Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File: 2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier: NDAqqNzpOjnljfMwQVeYfsJT+/ukqEpkveOHsFW+U8M=
Subject key identifier: 92:57:6E:31:28:D0:C4:8B:E8:08:B7:C8:54:10:41:2C:ED:D4:2E:A6
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer: /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial: 01A0CBC7FB21F3508429E1BAF74104D8AC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 01:01:15 +0000
Manifest this update: Wed 23 Sep 2026 01:01:15 +0000
Manifest next update: Thu 24 Sep 2026 01:01:15 +0000
Files and hashes: 1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: 8Cetc/STZ+aJFW9Iq+pGsgy4AIOeMI/o+JY35q6FmSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:fb:21:f3:50:84:29:e1:ba:f7:41:04:d8:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Validity
Not Before: Sep 23 01:01:15 2026 GMT
Not After : Sep 24 01:01:15 2026 GMT
Subject: CN=92576e3128d0c48be808b7c85410412cedd42ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:a4:6b:ce:be:b7:eb:ad:22:dd:92:b4:fc:
a4:b1:17:56:ff:88:9d:03:bb:1a:19:be:08:0a:13:
e1:d3:32:ca:d0:dc:7c:3c:0c:28:bb:2d:a0:36:56:
51:1b:77:34:d5:5b:18:5d:c5:5a:19:10:81:ed:bb:
2d:85:3e:d3:5c:6b:b1:ba:50:56:9b:e6:72:d9:e5:
de:dc:1e:95:4f:ef:47:30:fa:a9:ca:1c:dd:cf:1b:
6c:a6:73:28:23:ec:3f:d4:4b:28:01:44:18:d9:42:
3f:f9:28:9e:74:fb:a3:6e:6a:5a:af:55:33:b9:11:
f4:2f:ad:90:b0:9b:b0:41:d9:6a:02:9f:20:77:63:
d3:af:e8:d8:a2:27:dc:45:9a:cc:d5:64:1a:cf:91:
06:0d:62:5d:bd:34:26:bd:17:df:9c:81:6f:52:99:
e5:ec:63:1c:95:52:f3:49:05:f2:f2:6c:4f:0a:7b:
aa:06:29:2e:e4:0a:90:5f:a1:79:f7:f5:9f:a7:62:
71:c3:34:f7:a5:c7:bb:60:93:c8:68:0d:86:a3:02:
7b:9d:86:91:0b:27:19:45:67:0d:a1:f6:86:44:9c:
75:b3:26:75:11:ca:18:59:42:d9:96:d7:7e:5f:34:
4b:b5:d8:99:74:2e:aa:b9:2d:56:27:7e:ac:f0:b4:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:57:6E:31:28:D0:C4:8B:E8:08:B7:C8:54:10:41:2C:ED:D4:2E:A6
X509v3 Authority Key Identifier:
keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:c3:d1:57:dc:33:82:8d:ec:31:28:09:69:69:59:16:cb:
4c:bf:03:53:fe:72:4a:76:8f:69:e6:70:32:1d:6b:3b:0d:6b:
31:24:a5:f5:05:bc:60:19:a5:d3:91:6a:e0:fd:e5:ee:b6:e3:
70:e4:8b:d8:99:89:de:46:41:ff:c0:f6:29:19:d4:76:47:74:
4c:b5:57:a9:66:64:27:56:83:6d:d2:75:aa:1f:ef:b4:24:fb:
ea:01:98:9f:90:fb:da:4f:5d:fc:a5:90:6e:5c:3b:e6:73:9b:
85:00:e7:57:9d:d9:9c:79:e4:8e:88:cf:cc:48:fc:cf:5a:7c:
4d:db:14:d2:68:93:b1:7e:1e:2d:39:f9:70:11:c1:c4:25:d1:
d1:f6:57:36:5e:80:0b:67:b2:60:27:cc:b2:ec:aa:b6:e7:dd:
8d:8a:6c:6a:86:0b:7b:9b:3e:7d:38:33:f1:bb:5f:ba:ea:0a:
e7:07:5d:b9:06:91:67:8d:1f:90:b1:3d:04:bf:cb:8d:19:07:
50:4e:60:6d:a7:7d:73:96:f4:2a:5c:5a:16:ff:e4:bc:dc:af:
73:33:91:4e:7f:3f:93:98:e4:7a:e7:d7:1f:15:52:cd:42:cf:
5e:c9:eb:d5:5d:6c:9e:63:0c:88:1a:fc:35:b4:a6:82:52:67:
7b:05:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:39 2026 by rpki-client