Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: KOfrmhxezpMV57Cv2J9ImXWhI0LmAbgC/o0G6y5y8ag=
Subject key identifier: 45:44:8C:A2:54:37:EA:31:46:07:71:B6:85:33:EF:13:97:43:C6:AA
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 019EBF5AAEC6975F628836A21336AB9A573A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 1123
Signing time: Sat 13 Jun 2026 05:00:51 +0000
Manifest this update: Sat 13 Jun 2026 05:00:51 +0000
Manifest next update: Sun 14 Jun 2026 05:00:51 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: gRivgNDASsXfIMpH4SSj5UpA7P2pJtDNt9mwhYDs/rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:ae:c6:97:5f:62:88:36:a2:13:36:ab:9a:57:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Jun 13 05:00:51 2026 GMT
Not After : Jun 14 05:00:51 2026 GMT
Subject: CN=45448ca25437ea31460771b68533ef139743c6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:5c:d8:3c:99:b8:b4:33:c6:42:61:48:c7:
e9:ab:60:7a:38:9f:85:ca:af:16:86:4c:18:07:89:
6f:6e:1a:14:24:47:81:0b:0c:4a:47:79:b0:9d:6f:
20:84:9c:fb:a5:e8:82:27:f1:96:38:c8:c8:13:6f:
d9:3d:58:75:bf:61:a0:6c:49:1a:b7:78:2b:98:bf:
8b:f7:8b:37:88:a7:bf:a3:15:b5:6b:84:cb:f8:61:
97:a3:0d:e9:09:5a:01:fa:2e:9c:b9:12:86:07:9d:
c0:c9:a7:88:03:56:a2:78:a8:85:1e:48:2c:26:f0:
fd:96:c7:0d:ff:8d:ce:8d:57:a2:d2:90:a6:52:d9:
c6:ee:22:72:b0:b9:51:93:43:1a:16:1e:26:11:3d:
f5:43:b4:5f:d6:3b:b5:ff:69:5b:09:10:7a:3f:30:
aa:99:33:49:aa:7f:65:ac:be:e7:ac:ca:42:ba:92:
1a:49:59:26:b2:40:25:11:6b:96:29:2f:ab:81:2c:
1e:ea:28:ac:d4:4f:79:39:7e:6d:f4:5e:ac:4c:fa:
16:51:af:54:e9:b2:6e:88:a6:3a:56:d1:74:e8:4b:
52:d8:f3:9e:4b:6e:31:c9:ab:1b:40:5b:9d:63:87:
55:aa:41:8b:cb:0b:15:68:07:d7:51:6c:0b:64:75:
a1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:8C:A2:54:37:EA:31:46:07:71:B6:85:33:EF:13:97:43:C6:AA
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b9:14:06:d2:d4:d2:b4:a0:4e:45:6d:8a:4c:9a:cf:d4:35:
bf:05:a5:c0:23:b1:1f:c4:f7:cb:32:4f:3f:0f:cc:b9:a6:65:
19:26:6f:fd:69:3e:5c:77:8f:2e:da:cb:15:2e:31:45:b0:80:
04:5f:20:f8:1a:f6:2f:89:9d:fa:e0:90:a4:61:c2:65:b9:c9:
0f:7f:86:fd:4f:92:e7:df:88:24:c0:b2:72:82:68:bd:39:a9:
60:98:94:24:ef:54:7d:60:fb:e2:91:c2:81:23:a7:06:b1:c3:
c0:25:8a:99:f6:53:35:72:7f:9d:6e:54:f1:c4:db:7c:f0:8b:
17:90:73:17:47:81:b6:be:80:b8:a0:38:0e:80:dc:90:d2:6b:
64:79:5e:8a:ad:33:b5:c1:2f:83:4c:14:d0:22:6e:af:a9:56:
dd:fc:b7:2b:dd:c3:0f:d7:31:32:94:8d:8c:d1:50:53:e3:b0:
7e:ac:a3:c9:b3:0b:83:d1:49:31:0d:b4:12:77:61:47:6b:34:
50:1e:89:d1:d2:f8:02:0b:e8:91:ef:3b:24:8e:f4:1a:a6:df:
8a:64:08:ea:8e:bd:16:87:18:34:58:99:f5:96:f9:15:ab:e9:
9b:ff:bc:f9:56:70:d6:31:d5:d7:5a:b0:58:0b:10:be:3e:8d:
21:c8:2d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:37 2026 by rpki-client