Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
File: 2l7eZe_t7t-MigSyRaOl32OmnoQ.mft (raw, json)
Hash identifier: 82V2UYjzQD7ijYVi+NlUZ4m+vu7UhNdJHNjXuS1nZmE=
Subject key identifier: C7:82:73:CB:64:4B:9D:4C:10:B7:DD:C2:2C:5A:34:DC:4C:9F:2F:B1
Authority key identifier: DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
Certificate issuer: /CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Certificate serial: 01A1DE032430ED4B76AC5948A7CBC601F2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
Manifest number: 1AF5
Signing time: Sun 15 Nov 2026 07:01:50 +0000
Manifest this update: Sun 15 Nov 2026 07:01:50 +0000
Manifest next update: Mon 16 Nov 2026 07:01:50 +0000
Files and hashes: 1: 2l7eZe_t7t-MigSyRaOl32OmnoQ.crl (hash: CmNf3S3h5Vlt2oTe+VmJgxckmk0zgFYhAp8SUF/TVUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:24:30:ed:4b:76:ac:59:48:a7:cb:c6:01:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da5ede65efedeedf8c8a04b245a3a5df63a69e84
Validity
Not Before: Nov 15 07:01:50 2026 GMT
Not After : Nov 16 07:01:50 2026 GMT
Subject: CN=c78273cb644b9d4c10b7ddc22c5a34dc4c9f2fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:08:8c:ad:48:6f:44:a5:51:eb:d4:66:31:
4c:55:39:0c:13:a4:57:07:c2:e7:2e:b9:56:c3:a0:
69:4f:ee:78:e7:75:f7:4c:f9:72:4f:04:30:b3:42:
cd:21:8c:70:79:59:b8:64:c1:4e:13:e7:33:ef:5a:
5a:43:a1:95:cd:57:c0:4a:b3:fa:2a:09:4a:0b:9c:
73:29:fa:3a:31:fa:34:3e:3f:00:ea:e7:59:d2:eb:
14:f2:32:7e:ed:a0:fb:d0:da:79:e9:c3:7b:3d:ea:
ad:cf:e2:fb:bd:9f:ff:18:a3:d8:80:7b:1b:7a:22:
59:fd:cf:dc:0f:a8:cb:82:ca:a8:87:4c:e9:c6:39:
cb:35:f5:75:a2:01:0e:f3:dd:08:cc:98:3f:a1:c5:
a4:5c:0a:dc:63:89:f9:7b:d0:d1:52:fa:ab:d7:73:
11:06:a7:90:a4:f5:63:fc:37:f3:d8:e4:9a:b6:5c:
e7:3b:27:d1:8e:d0:47:5e:90:c9:c0:d8:7c:d4:da:
49:66:55:a8:5e:52:d0:9f:b8:34:86:68:69:22:9d:
b9:99:d5:74:77:8b:ad:34:39:ce:19:01:86:27:fd:
e3:6e:7c:d8:9b:56:a1:f8:ec:d6:32:60:0c:e4:1f:
0d:9d:96:03:02:fb:fc:1b:84:b4:9f:73:a4:fc:46:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:82:73:CB:64:4B:9D:4C:10:B7:DD:C2:2C:5A:34:DC:4C:9F:2F:B1
X509v3 Authority Key Identifier:
keyid:DA:5E:DE:65:EF:ED:EE:DF:8C:8A:04:B2:45:A3:A5:DF:63:A6:9E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2l7eZe_t7t-MigSyRaOl32OmnoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a6a9de-6033-4c9d-861b-aff50e4a0e33/1/2l7eZe_t7t-MigSyRaOl32OmnoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:33:3b:70:7e:09:be:a1:41:3e:00:c5:84:66:ed:d2:22:
f2:b5:bd:e4:e3:e8:64:3d:44:85:44:cc:71:3d:19:b1:dc:f1:
98:17:5c:1d:05:54:66:d0:8f:d8:57:5a:4c:73:37:67:62:be:
51:62:dd:6f:f8:12:95:a0:2c:80:4b:ab:d0:9b:ac:8a:b8:dc:
58:0a:a6:5c:90:c9:d3:dc:72:ff:e5:da:db:51:cf:1d:bf:44:
0e:00:18:29:50:b6:f3:0b:7c:fa:a7:40:39:a0:fb:3d:98:58:
89:71:59:2a:08:81:c3:f3:5d:54:f3:9e:71:2b:0c:35:95:42:
f2:57:a6:f4:0f:60:90:5f:46:95:3d:cd:2b:3e:32:5d:e1:70:
3a:6f:87:01:c8:40:9f:0e:a9:c9:7b:26:fa:da:2c:53:29:57:
a1:90:21:fb:88:4b:24:ed:d1:1b:f2:7c:36:7d:42:16:00:21:
ca:d7:f5:e1:a9:81:cd:64:5b:59:5e:94:c0:86:a5:fe:b2:52:
07:c2:c9:a2:5a:39:28:5d:5e:46:5a:d5:04:cd:3e:5e:17:4e:
4c:89:bb:14:bd:a3:12:ae:6c:4c:7f:8a:33:6c:29:8d:8c:82:
c7:1f:8f:5d:3c:20:74:03:d7:fd:1f:46:64:ce:b5:64:aa:b0:
ec:98:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:13:10 2026 by rpki-client