Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: PJnXwLtL2HflCAW/FYrK+yokBwgVQv55Ianug5zptS8=
Subject key identifier: 86:D2:09:7D:A1:EF:77:A4:D0:22:85:97:DF:26:E9:84:10:84:B3:50
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 01A0C4447D9BD0228BD7B8C47A0C1FA39AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 0714
Signing time: Mon 21 Sep 2026 14:00:17 +0000
Manifest this update: Mon 21 Sep 2026 14:00:17 +0000
Manifest next update: Tue 22 Sep 2026 14:00:17 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: HnSeEHojJiygWDiFp4j1d55FqIrvoRO6A/v8mufI1SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:7d:9b:d0:22:8b:d7:b8:c4:7a:0c:1f:a3:9a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Sep 21 14:00:17 2026 GMT
Not After : Sep 22 14:00:17 2026 GMT
Subject: CN=86d2097da1ef77a4d0228597df26e9841084b350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:b9:0b:e8:88:40:64:f8:54:af:7d:0c:2b:
53:58:16:da:be:d6:d5:c4:59:51:d7:c6:f6:dd:0a:
2f:95:5c:94:30:a2:7d:d9:77:34:17:23:5a:25:ae:
f7:b1:e1:ee:b6:50:db:af:38:a3:29:b2:c2:d4:67:
98:81:1d:57:3f:0a:e6:eb:a7:5e:fb:eb:0e:55:12:
82:f6:a3:65:e3:08:54:6c:90:8c:40:fb:df:0c:14:
a5:c7:79:46:8b:1a:38:7e:5e:12:1e:82:84:bb:24:
7a:b3:bf:c7:ee:77:98:11:1b:1e:71:48:5a:78:84:
42:bf:60:8e:5a:d8:28:a6:c7:f8:68:3f:19:ba:ce:
66:85:fb:6f:fe:e6:f5:24:ac:bc:eb:12:b4:dc:60:
61:bd:32:a7:87:36:c0:bb:ff:82:f9:eb:c4:18:14:
01:c3:89:e3:30:b3:83:2d:85:11:d0:d6:7c:f2:dc:
3a:79:87:59:b5:d0:ef:3c:3c:8b:d6:ff:3f:72:bb:
8b:56:2e:75:61:75:40:95:b7:f8:2a:5f:99:1b:31:
8d:87:32:af:e0:0d:0c:b1:a3:78:bb:ef:e9:19:71:
aa:a6:c1:ab:12:37:36:78:cd:35:ef:60:4c:10:f2:
22:94:e4:a5:1f:70:6d:cb:ad:94:26:aa:fb:c4:e5:
26:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D2:09:7D:A1:EF:77:A4:D0:22:85:97:DF:26:E9:84:10:84:B3:50
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2d:45:66:b2:d3:b4:7e:ed:ca:13:8b:59:4e:71:42:d3:c8:
e7:b5:c5:09:9b:20:fe:09:d4:f4:59:56:47:12:89:c2:db:74:
6e:3d:70:d8:05:b9:06:a5:33:1d:83:f1:75:56:ba:fe:3e:d2:
0d:12:c5:a2:e8:bb:21:6c:e4:bd:7c:fa:cd:3c:5f:72:95:e0:
6c:5e:0b:1e:88:9e:b3:91:df:e1:5d:6a:c7:bb:7b:62:c0:f0:
ac:3d:49:2d:5c:b9:47:de:fb:e3:49:87:49:ce:97:8c:51:ca:
0c:f3:34:ac:dd:e3:82:74:77:89:03:47:f1:3a:c0:4d:65:ac:
f4:2c:9f:d8:e4:be:73:cc:d6:04:04:75:b4:9b:73:29:9a:55:
3a:51:f0:3b:ff:24:0f:2f:80:23:2b:3e:89:4b:bb:3d:66:d5:
ca:b8:cf:fc:35:39:b4:c4:6f:b7:33:b1:0c:83:d2:61:89:87:
e2:9b:e2:ea:81:b2:a1:d1:e7:da:e4:ef:5e:64:bf:18:50:8d:
5a:b6:47:18:64:c9:8e:d2:bf:68:32:a3:fe:f6:14:61:96:72:
4c:60:9f:38:e4:13:74:8f:31:46:26:81:8f:0f:0b:17:e8:4c:
bd:95:56:af:cd:c0:e7:4d:b0:2d:3c:59:ab:56:5e:c7:8d:42:
3b:ea:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:08:02 2026 by rpki-client