Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File: 2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier: qYMs6P5rcir5oI/FxPmhSMjwUWJlO9ClhQQYWjsI/n8=
Subject key identifier: 94:E3:CA:3B:A4:FE:51:2F:07:A7:41:B2:92:0E:BF:AA:03:C2:0B:5B
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer: /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial: 01A0C40E5D52F3C2C671E780C0EB55A1F34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 13:01:10 +0000
Manifest this update: Mon 21 Sep 2026 13:01:10 +0000
Manifest next update: Tue 22 Sep 2026 13:01:10 +0000
Files and hashes: 1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: lHnjIWnKe2ShSf9NaFxEljF4sFC1dgl/9U8CvFWaS+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:5d:52:f3:c2:c6:71:e7:80:c0:eb:55:a1:f3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Validity
Not Before: Sep 21 13:01:10 2026 GMT
Not After : Sep 22 13:01:10 2026 GMT
Subject: CN=94e3ca3ba4fe512f07a741b2920ebfaa03c20b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:59:b3:ac:9f:8e:1b:68:48:35:da:eb:8a:aa:
79:c6:16:34:ab:c7:57:d0:0f:0c:ab:29:8d:85:da:
93:20:66:91:86:40:96:e0:35:3d:08:10:5b:3a:6e:
71:20:9b:4b:6c:d5:9d:71:4a:94:80:a0:63:3d:d4:
e2:3e:99:3c:87:28:28:66:4f:ae:8d:d4:2a:9d:e3:
75:52:98:17:a7:86:dc:d1:fc:be:e6:2e:3a:16:4e:
13:27:3c:bf:dd:de:1b:3b:82:c1:84:cc:67:03:44:
ee:4c:b9:5c:92:26:4b:ab:2f:b7:21:e7:d6:15:bc:
03:d4:a8:48:74:38:5a:b1:33:27:15:c2:4a:70:d0:
4b:73:1d:e2:01:b7:df:8b:cd:5a:1b:5c:5b:4f:7f:
04:0e:4d:42:42:67:bc:ca:d0:ec:b0:c8:62:9b:d7:
23:29:dd:33:03:33:12:1b:ff:56:f7:48:93:03:83:
fe:7e:bf:5b:09:20:ff:82:1b:b4:be:99:61:22:5a:
2d:a8:dd:40:01:54:d5:21:43:f9:a3:14:84:be:b7:
0d:ae:e0:65:93:8f:d3:e5:2e:ed:30:9f:bf:18:77:
7b:3b:71:98:6b:4f:63:f7:db:e4:63:fc:68:13:9a:
26:5e:c2:37:62:db:38:4f:ff:3a:c4:68:d0:23:32:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:CA:3B:A4:FE:51:2F:07:A7:41:B2:92:0E:BF:AA:03:C2:0B:5B
X509v3 Authority Key Identifier:
keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:78:97:14:8a:f8:db:d7:f1:3b:b0:b6:b2:ca:f5:15:b5:
03:b1:01:c1:65:dd:87:2f:70:94:9b:78:ed:c1:31:0a:68:11:
47:2a:ed:2a:ff:b8:3e:67:5e:52:33:6f:1e:33:07:e3:cb:47:
66:04:76:0a:d6:7a:7f:30:19:d8:60:40:69:d7:f3:e2:4c:b2:
cb:0b:ee:f5:a1:d4:d0:bd:ab:78:34:14:8c:c5:8e:94:bd:8b:
d6:45:db:07:ec:2d:3f:d2:05:9c:db:ad:bc:2a:56:ab:a9:45:
b2:33:3f:de:67:4c:79:98:90:8e:e0:2d:48:b5:7b:b5:9c:85:
13:a7:24:5e:5f:bf:33:c7:cd:1d:5e:df:52:9b:78:a9:03:1b:
51:91:4d:7a:cc:bd:8b:2c:5b:31:0e:9e:04:2a:29:64:61:fc:
ca:29:1e:1d:59:d8:9e:87:af:42:fd:6c:59:d2:c8:7e:64:fe:
66:e4:48:89:2c:1c:81:af:24:3c:64:c6:2f:a3:b7:26:b9:f8:
da:9e:85:d2:c9:38:44:04:91:65:56:3d:87:2f:d0:7e:e4:3d:
24:68:11:7b:3b:f4:56:4b:07:d1:e8:a9:ff:b8:27:27:b3:0c:
67:93:b5:e4:76:a5:02:c6:11:e8:e1:db:31:2d:a4:4b:e8:47:
74:f2:e5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:29 2026 by rpki-client