Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File: 2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier: rg73Aw7L+b9Y587pH/ulPkOz68zLfYq5F11A5YvypF4=
Subject key identifier: 87:60:DE:EF:17:8A:37:C8:B8:42:54:47:0C:CC:18:9D:A9:7B:4E:EC
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer: /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial: 01A0C5FBD241955F45645A956825AD27EC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number: 136B
Signing time: Mon 21 Sep 2026 22:00:09 +0000
Manifest this update: Mon 21 Sep 2026 22:00:09 +0000
Manifest next update: Tue 22 Sep 2026 22:00:09 +0000
Files and hashes: 1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: mQFlTxB1p0gaTYpzIeEisKdycFyzjDJ1cuxMX2H8usk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:d2:41:95:5f:45:64:5a:95:68:25:ad:27:ec:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Validity
Not Before: Sep 21 22:00:09 2026 GMT
Not After : Sep 22 22:00:09 2026 GMT
Subject: CN=8760deef178a37c8b84254470ccc189da97b4eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:16:93:98:08:42:d4:d4:3f:b0:13:85:27:
a7:c9:1b:d2:5d:3a:f9:8d:16:53:42:f5:9e:9d:74:
f1:37:44:6d:c9:52:3d:84:dd:38:d9:ef:ca:8d:94:
19:96:f8:c6:86:41:9a:a6:74:b9:13:58:0a:57:a1:
06:38:5b:3f:ef:80:33:e8:7c:98:3a:e5:cf:4b:8c:
0b:51:9a:5d:e6:90:7f:4e:fc:67:3b:0b:13:70:c9:
6f:86:f2:9b:05:6d:2e:6d:d2:25:08:92:f6:37:84:
1f:fa:3b:ad:e6:77:c0:23:8d:23:67:40:35:a3:3c:
6f:47:4b:b1:b0:7c:f1:97:04:53:5f:1d:c7:d7:49:
07:6d:1c:95:8d:ff:9b:0f:13:e7:d6:8e:91:15:01:
a4:d3:ef:ea:e9:ea:0e:83:2e:9e:c8:07:25:f6:0c:
a9:93:a8:46:0c:0e:38:a9:6d:45:0e:ef:f1:95:c5:
fb:5d:7d:87:57:38:6b:3e:16:b9:de:e4:23:85:c2:
11:36:5a:4f:9e:53:e1:dd:27:84:27:a4:6d:d7:fb:
8d:b3:10:cc:ba:fc:ab:c1:d0:5e:b1:34:87:54:a6:
15:68:f3:e7:22:dd:1d:fa:e2:0c:41:40:da:7a:98:
87:ad:d7:1b:c6:c6:64:d3:89:9e:be:b2:c7:d7:9b:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:60:DE:EF:17:8A:37:C8:B8:42:54:47:0C:CC:18:9D:A9:7B:4E:EC
X509v3 Authority Key Identifier:
keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:3a:5a:83:67:38:bd:57:2d:0b:39:0f:b0:d4:8b:ae:25:
71:55:17:22:0c:3e:4c:cb:ee:e6:3c:21:c3:ae:d9:b7:3f:22:
b4:d9:df:61:ed:01:f5:e7:6c:22:95:9d:0f:38:8e:1b:c5:33:
c6:b3:38:6b:78:36:75:e7:2f:18:22:60:aa:7c:b8:6c:be:2d:
dd:f8:f7:2e:73:ff:54:19:0d:be:ee:25:db:c1:f8:36:f0:f4:
66:76:4c:7e:e4:38:99:e4:59:e2:98:2c:df:c0:7e:c2:4a:fa:
4a:ad:04:9a:5f:e4:d0:85:14:85:be:37:3d:ed:61:e7:37:a7:
3f:82:fe:9d:5a:f6:83:08:1c:f1:7a:1a:71:7e:11:2b:c0:2c:
b2:5b:40:94:2c:2b:26:01:43:a1:5e:82:1c:08:22:43:17:16:
60:4f:a8:c9:1f:d8:0a:cc:5f:69:b2:8c:ce:70:1c:55:b5:b2:
57:96:e3:99:8f:0c:5a:c4:d6:d0:35:a8:12:a3:35:ac:46:b4:
76:d1:87:f2:55:38:d9:a6:ae:96:37:cf:ac:59:47:e7:6d:f2:
ec:71:49:a0:84:aa:91:a1:2c:4a:5d:45:c0:27:86:74:ca:bc:
d3:cd:ce:92:6d:d5:41:56:7c:7c:cd:b2:55:e2:b8:88:7d:43:
8c:3f:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:02 2026 by rpki-client