Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: EScBCJ4C9g+tdws0oCBiNnsprRAyMzbojGlffvQMm4E=
Subject key identifier: 57:ED:B0:4C:46:28:5E:73:84:93:55:CB:1E:B1:0A:23:D8:53:B1:A2
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 01A001DD2CF5827C9FFD7C950AD4FA2505AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 0842
Signing time: Fri 14 Aug 2026 20:01:07 +0000
Manifest this update: Fri 14 Aug 2026 20:01:07 +0000
Manifest next update: Sat 15 Aug 2026 20:01:07 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: obxqMNcEpXgV9WG8zcLwDOi23R6Nc8tL4cc9w4r4qwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:2c:f5:82:7c:9f:fd:7c:95:0a:d4:fa:25:05:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Aug 14 20:01:07 2026 GMT
Not After : Aug 15 20:01:07 2026 GMT
Subject: CN=57edb04c46285e73849355cb1eb10a23d853b1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:68:f4:16:bd:1f:ea:86:88:63:3f:f4:50:
df:8a:e3:e4:2d:0a:8b:d4:9b:3c:b0:ad:2e:c3:26:
29:ae:b0:78:c0:d8:be:7d:07:e6:9d:e1:c0:73:40:
46:87:d9:be:ab:61:07:f7:7a:39:63:40:a1:fd:e1:
aa:72:04:19:10:01:e3:30:e2:9a:f2:27:f5:07:50:
e2:e9:c4:6d:4b:cd:e3:b7:a1:c1:99:79:a4:ff:b3:
62:b4:1f:55:cb:20:fc:60:9e:ae:67:14:13:97:61:
51:7a:e4:e9:14:85:15:76:0c:5d:7d:09:c7:b8:24:
39:92:5b:ed:3b:ba:5d:d4:73:bf:88:7a:bc:01:8c:
39:27:27:a2:9f:f6:35:4b:19:43:2f:24:83:98:b0:
f0:04:59:50:7a:05:bd:f9:4a:1c:91:bf:99:d7:9b:
fa:b5:3c:99:ed:c8:56:45:9b:11:32:b3:56:56:29:
38:6f:0c:58:03:ea:77:a6:13:75:ca:84:4d:31:17:
0a:39:3a:12:81:22:64:1e:27:30:93:2d:db:54:77:
43:84:78:98:5c:a8:40:25:a7:b4:a4:c1:ff:17:04:
bd:98:49:fc:d3:ab:62:ee:61:40:ea:67:39:e0:dc:
9d:e6:f7:a6:de:dc:43:68:32:c6:36:61:09:9d:d5:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:B0:4C:46:28:5E:73:84:93:55:CB:1E:B1:0A:23:D8:53:B1:A2
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:8d:ea:40:89:b3:60:9c:4f:81:ef:3e:2e:3d:fc:53:14:
24:f9:dc:42:c5:93:e2:2e:60:65:a0:86:5f:b7:54:ce:3f:ce:
69:2c:82:62:1f:1b:e5:03:44:19:9c:fb:bf:f9:09:b0:18:df:
5b:52:df:19:94:44:e0:9d:67:ff:b5:36:56:8f:19:66:ff:8d:
b9:fd:0d:34:1f:f9:99:0b:13:cf:a0:36:4f:bf:cc:6c:88:f6:
e9:90:7b:49:12:4d:e8:58:d4:89:e9:6e:c0:c0:15:6b:71:07:
8c:7b:ac:fe:78:23:8f:c4:e4:6f:44:20:f9:c2:78:54:fc:05:
54:ba:e6:84:6a:70:0a:59:09:cc:b6:b0:54:db:5c:f1:6a:01:
3a:60:98:e6:11:1f:b2:f0:1c:13:e6:4a:46:31:eb:eb:8c:4c:
33:b0:39:12:6f:0d:4b:74:35:a8:82:bc:79:56:1a:59:33:a4:
3c:44:ae:aa:37:8e:78:f7:9f:7c:51:c1:e8:1b:1b:55:ef:4b:
d7:c7:b4:de:97:81:e6:cf:01:df:91:31:32:10:c6:7e:4a:3e:
52:5e:46:ad:19:f2:7e:5f:09:20:cc:ea:f6:53:23:09:0b:b9:
ca:6e:1d:27:96:9d:0d:a7:be:15:73:58:7b:5f:59:9d:0f:d2:
5f:0f:b2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:52 2026 by rpki-client