Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
File: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft (raw, json)
Hash identifier: W1NSrs2EJhJ9gfVfrXk1ZhV5dljPO5GsMH7vJ7Db/C0=
Subject key identifier: 02:75:C6:20:18:88:C6:01:5A:FA:63:8F:E9:E9:67:B2:BE:FB:0E:87
Authority key identifier: D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
Certificate issuer: /CN=d9a23485fed8c850745232e3dc51ccead47254a4
Certificate serial: 019FAA19D7E8DB538FDB19961C4BAFFC35A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
Manifest number: 0DE1
Signing time: Tue 28 Jul 2026 19:00:48 +0000
Manifest this update: Tue 28 Jul 2026 19:00:48 +0000
Manifest next update: Wed 29 Jul 2026 19:00:48 +0000
Files and hashes: 1: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl (hash: 3i/QqFAzodfHNQ6Y7m5JMJjYAglZmt3rJva/Pz0/eiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:d7:e8:db:53:8f:db:19:96:1c:4b:af:fc:35:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a23485fed8c850745232e3dc51ccead47254a4
Validity
Not Before: Jul 28 19:00:48 2026 GMT
Not After : Jul 29 19:00:48 2026 GMT
Subject: CN=0275c6201888c6015afa638fe9e967b2befb0e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:22:04:f9:cf:f2:9b:b9:5f:2f:78:cf:bf:
cd:ec:14:9f:1e:51:84:64:85:57:11:0b:5b:c3:47:
75:32:ef:51:17:d0:f9:72:32:11:8d:7b:b1:eb:10:
18:0a:2e:e7:5f:2d:f6:9c:8e:87:cf:b9:46:62:5a:
d2:81:dc:fe:65:b0:a9:c0:77:6d:12:58:36:65:e1:
c5:4f:f1:c1:1a:e6:9c:4e:40:5f:08:84:8b:13:6d:
fc:fd:36:29:1e:4a:52:a9:a8:cb:f4:76:f0:ec:24:
70:9d:bd:12:3b:e8:76:f9:68:ba:48:93:01:16:e1:
28:ca:06:1c:03:06:70:0f:bf:e9:51:18:32:7b:dc:
d2:8c:fb:f8:c5:49:b7:f1:38:3d:96:88:22:f8:d0:
d6:00:11:d1:62:07:26:67:55:aa:d3:3e:e1:67:4c:
49:65:a0:4b:ec:23:22:39:d1:bb:62:9b:a5:87:9d:
3f:0e:08:b6:13:f4:a3:7c:c5:ce:24:6e:77:c9:da:
5a:50:06:d1:21:c1:4a:c9:c7:63:bf:8a:9a:59:5c:
00:84:ca:8a:18:0a:bf:6f:29:00:6d:6e:8f:d8:83:
53:86:28:1e:38:a4:ca:32:51:59:2b:fb:97:d4:9d:
60:b2:5b:ed:95:05:2e:ed:e8:a3:79:bb:1c:2b:ab:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:75:C6:20:18:88:C6:01:5A:FA:63:8F:E9:E9:67:B2:BE:FB:0E:87
X509v3 Authority Key Identifier:
keyid:D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:62:2b:ce:c8:e6:95:9a:ee:ed:e3:62:f9:75:78:26:68:9a:
f7:49:d5:94:b3:36:23:9c:4a:8e:34:65:a2:d4:24:d4:79:1b:
6f:6a:48:e4:74:c5:dc:1a:4a:0e:aa:01:98:c7:f5:34:77:32:
74:80:96:3e:0b:cf:f3:b1:fb:7c:4b:19:39:01:09:cd:d9:d9:
9b:bf:3b:67:a9:e7:54:30:55:2b:36:d8:5b:37:28:61:f3:89:
59:43:c1:ac:e8:6f:2e:6b:51:05:4d:4e:0f:06:8e:e2:9f:5c:
66:dc:6a:a5:57:07:9a:76:70:37:48:78:4d:c3:56:97:c1:15:
47:8f:16:1b:b0:77:f6:3a:7e:70:42:27:96:08:fc:0d:d7:12:
25:b8:9f:d7:6e:ee:92:50:f2:ce:40:4b:ef:f3:79:a7:22:12:
3e:24:fe:d3:1c:50:78:68:56:96:bb:dd:db:10:f8:c4:c7:e5:
d4:24:3d:1a:5f:9a:6e:1c:82:9a:07:9e:8f:f2:3e:2b:ac:87:
21:c6:a0:9d:35:be:5d:53:e3:de:5e:33:d6:52:81:3b:d4:d0:
bb:84:98:7e:2a:51:b7:20:03:8c:36:bb:4e:ef:a9:69:9b:a0:
7a:76:d5:da:e2:38:02:e3:8a:d0:b1:e5:ad:92:b2:b6:51:b3:
7f:40:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:19 2026 by rpki-client