Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: V+Bdhb825GOj/f9Z1PgCvVyyZTa5AnoI1ktpgn774DU=
Subject key identifier: 47:69:E1:5C:4D:82:D4:16:22:0D:43:C8:D2:DC:3B:35:E7:6A:A8:85
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 019FAA50DA2D0FE976235A9C17BA059753AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 10DB
Signing time: Tue 28 Jul 2026 20:00:53 +0000
Manifest this update: Tue 28 Jul 2026 20:00:53 +0000
Manifest next update: Wed 29 Jul 2026 20:00:53 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: PuXZgRG7O4qIWCp7FtUNQ435fR98XdOKKPO7LMehEf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:da:2d:0f:e9:76:23:5a:9c:17:ba:05:97:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Jul 28 20:00:53 2026 GMT
Not After : Jul 29 20:00:53 2026 GMT
Subject: CN=4769e15c4d82d416220d43c8d2dc3b35e76aa885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:85:6f:87:e9:3e:44:f0:84:3a:2e:c6:64:
5e:ad:cf:1d:38:08:f0:07:d6:b8:a1:48:ee:e1:bf:
a5:69:04:6b:43:8e:8b:5c:8a:9e:84:de:25:8c:ad:
85:5b:ee:16:79:38:d6:c5:18:e5:db:c0:45:37:dd:
43:ea:84:3f:a0:a0:9e:d1:b4:62:b8:de:ae:46:3d:
67:42:a0:3b:89:ca:58:ed:20:42:17:d9:1c:69:b6:
7a:75:b2:7e:44:ce:ea:ad:f9:ae:c2:1d:ff:d8:19:
3c:72:cf:ea:0a:fd:91:9f:59:47:13:bb:b5:ab:5d:
35:d2:df:99:11:2e:6d:b3:fb:7c:6e:5f:c9:6c:5b:
37:6e:69:28:5f:de:0c:64:51:db:7d:33:5d:51:9b:
3c:ee:4a:67:d6:42:4a:b6:09:3b:43:94:05:40:fe:
a0:c2:c5:69:89:cd:ce:7a:b9:9c:99:3b:69:17:39:
29:67:d2:ea:33:66:b1:3a:44:1d:6f:80:f5:0e:7c:
71:9f:4b:9b:69:ee:6e:5c:f1:9a:d9:b1:fe:de:ff:
26:07:eb:74:42:2b:ba:9b:62:66:67:50:16:35:37:
49:79:01:d8:8a:e2:df:a6:19:47:d3:42:dd:aa:df:
93:fd:54:d0:a4:d7:8f:fd:98:10:95:04:15:d3:0a:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:E1:5C:4D:82:D4:16:22:0D:43:C8:D2:DC:3B:35:E7:6A:A8:85
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:07:31:c6:18:24:38:6c:d9:e5:f9:ff:1f:56:62:84:20:
da:07:b1:1a:ac:b7:50:05:53:64:b1:d3:7b:3a:4c:46:d6:83:
54:1c:31:e8:5f:bd:ae:3d:9d:73:54:40:d6:9e:92:34:8f:ef:
c0:fa:75:ea:c6:4e:aa:fe:d2:c2:57:a2:9f:60:23:8d:cf:bb:
61:96:a8:ad:d2:09:9d:71:0c:e9:e4:42:d7:8e:f0:a3:d1:54:
53:14:dc:58:bc:ac:a5:e3:f9:97:a7:33:34:05:7b:a2:1e:93:
1e:42:66:1a:d3:ee:50:32:65:8c:db:72:0b:9d:54:60:90:05:
7c:c3:f1:a0:72:6d:12:3d:42:68:f2:a0:b1:97:56:3c:78:1d:
06:89:88:e3:2c:54:2d:46:48:3a:e5:f9:e2:38:89:98:d9:36:
0b:2d:1f:00:2f:ba:bf:01:0d:03:d3:b5:ab:be:f1:0d:f2:11:
94:82:8b:e3:5a:8e:e9:cf:a2:6d:d6:a9:86:35:f2:c3:77:1e:
44:91:bb:c6:ae:4a:4e:19:52:7e:5d:9f:68:ae:02:28:a1:59:
53:ec:33:86:68:44:89:23:33:b4:e4:f1:2a:48:5c:ee:d5:af:
b5:1d:23:02:35:be:d5:fd:2f:21:28:53:44:22:da:05:5f:86:
39:54:b3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:12 2026 by rpki-client