Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: vRTyrqshqiQA9y8kLzrJeMkYayNkm497NeYWD/JoyP8=
Subject key identifier: 15:8F:CB:5A:A4:E3:DD:4D:2F:33:3E:8E:A9:C4:2B:78:E5:32:A1:1B
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019D98F451B28BBD48DA5C65F18C24DC8B87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:41 +0000
Manifest this update: Fri 17 Apr 2026 01:00:41 +0000
Manifest next update: Sat 18 Apr 2026 01:00:41 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: 2whb3WltOBS+R3OHvUoQuk8/2K3hBvXr6RsIvOr7za8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:51:b2:8b:bd:48:da:5c:65:f1:8c:24:dc:8b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Apr 17 01:00:41 2026 GMT
Not After : Apr 18 01:00:41 2026 GMT
Subject: CN=158fcb5aa4e3dd4d2f333e8ea9c42b78e532a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:61:92:73:62:a5:f9:c1:5e:81:98:7c:2e:
a9:ff:80:12:25:e5:78:72:de:5a:87:4f:90:36:21:
06:d4:f0:ec:38:3e:10:d4:41:99:d5:3b:b2:5a:89:
f4:6e:ba:95:12:e0:68:4a:4e:e4:b7:49:14:3d:32:
ab:57:35:43:9b:f9:e4:23:24:db:8f:b1:6c:92:18:
a7:78:db:26:9a:41:0e:da:fc:f9:f0:b3:77:17:55:
0c:03:43:18:18:d7:8f:1f:e8:3e:c2:17:c4:00:e1:
37:ed:74:8f:33:ac:55:55:6a:99:52:da:c7:48:1d:
7f:ee:96:b4:6a:1a:ed:19:e6:68:84:af:ab:43:8b:
3b:f8:fd:70:ea:d0:77:54:34:24:61:02:46:8e:0b:
16:e2:af:f0:4c:14:39:3b:88:d3:24:85:76:24:a4:
7a:7d:44:ea:db:14:fc:40:1e:f5:bb:eb:62:b6:0d:
a4:40:4d:4e:c8:ba:56:5e:70:10:fb:e2:d1:11:a3:
06:03:99:1f:df:b8:a7:c0:69:b1:56:52:cc:5d:cf:
d3:29:d7:3d:0d:17:27:38:d6:76:b1:18:75:2c:25:
18:65:56:c6:c6:52:4c:c8:aa:e5:b6:98:de:23:86:
f9:2e:ae:3e:ff:00:02:8a:b2:d0:48:8c:f3:02:29:
c8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:CB:5A:A4:E3:DD:4D:2F:33:3E:8E:A9:C4:2B:78:E5:32:A1:1B
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:34:07:04:2b:ca:c3:c5:b5:1f:ce:73:64:71:9a:e0:d3:84:
95:6c:58:e6:10:05:f5:6c:fa:10:f5:b2:ac:4e:51:0f:83:93:
77:e0:8a:c0:78:22:79:a1:1e:bd:89:66:72:4a:07:aa:2c:69:
74:eb:78:a0:66:91:2d:a0:d3:77:8b:c6:38:b1:9c:69:73:3c:
1b:55:80:98:bd:b7:1c:d0:04:81:15:ac:cd:24:48:e9:a1:15:
6e:52:55:72:de:7c:b1:9b:4b:3e:11:cd:ee:8e:33:29:f4:c8:
6d:85:8a:7a:b1:2e:25:0f:4c:98:d4:b5:5b:74:f3:b1:ba:1d:
02:9b:9c:13:15:91:15:82:dd:cb:02:b6:c7:91:5a:61:74:fd:
86:70:d0:ee:ba:0a:12:20:67:61:e0:3f:ca:e7:d4:26:ce:ae:
8a:3f:67:b7:0a:f5:06:2d:44:b0:67:15:f9:c5:70:44:4a:84:
58:52:40:61:96:e3:ee:28:e5:8d:4b:f5:8c:81:44:85:4b:1e:
58:05:b9:75:fb:7c:21:e0:0c:43:2d:d8:4a:b1:9a:ec:69:8e:
83:a3:36:d5:39:15:c8:05:96:eb:be:83:e7:0e:1e:48:cd:d7:
82:fb:c3:18:ec:b1:d1:d3:c9:f4:6a:0c:39:01:69:af:66:8e:
82:92:15:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:31 2026 by rpki-client