Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
File: 2lTIIO5UFUMsaLATYZJ1_0xubqU.mft (raw, json)
Hash identifier: k104Pclc4WcFg8luca8kdiktFdPw28EMUqaNbBACOSw=
Subject key identifier: FF:AE:EB:D0:01:03:C2:20:E8:80:F5:25:AC:FE:5A:FF:74:B7:23:14
Authority key identifier: DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
Certificate issuer: /CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Certificate serial: 01A0E8C0A452586A7746DF8E63D5A02BF238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
Manifest number: 0AFC
Signing time: Mon 28 Sep 2026 16:02:14 +0000
Manifest this update: Mon 28 Sep 2026 16:02:14 +0000
Manifest next update: Tue 29 Sep 2026 16:02:14 +0000
Files and hashes: 1: 2lTIIO5UFUMsaLATYZJ1_0xubqU.crl (hash: srA6R4lVzER2MLVyZ5kNF3Lx71AHR6r1XCyO4iA0MJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c0:a4:52:58:6a:77:46:df:8e:63:d5:a0:2b:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Validity
Not Before: Sep 28 16:02:14 2026 GMT
Not After : Sep 29 16:02:14 2026 GMT
Subject: CN=ffaeebd00103c220e880f525acfe5aff74b72314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b5:9a:b9:ef:47:45:38:2c:9b:37:13:17:4a:
dd:ed:2e:68:fd:71:5a:97:86:1e:84:42:92:4d:67:
a4:25:68:1a:66:fa:41:85:b1:3f:0f:59:f8:8e:9f:
60:c9:5b:1d:a9:e1:df:93:d7:b2:a9:d7:68:79:ed:
39:da:85:96:1d:fc:41:a6:37:7f:2a:bd:c3:7e:52:
18:c3:00:52:89:2e:12:54:d8:5f:fb:13:6a:a3:76:
b3:35:78:02:25:89:a6:50:b5:8f:a4:6b:c8:bc:fe:
ee:1e:f3:c2:54:f2:a9:24:f5:f7:1b:ae:86:51:5a:
e9:77:90:7d:f0:da:33:79:ad:07:78:cc:e1:36:fe:
35:4f:bb:14:1a:40:c9:b3:04:76:8e:c7:0c:fd:f3:
49:a6:f6:41:10:40:f2:fe:6c:6c:04:f2:ea:7d:f1:
58:63:23:ec:8f:dd:9d:5c:cd:fe:55:ee:c3:43:c1:
49:12:51:34:9f:7e:24:b7:4a:da:73:40:53:d2:5f:
bd:41:67:fa:f8:17:58:29:ec:3e:27:33:5c:02:73:
d4:f7:74:6d:0f:7d:75:d3:7b:a3:0d:52:c0:81:58:
37:b1:83:82:79:65:b8:3b:6b:20:79:cc:42:2f:77:
96:0c:df:8c:86:aa:e1:d2:4e:f0:d2:12:0f:e5:7f:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AE:EB:D0:01:03:C2:20:E8:80:F5:25:AC:FE:5A:FF:74:B7:23:14
X509v3 Authority Key Identifier:
keyid:DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e1:60:03:92:17:0c:d5:20:52:e3:e7:57:65:d8:24:5a:3e:
d8:a1:52:6f:02:e1:a2:15:4e:c0:ed:a2:0b:52:69:f1:68:09:
49:0a:d4:dd:43:5f:00:73:6b:30:0d:90:d9:51:87:9b:fa:64:
b1:52:03:c8:a6:63:74:ff:45:f3:0b:63:32:f3:bd:28:01:b0:
ea:f0:56:6f:c5:2a:2d:98:5a:3e:b5:cd:8b:9d:2e:99:b6:0b:
ba:e4:0f:8d:4a:57:3f:0f:ad:8c:3f:3e:f1:62:d1:e2:49:e1:
c4:d8:ea:b6:19:c6:fa:48:73:50:fb:73:61:11:c9:d8:3a:c0:
20:86:8d:3c:f7:f3:46:ae:4d:2b:08:ca:46:db:8d:89:98:59:
e5:cb:74:8b:32:d1:14:22:4b:47:e5:2a:cc:79:c0:25:7d:f4:
c3:8a:60:a2:63:97:57:22:0f:6b:53:5f:5d:a8:e7:e2:7f:43:
6e:c4:34:77:85:78:09:61:dd:fb:05:68:8c:74:bd:8d:a2:31:
57:d8:ca:b9:af:b7:62:8d:cd:2c:0e:b3:34:1f:f6:ed:ae:47:
b5:2a:c7:24:78:11:89:ea:d0:0b:40:52:50:ef:54:68:4f:6e:
a0:0e:98:54:cb:89:a0:f8:e1:b1:5e:62:af:f1:25:23:21:51:
79:04:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:58:27 2026 by rpki-client