Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: k5zjRk+nkftC6SA7i6k5A/G75SVwEbO4R4cTGSwgP74=
Subject key identifier: 9E:4A:AD:EC:DD:8F:0C:4C:BB:32:25:3B:B6:8C:C8:BB:3F:75:76:79
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 01A1DE39D9E096BCE325BA40AF78E9335417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 07A6
Signing time: Sun 15 Nov 2026 08:01:35 +0000
Manifest this update: Sun 15 Nov 2026 08:01:35 +0000
Manifest next update: Mon 16 Nov 2026 08:01:35 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: yhaSmhiE5iMLybqiV4/bvpKJEiq+UihD+LDL0zOfJ3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:d9:e0:96:bc:e3:25:ba:40:af:78:e9:33:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Nov 15 08:01:35 2026 GMT
Not After : Nov 16 08:01:35 2026 GMT
Subject: CN=9e4aadecdd8f0c4cbb32253bb68cc8bb3f757679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:1c:f3:aa:6c:66:24:e2:25:9f:74:e0:72:
e9:d9:14:c5:3e:a8:ca:5d:6c:bc:c5:6d:de:12:01:
47:31:1d:1a:d0:3e:55:6b:45:e9:e8:17:72:24:e5:
36:62:f5:49:d6:0d:62:8e:ed:14:99:23:be:d0:ba:
85:83:4f:63:9e:ed:4b:da:0a:4e:ea:a6:0d:a6:43:
7f:01:ab:4c:4c:59:fa:35:62:c1:c8:09:c7:89:55:
c5:b8:fb:b5:70:7e:b1:0c:48:a7:65:37:90:4f:af:
55:96:a1:48:8f:25:11:59:e4:b5:b1:e1:b2:a3:97:
6e:ee:5b:ba:2d:a9:47:df:a6:80:be:b2:b5:dc:90:
4c:f5:fc:a3:34:3b:c0:e4:cf:b6:a0:9a:c7:24:a3:
f7:a5:41:1d:73:ab:50:c5:94:26:1e:2c:22:15:7d:
0a:b8:21:9a:13:99:bc:bb:ea:77:66:7c:0e:fc:f0:
06:ba:f8:b4:53:b9:fd:84:5e:12:07:40:81:32:a0:
c9:f1:95:84:65:0f:16:64:97:85:14:c9:44:d0:06:
db:7c:f5:6e:b5:cf:93:0c:c1:e7:6f:ce:ea:67:a6:
e4:02:18:3f:ff:97:60:18:01:66:48:23:b3:78:66:
bd:2c:49:91:1e:be:e0:5d:cf:e4:72:08:f6:db:35:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4A:AD:EC:DD:8F:0C:4C:BB:32:25:3B:B6:8C:C8:BB:3F:75:76:79
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8e:ef:4b:cb:f5:1b:8f:bd:b4:81:98:05:3f:ec:6f:6b:e4:
cd:6d:63:fd:49:8c:2e:fa:e9:78:75:70:f0:5d:5a:2c:11:d9:
16:44:6a:6b:30:69:b5:5f:03:44:fa:f6:7c:67:d0:26:0b:f4:
9c:b3:88:01:4e:01:c9:8f:00:05:a2:06:72:3f:7c:18:25:3a:
26:08:bb:f3:b0:d1:c5:3c:9f:8f:0f:a4:94:7b:dd:b7:64:27:
3f:81:5c:0a:c4:ee:3a:df:8b:6b:ec:e3:21:7e:2e:78:87:04:
39:3b:78:d3:25:56:a4:42:a7:3d:c6:41:54:74:83:06:9f:bd:
95:f2:e6:ac:87:d5:0a:62:bd:2b:a5:99:f3:62:8d:67:bb:5e:
ba:d4:b4:3e:80:c3:f8:2d:b2:d7:be:ee:10:d1:7c:55:f1:96:
ea:90:1b:26:05:de:53:fc:0c:31:38:d1:78:86:28:5f:26:a7:
46:c1:2c:c8:a9:8d:c3:d5:40:e8:fe:b1:70:68:ae:cb:db:d3:
8b:dc:ed:fc:59:25:c2:30:53:7c:7a:4d:89:b2:91:07:9b:0e:
65:91:41:59:0f:ff:13:c4:77:c3:d8:ff:5c:c4:8b:b0:0a:8d:
ed:23:55:b4:27:48:5f:45:7b:03:e7:9c:33:23:27:9c:b4:00:
98:59:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:33:06 2026 by rpki-client