Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
File: 2gKPaUMDSrdg84rkIJFU4iVciek.mft (raw, json)
Hash identifier: K9nsuAYxmV/3SaNvsrheFirgF10NudVFsdtbSdeRvvg=
Subject key identifier: 3D:54:63:1D:09:DE:67:98:C9:01:0E:37:1E:1E:FF:19:D2:7B:2D:D6
Authority key identifier: DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
Certificate issuer: /CN=da028f6943034ab760f38ae4209154e2255c89e9
Certificate serial: 01A127D5F1CFE010B1F58622244C5D1FEE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
Manifest number: 09F9
Signing time: Sat 10 Oct 2026 22:01:34 +0000
Manifest this update: Sat 10 Oct 2026 22:01:34 +0000
Manifest next update: Sun 11 Oct 2026 22:01:34 +0000
Files and hashes: 1: 2gKPaUMDSrdg84rkIJFU4iVciek.crl (hash: GbqZRdXHU1yb9AobzIA+LP8zh3ib8jf7pkbOSWWKPn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:f1:cf:e0:10:b1:f5:86:22:24:4c:5d:1f:ee:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da028f6943034ab760f38ae4209154e2255c89e9
Validity
Not Before: Oct 10 22:01:34 2026 GMT
Not After : Oct 11 22:01:34 2026 GMT
Subject: CN=3d54631d09de6798c9010e371e1eff19d27b2dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:b6:cc:78:4e:44:34:e7:f8:fb:77:8d:ae:
b9:11:7f:59:a6:a3:b2:97:b8:61:7c:7f:90:54:7d:
a6:49:b6:ab:a5:ba:12:d1:d1:e5:c0:35:67:df:94:
23:c9:6f:0c:a2:da:ce:17:7d:9d:f3:fd:0f:f1:33:
70:6c:fb:0b:de:62:f2:67:0f:9e:ea:0d:7f:8c:ca:
e3:58:05:e3:91:8a:35:05:79:8a:52:e2:52:2e:d5:
97:4c:25:42:89:a1:eb:d6:7e:48:34:93:67:0e:58:
9f:e4:03:da:37:21:66:a0:05:5b:8a:6e:84:6f:36:
ef:14:87:98:cb:e4:65:17:83:81:be:d4:62:5e:b9:
78:f7:70:20:27:5e:d1:7c:46:62:a3:25:8f:b7:88:
96:41:ea:05:63:06:6c:12:3a:07:d7:5a:cf:5a:1a:
ef:37:90:9f:cf:5b:44:d2:21:46:e9:0b:d4:30:a3:
c3:34:00:97:1d:96:af:dc:f6:b9:74:32:d2:ba:dc:
60:a1:4f:f3:66:40:d7:45:25:8c:49:37:5f:32:9a:
dd:bf:dc:9d:d1:e2:34:be:70:ae:2c:18:13:9a:10:
76:b4:2e:9c:46:84:91:65:e5:ce:3b:19:bf:d4:f5:
39:95:c5:b4:f6:3d:d0:35:21:cf:45:4e:df:31:dc:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:63:1D:09:DE:67:98:C9:01:0E:37:1E:1E:FF:19:D2:7B:2D:D6
X509v3 Authority Key Identifier:
keyid:DA:02:8F:69:43:03:4A:B7:60:F3:8A:E4:20:91:54:E2:25:5C:89:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gKPaUMDSrdg84rkIJFU4iVciek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/eafa61-7fe9-4b16-bc9b-f6f3c2579c60/1/2gKPaUMDSrdg84rkIJFU4iVciek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:a5:b5:45:18:e0:56:44:b9:55:ee:c9:ee:bd:c6:5a:2e:
56:65:b6:10:20:78:a0:93:9f:c5:c4:63:c4:5e:2d:52:ea:08:
92:68:17:2f:c0:28:59:44:77:55:17:00:24:c8:10:52:a3:7c:
7d:16:11:9a:98:fb:61:66:5b:31:e5:46:ce:c3:44:ef:b7:c8:
04:61:a9:07:3f:b4:3b:10:6c:17:04:87:70:c6:73:6c:b4:5f:
80:c6:19:ca:c8:7c:d3:23:ce:87:70:6e:f4:e1:67:c2:f7:9e:
e7:91:0b:96:4b:c9:e0:b6:7c:f7:4e:64:0d:ab:cc:3e:77:94:
56:36:1a:ed:42:e4:8d:9f:cf:7e:fc:6b:41:b8:8c:cb:b6:7c:
a7:48:a3:85:d0:31:4e:b2:03:29:56:48:ff:f7:f7:00:34:dc:
4b:80:00:c9:fc:67:2d:57:f9:0b:4f:d1:35:9a:e3:44:c0:fc:
2a:d0:39:05:4b:f9:a3:a8:47:a1:57:21:b5:f2:8c:9d:57:f2:
65:ff:63:d7:9a:c2:b8:c3:a0:e9:e3:87:fe:6d:3c:17:43:80:
aa:c2:91:4d:b0:8d:c9:19:c0:5c:2c:40:46:9e:0b:df:14:36:
3e:ae:f9:11:2d:ba:3a:8d:9c:5b:59:62:ce:6f:0b:04:4f:75:
72:52:42:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:41:26 2026 by rpki-client