Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
File: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft (raw, json)
Hash identifier: 11Edt2+Ndx4T+qwMiEMMDS+M+aylzWMYZ7X03zDDH/0=
Subject key identifier: 0D:41:24:A1:EE:20:4A:10:22:5F:76:B6:D5:03:87:00:75:3A:9D:63
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 01A13E5D11795EFD2924E09C28D78B8185CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
Manifest number: 1ABC
Signing time: Thu 15 Oct 2026 07:00:48 +0000
Manifest this update: Thu 15 Oct 2026 07:00:48 +0000
Manifest next update: Fri 16 Oct 2026 07:00:48 +0000
Files and hashes: 1: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl (hash: wUSNABEBQh6HShlXpEP0hEL81hUcmeWTp9CRf5Imjtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:11:79:5e:fd:29:24:e0:9c:28:d7:8b:81:85:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Oct 15 07:00:48 2026 GMT
Not After : Oct 16 07:00:48 2026 GMT
Subject: CN=0d4124a1ee204a10225f76b6d5038700753a9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:78:c7:9d:1c:12:50:d8:e6:18:8e:e0:47:
3b:00:cb:3c:7f:4a:e8:3f:75:bd:5e:07:2d:8f:80:
1d:2f:87:80:d9:97:36:2d:14:bd:4f:3f:5c:74:de:
50:c0:3a:08:65:b9:59:da:46:8d:a2:1c:1e:39:8c:
cf:2c:6a:c7:ef:37:92:6a:0f:eb:97:2f:fa:eb:38:
c1:82:73:21:31:71:cd:79:3f:d4:c4:83:c4:a6:a6:
97:f0:dc:0c:91:65:27:17:4f:47:90:8f:b2:4b:d8:
9d:ac:3c:87:31:10:d5:84:e0:6d:75:c7:63:83:d8:
ad:2c:cd:c2:04:3a:59:cb:aa:79:97:77:ab:02:9f:
a2:b1:1e:b5:a5:f7:18:fe:10:c3:7b:85:30:aa:e7:
7e:52:a6:ff:77:99:81:a7:9e:8b:ee:14:79:9d:f2:
9e:cd:35:36:df:82:a1:d7:cc:e7:fc:62:88:cb:62:
4c:c9:22:ec:e6:7c:56:46:d3:d5:91:c2:2b:a9:fb:
69:8f:ed:c9:e4:b2:52:c7:3a:75:8b:3d:a3:4e:91:
37:96:ba:b4:1c:8b:d9:71:2b:cf:45:a9:e0:86:a3:
18:77:8f:6f:8e:45:5a:ee:74:27:bd:f6:42:30:a6:
94:1c:be:c0:97:bf:68:cb:dd:30:97:45:b6:ac:2d:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:41:24:A1:EE:20:4A:10:22:5F:76:B6:D5:03:87:00:75:3A:9D:63
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f8:d4:16:48:43:63:83:76:e7:4e:81:a4:fd:5d:76:0f:3e:
65:a4:7f:8f:af:d2:cc:c2:22:80:b8:8d:28:c5:65:ae:64:10:
8c:f7:63:6a:b9:f6:65:89:64:8c:e3:f7:b7:8d:50:e7:93:b1:
15:50:42:c6:d5:a1:8a:f9:a6:87:69:ca:7f:28:02:76:98:c5:
72:63:fc:ce:f2:ed:6d:e8:b3:a7:35:a2:5b:b4:b5:35:4c:7a:
e1:b2:c1:b3:6b:f1:25:02:5d:ce:f9:51:c2:54:e3:c5:54:74:
45:64:69:83:3d:75:45:c4:04:9d:25:32:4c:fe:37:6a:35:b7:
ec:85:0f:bb:2c:ca:1b:9e:5a:8a:e2:68:09:aa:aa:a4:35:fd:
ce:7f:84:45:d0:32:e6:df:c2:c0:05:e5:fa:a0:0e:e4:51:60:
8b:2d:a2:8f:14:ae:2b:31:5f:a9:7d:ec:c1:68:da:4d:3c:75:
c9:ee:5b:eb:07:89:7d:89:58:6a:75:23:f0:57:e8:33:01:52:
b1:64:c6:75:5d:2c:10:b1:fd:ac:a1:a7:ea:4c:5f:d5:5e:de:
43:16:d2:c4:dc:e0:48:19:fd:8a:43:25:bb:5b:42:26:2e:67:
8e:36:6b:db:c4:6d:5b:3b:f9:7b:05:cf:e4:7a:50:13:b8:7a:
ef:9e:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:09 2026 by rpki-client