57:e7:3a:2d:6b:77:
42:62:7d:58:90:38:5f:39:1e:0b:40:d1:53:c6:85:
ab:05:89:a8:d9:00:3f:a1:dd:f8:0b:bd:04:0c:52:
d1:33:9e:ff:9b:85:3b:7e:f1:79:5f:0c:b7:c7:51:
8b:db:21:bc:ad:aa:14:48:61:52:c8:00:f0:3f:63:
85:4c:aa:30:94:cb:58:a9:67:ee:08:56:22:a5:cf:
ca:2e:70:3a:81:45:dc:4d:b6:db:ce:6f:4c:2f:16:
39:59:b9:07:5d:0b:fe:59:52:91:03:64:18:b3:ee:
e2:6d:c1:30:11:1b:65:14:40:2c:c1:ea:d2:0d:96:
40:c8:fc:a0:30:a8:7f:0f:a1:f4:8b:ad:39:88:0a:
f7:4a:e1:41:14:58:54:1a:bb:06:41:33:f0:99:71:
69:87:a2:dd:c5:cd:64:38:1f:e4:97:1e:4a:2b:52:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:61:BE:BE:9B:CF:F9:05:21:56:A0:A9:35:B5:E1:09:B2:E6:AE
X509v3 Authority Key Identifier:
keyid:DB:21:1B:E3:75:55:59:CA:10:25:20:C1:36:70:D0:85:80:D7:03:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yEb43VVWcoQJSDBNnDQhYDXAzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f17c9b-5767-4edd-907c-87a1941f1be3/1/2yEb43VVWcoQJSDBNnDQhYDXAzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:60:02:20:77:a5:54:8b:77:b6:95:7f:35:8e:ae:21:93:b6:
ea:34:2e:a6:29:8b:53:f5:63:ee:df:4a:35:13:7a:4e:fb:ee:
7f:b9:ae:01:8c:77:a8:94:b8:4f:4c:10:a4:40:d4:97:47:ad:
bf:b4:5e:d3:68:27:2c:80:49:64:54:e2:80:92:c8:16:32:9c:
41:dd:82:d0:6c:38:da:40:e2:64:9d:37:98:41:fa:35:a6:27:
7b:99:27:72:c9:5e:6e:aa:12:02:4b:25:6f:9b:9b:b7:71:d8:
49:cc:62:38:3a:8d:ad:f8:91:b8:64:5a:67:d4:3a:eb:ec:f0:
06:0f:e9:8e:28:d8:1f:f7:10:0d:87:7e:41:9e:04:9d:ba:6b:
77:8a:e3:7d:c7:ea:2d:34:7b:90:d8:93:e0:2d:1c:b8:8e:5e:
ff:88:8f:d3:a8:6a:93:e1:ba:21:d2:35:62:8a:ad:68:64:46:
93:13:9e:dd:ce:8f:61:aa:a5:b4:cb:be:f2:7c:15:c0:4b:e6:
28:df:56:56:37:f8:50:3e:c8:43:6b:6d:0f:8f:2c:82:cb:39:
24:e8:87:2e:91:38:26:46:b4:ea:34:26:40:ea:2a:83:d5:12:
93:76:28:0d:84:05:53:12:a9:f1:ef:4a:47:47:21:b2:6c:ae:
7f:5b:62:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:18:07 2026 by rpki-client