Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: ggjJTipMXC0WoRXO2iYSK0eDz1NYBUpyVFMWfoKULvY=
Subject key identifier: B1:3F:D7:C4:E5:DD:E6:46:58:3E:D8:90:94:71:66:7B:D3:FE:72:12
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 01A0C77CCF03203B44EA05CAE9CF57B1B9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 07CC
Signing time: Tue 22 Sep 2026 05:00:40 +0000
Manifest this update: Tue 22 Sep 2026 05:00:40 +0000
Manifest next update: Wed 23 Sep 2026 05:00:40 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: 4kY8oNGkRUhk1lj51pHaSD/3VgoyGcZ7gMoPpuD9lcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:cf:03:20:3b:44:ea:05:ca:e9:cf:57:b1:b9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Sep 22 05:00:40 2026 GMT
Not After : Sep 23 05:00:40 2026 GMT
Subject: CN=b13fd7c4e5dde646583ed8909471667bd3fe7212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:3c:a5:8d:12:f0:f3:87:0f:06:63:a2:19:
2f:d4:26:01:c9:81:3f:08:b7:3f:89:d2:e4:7d:11:
65:77:e9:b3:f9:14:de:e3:c2:b3:cb:97:31:ea:a4:
4e:17:03:04:d6:d8:fd:6f:07:b9:22:cd:32:3b:e6:
83:70:5e:22:82:e2:1b:55:60:af:8b:f5:7d:94:97:
45:ae:f1:9d:d1:b9:70:05:a5:79:1a:45:ef:f5:2c:
d7:6e:18:93:4d:dd:31:d9:c6:69:d6:e4:d1:75:8b:
cd:f5:9b:d8:b0:f6:f1:a8:75:49:01:a2:6c:e4:48:
26:cf:bd:7d:2b:1f:34:d7:12:51:2b:f3:19:99:fa:
2e:75:ed:7c:d3:b1:97:f0:b8:65:67:76:a2:f6:76:
00:57:b5:46:f3:12:5d:f1:80:9a:ae:17:d5:3c:af:
af:55:f0:02:4a:6c:72:d5:58:ad:09:e6:97:ce:92:
99:24:13:38:13:f4:91:ee:3f:26:23:96:51:8c:c5:
88:ca:10:34:45:66:92:91:77:a5:e0:bf:7b:08:35:
13:bd:cc:dd:7f:cc:39:21:ae:26:5e:6b:46:ab:58:
26:38:60:33:c2:38:f3:bf:71:2b:d0:43:79:3e:52:
1a:c9:c0:b1:be:79:7d:e4:41:c7:c9:be:04:75:f2:
9a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:D7:C4:E5:DD:E6:46:58:3E:D8:90:94:71:66:7B:D3:FE:72:12
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:51:87:91:fa:9b:e3:fd:49:d3:6a:ae:10:e5:3a:09:ae:f4:
c2:d7:e8:de:75:4d:8b:0f:e6:30:71:32:24:4a:aa:ee:60:85:
ce:b0:3d:94:84:71:fd:42:5a:90:6d:5c:0a:9f:c0:e4:bf:df:
38:11:c1:4f:32:a5:2c:41:fd:e0:9d:b4:62:aa:db:45:9d:0a:
f3:d1:bc:7b:28:0e:61:30:a1:ed:0d:5a:70:d7:66:7e:7a:5e:
2f:31:57:29:fd:9e:cf:dd:79:f2:cd:ed:6c:14:a4:66:5b:e9:
23:60:ed:26:9a:2d:88:8e:a2:b7:bb:11:16:90:1a:1f:1b:ce:
6b:79:8e:d3:92:04:86:d7:5a:c0:26:26:a4:86:13:fc:8c:96:
b8:a3:07:15:18:35:82:47:74:72:cc:43:ba:60:e1:ce:fc:11:
28:dc:d0:ab:d4:61:8a:0e:cd:5e:2f:32:c5:23:b1:1d:3e:33:
a8:0b:22:e2:f0:f7:ff:cb:fd:21:f0:af:c1:1a:61:f5:79:ed:
a9:5a:cc:ce:84:80:e0:59:74:85:09:51:b9:6e:b1:05:03:97:
38:0c:ba:48:95:38:a4:2d:6a:4c:48:46:ea:37:ab:cb:ba:72:
09:56:ec:02:be:e4:d8:22:34:b3:ea:17:44:b2:a5:73:e6:bc:
89:b0:84:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:40:44 2026 by rpki-client