Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: zTGO6/IFqhl2jVTvcQ7SgEZqnsdNuSd3oowBg0QvYAY=
Subject key identifier: E1:65:3D:4F:86:97:DB:11:AC:B0:9D:AE:3E:4F:23:D7:5F:83:F1:27
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 01A0C4445F6CA5753035C726C845105275DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 116D
Signing time: Mon 21 Sep 2026 14:00:09 +0000
Manifest this update: Mon 21 Sep 2026 14:00:09 +0000
Manifest next update: Tue 22 Sep 2026 14:00:09 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: 3edH0Gjg1MDn5Xq4MGW+v5xUaL1gFlbPxDW6jw72Gfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:5f:6c:a5:75:30:35:c7:26:c8:45:10:52:75:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Sep 21 14:00:09 2026 GMT
Not After : Sep 22 14:00:09 2026 GMT
Subject: CN=e1653d4f8697db11acb09dae3e4f23d75f83f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:f2:da:53:8b:d2:de:8d:a6:0b:e0:8c:f3:
a5:aa:2e:f1:80:25:55:4a:d2:64:06:bf:49:c1:b5:
14:4a:2e:ff:1a:53:d9:ad:72:e8:98:64:05:6a:58:
52:95:bb:b3:e8:33:6b:aa:e4:04:2b:ca:ce:98:e9:
c5:bf:d8:c0:ae:0f:66:2b:54:5b:e8:35:51:7e:08:
23:ce:80:63:2a:bf:16:d9:76:50:38:3b:ee:68:07:
dc:10:61:3d:c5:11:2b:89:8f:6d:80:78:c1:9e:8a:
fc:00:cd:10:4e:ad:32:5f:5d:96:11:1b:aa:9c:91:
b7:fd:36:5a:ca:06:43:45:59:83:c5:bb:9b:99:0f:
fc:39:09:25:08:8c:c4:15:a8:8f:04:64:38:21:60:
c0:4e:31:99:7e:53:b3:7a:19:2d:a8:ba:a0:8d:ef:
48:55:b2:ec:5f:69:70:12:e5:73:cb:da:7f:fb:b6:
d2:0b:8b:08:96:be:9d:db:85:48:26:ce:99:0e:55:
f9:da:96:85:de:fa:17:92:12:39:c6:56:c5:23:9e:
eb:1c:34:d9:dd:22:23:31:4b:3a:25:e9:eb:78:cb:
aa:c3:23:7d:3f:a1:e6:51:5a:2d:d9:57:1f:38:18:
ef:74:37:b8:50:b8:0b:8e:65:52:d9:55:af:88:10:
5d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:3D:4F:86:97:DB:11:AC:B0:9D:AE:3E:4F:23:D7:5F:83:F1:27
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a3:8b:b7:e2:f0:56:62:64:31:1b:5a:e7:81:0d:92:73:d3:
87:da:48:73:65:78:44:59:a2:f3:42:17:c1:e0:6b:24:9b:0b:
d6:ee:7b:e4:cd:0a:bd:72:db:40:c9:be:20:e7:88:6e:9f:7b:
15:30:7f:25:73:6b:4b:12:e0:08:3b:73:b5:a7:55:73:9c:52:
b2:96:e7:ca:35:7c:b5:1f:01:73:3a:3d:7c:9b:39:24:84:00:
9d:23:3e:60:5e:57:db:94:c6:eb:0e:98:e3:e4:16:4e:ce:23:
4b:73:60:3e:61:ef:a1:0f:79:e3:2f:1b:45:98:d4:4e:f4:e0:
71:e4:fb:1a:24:34:e5:27:78:a7:64:de:ab:8f:23:c7:7a:47:
52:d4:fe:8d:e1:85:dd:cc:35:f8:69:2d:6b:23:85:12:8e:26:
e5:2f:bb:61:d2:89:43:fc:fd:f8:33:8c:3a:c2:91:d9:41:ad:
6f:ec:81:a0:74:6b:e4:62:ac:da:42:82:49:95:eb:69:93:ab:
40:9f:eb:fc:89:d0:15:5f:be:8d:43:b8:14:da:6a:30:be:70:
18:48:c8:d1:8d:90:8d:80:35:f5:f8:04:c5:51:91:87:11:de:
7b:26:92:27:b6:bd:22:99:d0:7b:4d:85:4f:14:33:a6:47:d3:
bb:62:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:51:32 2026 by rpki-client