Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
File: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft (raw, json)
Hash identifier: fYIbVre7Oyd/Kr+ba6aRlyflSNBD7900safhHHwpj34=
Subject key identifier: F7:E5:83:2C:58:11:6E:A0:92:9E:FB:B7:42:1D:94:11:45:4A:08:95
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 01A0DBE0317A031363B31B86F167E9CD1CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
Manifest number: 1A89
Signing time: Sat 26 Sep 2026 04:01:38 +0000
Manifest this update: Sat 26 Sep 2026 04:01:38 +0000
Manifest next update: Sun 27 Sep 2026 04:01:38 +0000
Files and hashes: 1: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl (hash: gpOGxo+DRzvtIuwu2j9cHP1eVdSBtcSIGoUqclJKbO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:31:7a:03:13:63:b3:1b:86:f1:67:e9:cd:1c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Sep 26 04:01:38 2026 GMT
Not After : Sep 27 04:01:38 2026 GMT
Subject: CN=f7e5832c58116ea0929efbb7421d9411454a0895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:25:74:52:cc:ac:27:d5:d6:4f:87:b0:84:
1a:4d:4d:1e:7d:67:d8:42:e9:9e:e2:de:61:13:84:
f1:12:17:18:bc:ca:db:94:5d:b7:c2:48:c9:4f:ce:
d5:40:ab:cd:8a:f6:67:82:31:fe:af:17:c4:fc:ce:
22:a4:9e:76:fe:fe:c0:f3:97:5b:02:cc:32:f1:80:
cd:9f:b0:57:7f:23:27:1e:48:5c:62:bf:b9:d8:21:
05:46:c8:35:49:b7:53:a2:b4:a9:ac:4a:34:df:82:
c3:0e:ae:b3:f9:1b:44:98:e9:91:0a:57:72:b6:2e:
96:27:ad:46:ab:68:2b:1c:fa:ee:59:c7:61:2c:3e:
c9:7d:70:d5:db:ba:98:81:00:d5:88:ec:6b:99:29:
bd:94:9e:ef:30:f2:7c:fe:4d:32:8c:b7:2f:43:a1:
32:6a:9b:2f:a4:14:fb:41:c4:9d:7a:5e:88:d8:20:
b9:e3:45:6e:a9:90:d0:d4:01:02:d0:a3:b3:f4:01:
9e:69:46:df:83:03:0c:a6:c1:e9:bf:b3:e2:b1:e7:
26:e1:99:7b:ad:b6:41:bb:5d:fa:15:98:cd:42:3e:
19:c3:5c:1b:15:fb:8c:8b:f3:9a:21:5a:13:59:50:
8c:b7:eb:38:a4:0c:4b:12:35:79:94:0a:2b:50:64:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:83:2C:58:11:6E:A0:92:9E:FB:B7:42:1D:94:11:45:4A:08:95
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:37:17:46:ce:9f:ac:e6:fb:ad:7d:22:b0:81:01:e3:66:
42:4f:af:47:77:23:46:43:a5:0b:3c:bf:1f:2c:e3:43:cd:da:
a1:5e:e1:f3:13:92:87:5b:33:c0:d6:e1:f2:32:a8:a3:d8:6d:
16:b1:33:ce:31:db:54:62:de:12:85:29:d5:84:a9:b9:43:b2:
a0:c4:99:62:e0:4c:fe:ea:a1:bd:e5:e1:40:0a:7c:1c:4e:82:
01:f0:0c:c0:50:4f:fe:81:95:b1:ef:88:bb:0b:1c:f5:e4:3f:
d4:9c:cc:ec:73:55:14:30:7b:37:e3:d3:6b:00:85:b2:7d:de:
bb:4a:06:f7:00:41:3a:2e:c2:33:44:7f:05:0e:19:9c:74:f4:
98:5a:0c:f0:a8:f9:0d:44:ae:58:63:98:10:e2:c0:ad:09:9d:
58:6b:3d:a7:a5:b6:8a:5d:01:33:07:8d:18:4e:60:1c:b0:5b:
bb:6e:cf:ca:28:24:d4:f6:8c:0d:4a:26:ee:79:27:ad:c9:6e:
e7:77:b6:86:af:c8:f7:45:2e:e8:3c:3e:66:3f:64:f0:64:8d:
e8:fb:1e:56:6e:df:98:b1:ef:ac:ce:df:87:e0:3c:85:f6:8e:
cb:b6:d5:d5:eb:b0:2a:18:ce:e3:68:6d:44:57:f4:b1:b1:7a:
fd:7d:ee:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:15:52 2026 by rpki-client