Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: szapmaP0D53A45Mc2JinciA1oELYT8NHNmS+jtE4wVw=
Subject key identifier: 1C:8F:DC:1B:1E:66:49:20:56:1E:B5:05:DD:45:D9:80:CA:8B:02:4A
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 01A0CDB643D1388F1C5091EC59B27500CC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 10:01:09 +0000
Manifest this update: Wed 23 Sep 2026 10:01:09 +0000
Manifest next update: Thu 24 Sep 2026 10:01:09 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: vGCeNcVE8/s6O7/NSaTxQ6i5Chv/+RImfnIjtruq2mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:43:d1:38:8f:1c:50:91:ec:59:b2:75:00:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Sep 23 10:01:09 2026 GMT
Not After : Sep 24 10:01:09 2026 GMT
Subject: CN=1c8fdc1b1e664920561eb505dd45d980ca8b024a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:20:33:c4:a2:33:b2:73:aa:87:d6:dd:83:
f5:b6:36:c3:71:be:1f:08:15:f8:de:f0:bf:6f:58:
e7:cb:c2:6a:a0:83:ea:5a:2f:4e:8b:5c:8f:51:a4:
7a:53:3e:c6:f1:01:77:a8:9b:73:f8:db:39:3c:26:
7c:5b:3e:29:20:60:4f:51:c1:15:72:0d:f7:c2:48:
e7:23:f5:d1:d1:97:28:a3:73:f0:e9:58:ee:a5:26:
08:b7:f3:11:7a:6f:69:4a:d7:01:5d:fc:09:5a:2a:
76:f7:1d:ba:7e:47:9d:1d:b8:80:67:c5:89:bd:1d:
3e:f6:1c:39:07:15:1d:74:27:02:27:1b:9e:03:69:
86:74:9f:e9:ae:ef:cc:d5:bf:14:40:9a:52:b8:d2:
21:97:0f:b4:cd:a7:55:96:80:7a:72:ed:ec:f9:cf:
13:23:30:02:44:0f:1d:0c:8d:7b:0f:1e:f1:fc:09:
70:9c:3f:01:eb:e3:1f:4c:e8:5c:7b:31:0b:7a:82:
e8:96:76:a9:68:74:4d:c8:29:8b:36:a7:5f:a4:32:
26:77:82:81:a3:89:66:7d:7c:63:98:76:21:2e:82:
13:37:62:90:41:d5:1c:8e:c8:c8:e6:39:d9:ca:19:
cd:e1:99:10:1b:12:d7:12:28:9c:68:80:0b:6f:45:
a7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:DC:1B:1E:66:49:20:56:1E:B5:05:DD:45:D9:80:CA:8B:02:4A
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:5e:8c:6f:6f:91:af:48:8a:ea:c2:d3:a7:3c:36:f6:a7:
48:9e:b3:06:2f:2e:76:e4:f8:b6:8c:21:0d:94:be:7d:6b:73:
9f:64:57:f3:ee:46:74:55:b0:70:19:7b:2a:0b:fe:23:49:c6:
7a:44:22:a7:8c:e0:40:e4:bd:2a:70:82:a3:b3:d4:ec:dd:72:
f1:78:68:15:51:e4:04:d7:8e:87:c3:9b:b1:0c:b3:7a:a8:fa:
b5:c2:8f:9b:02:2e:5f:25:3c:6a:1d:80:f5:97:53:5a:66:26:
07:3f:ec:ea:32:7f:28:dc:ce:05:12:fd:de:92:6b:08:75:a8:
1c:23:e4:a3:6a:2a:d2:35:f4:95:55:e9:5b:51:cc:91:46:84:
ad:db:28:44:dc:b8:89:fe:73:78:61:1b:24:47:29:be:c4:ca:
6b:5c:84:02:b1:29:2f:0a:7e:27:3a:d4:9d:5b:f6:e3:f1:52:
9e:eb:f5:b3:e7:c5:08:c1:93:bf:c5:6d:3f:13:2b:0c:3a:5c:
f0:90:7d:45:fb:bc:d6:39:d1:c4:a8:3d:5f:20:62:f6:af:0d:
4f:f0:04:b9:0f:ee:35:c5:2d:76:18:19:cf:9d:4b:23:9b:35:
af:68:ce:7e:54:ff:6e:bb:04:18:1a:32:13:01:71:64:22:a6:
e9:03:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:34:10 2026 by rpki-client