Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File: 2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier: bxhG8EhD4vROJGIWfi8CfyzAPVeVwswmvF5gxNj/lRY=
Subject key identifier: 8B:5C:74:6A:3D:44:81:9C:45:25:08:D3:CC:79:A0:19:F3:2B:1E:F2
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer: /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial: 01A1C10AD03C40C4C252AF0B2CB7D4C01801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number: 13ED
Signing time: Mon 09 Nov 2026 16:01:13 +0000
Manifest this update: Mon 09 Nov 2026 16:01:13 +0000
Manifest next update: Tue 10 Nov 2026 16:01:13 +0000
Files and hashes: 1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: ESzOltX2Nnl63niEfobGsnPBdP+fi3Rr5xyUzR5Q5XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:d0:3c:40:c4:c2:52:af:0b:2c:b7:d4:c0:18:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Validity
Not Before: Nov 9 16:01:13 2026 GMT
Not After : Nov 10 16:01:13 2026 GMT
Subject: CN=8b5c746a3d44819c452508d3cc79a019f32b1ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:f1:40:e3:fa:cc:eb:8a:65:e7:69:86:c4:
6d:5d:51:8b:b6:32:78:4b:d6:c7:03:b4:90:30:82:
51:c0:c1:b8:fa:6d:fb:41:4a:b6:94:8d:5b:f0:f9:
b0:2d:09:91:f4:d3:36:63:15:9b:5e:75:3b:2b:9a:
37:96:5f:c4:2f:18:90:57:0e:14:26:3a:9e:af:6f:
5d:c2:8c:82:30:17:8d:f7:86:d7:36:df:ed:ca:7c:
51:62:15:49:6c:94:84:9f:21:52:e0:e3:ab:c9:f4:
eb:21:90:50:ee:c3:95:f6:fc:58:0f:a7:64:0b:af:
07:33:fd:9f:95:d0:be:02:bd:5a:43:24:85:9c:40:
56:da:f2:95:43:87:58:4c:c5:14:05:bd:25:d2:00:
6c:80:eb:26:bf:1a:08:ae:ad:78:c8:82:85:fa:5a:
4b:dd:40:84:8d:18:dc:6b:6e:f2:81:93:42:98:46:
70:62:69:53:ec:61:04:25:52:d9:ce:82:72:1f:8b:
8f:2e:e3:70:88:03:39:d4:c6:89:53:10:f0:d7:55:
46:3a:37:ce:77:f7:37:fa:5a:18:a2:58:55:d9:dd:
93:dd:2d:2f:d3:0f:12:53:7a:c2:30:83:88:bc:c1:
ff:32:e5:dd:6d:97:5e:7c:c2:d9:e8:b5:b2:d9:50:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:74:6A:3D:44:81:9C:45:25:08:D3:CC:79:A0:19:F3:2B:1E:F2
X509v3 Authority Key Identifier:
keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:98:63:d9:96:5b:d3:bf:e4:aa:0f:19:07:72:18:83:f1:c8:
de:37:13:05:67:a9:82:90:ba:d2:9a:c2:f4:60:7f:87:3e:8a:
62:86:b8:2a:60:49:63:2f:16:d2:df:0f:69:81:49:90:57:82:
fb:2c:0f:ff:23:d5:f4:cc:42:ce:d1:cd:24:77:ff:49:d1:57:
16:34:eb:6c:ec:33:d1:2f:31:b1:d2:50:30:72:2d:a9:f5:bb:
51:65:99:a3:75:3e:cd:c9:e1:5c:47:1e:60:d4:d2:25:63:9a:
1c:c9:c3:a0:ca:c2:17:da:03:b0:ac:d5:3e:c7:42:0c:0c:cf:
ef:d6:8f:8d:8c:e1:58:7d:98:06:14:4d:1f:a5:9c:2b:43:e7:
4a:fe:d4:bf:2a:39:68:8e:80:14:2a:6b:2c:98:af:81:46:21:
67:70:5d:16:f6:57:1d:27:1b:a8:56:76:bb:79:22:39:fb:cb:
37:16:63:8c:68:3c:07:30:48:9b:7e:fb:3a:82:94:39:4f:ce:
c7:f9:ac:54:ca:c9:21:0e:be:a0:bb:45:94:94:33:6c:c0:8b:
41:fc:d7:0a:62:da:b7:0a:96:1c:3b:10:13:d9:af:46:2c:a6:
3b:9f:5e:12:3f:4e:cb:ad:17:b0:b1:a6:2a:40:26:91:8d:c8:
60:a9:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:42:31 2026 by rpki-client