Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: vZZMEuRQBTXEZtramMFMfISJUaTJXsgo6ctCrt1fxj4=
Subject key identifier: 67:6B:63:E5:32:6D:FD:25:D2:A0:E9:B2:4C:8F:5F:27:AB:12:5C:56
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019FAB637CA4BCCB1A74F7593342AC1AFB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1665
Signing time: Wed 29 Jul 2026 01:00:51 +0000
Manifest this update: Wed 29 Jul 2026 01:00:51 +0000
Manifest next update: Thu 30 Jul 2026 01:00:51 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: G2EE5K77rb/dqvUZJWfGiyrCo4w/oZF1tZWNrtg5qLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:7c:a4:bc:cb:1a:74:f7:59:33:42:ac:1a:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Jul 29 01:00:51 2026 GMT
Not After : Jul 30 01:00:51 2026 GMT
Subject: CN=676b63e5326dfd25d2a0e9b24c8f5f27ab125c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:b3:33:1a:af:e7:1e:50:b2:b3:df:fb:4b:
29:31:60:26:9d:31:db:d6:fc:0e:9f:29:5a:cf:74:
bb:81:e7:01:fc:19:83:f8:0e:75:f6:49:c2:a8:f2:
3c:a6:d9:39:80:9d:80:c3:40:ff:f0:50:5f:88:03:
3b:f0:88:72:4e:fc:81:e9:74:b3:5e:a3:a0:7c:9c:
03:97:c5:27:a3:81:70:0c:f0:7a:26:02:14:37:82:
13:82:64:f2:38:bf:b4:c3:5d:0d:95:b4:f4:ef:98:
83:7b:07:a2:c8:1d:ad:25:fa:82:7c:a0:d9:50:6e:
65:f6:46:41:47:7a:cc:2a:35:21:13:4c:fc:06:88:
1e:f0:ea:39:8d:98:2c:17:94:db:5d:2c:43:d4:f1:
61:3d:7a:16:63:08:1e:12:65:b0:c0:9b:9b:92:5c:
67:2e:6e:0c:26:55:6c:0f:a2:2c:3e:44:a7:3d:df:
d1:18:2b:db:54:38:30:34:5f:92:78:62:66:a5:c4:
01:01:11:e8:1b:3a:13:45:17:a0:88:d2:08:6d:5b:
85:65:af:bd:c3:ef:f3:5b:f9:63:ea:d7:69:4c:a7:
cc:3f:63:5c:65:ad:06:66:4b:6d:a9:ac:83:f0:19:
9c:26:00:cd:cd:d3:04:e5:bb:37:8c:56:bf:9f:12:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:63:E5:32:6D:FD:25:D2:A0:E9:B2:4C:8F:5F:27:AB:12:5C:56
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:53:46:64:6a:7e:88:38:83:90:c3:6c:c5:a7:87:98:97:00:
7f:c9:3d:b1:34:e4:4a:11:97:13:30:23:1e:bc:fd:18:16:02:
52:85:42:09:c3:aa:d6:63:42:47:40:08:a2:b6:38:55:a8:ad:
18:9e:c5:65:db:dc:94:da:de:93:0e:7a:84:77:c2:9d:34:f9:
86:2e:6d:4d:fa:26:15:6f:f8:5f:bc:d2:93:fa:da:54:b0:87:
5d:9f:a9:fa:78:f9:d8:ed:e6:53:49:4c:04:1c:52:24:93:65:
3c:b4:fb:71:7c:ad:c9:92:2b:71:53:2d:99:78:48:94:a6:96:
2d:04:61:2b:c9:c8:1a:1d:21:0f:9e:30:fc:84:37:9e:01:c1:
93:cc:ef:cc:23:2b:2d:74:31:6a:58:73:e6:93:76:f2:9f:be:
58:b6:5c:80:9f:6e:82:78:e2:7f:93:03:77:57:64:28:19:3c:
ab:9b:76:fe:28:77:71:c5:80:c8:33:c8:cb:af:6f:fd:f2:12:
b1:a9:00:3d:2b:19:94:66:2f:c4:a1:0d:54:5d:30:46:14:c7:
7c:cc:93:f1:fb:65:d6:b6:d1:fd:9d:8b:96:b3:de:32:28:ed:
62:64:fd:e1:87:88:b1:88:78:bc:5a:84:77:29:87:b4:25:5c:
79:07:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:14:00 2026 by rpki-client