Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
File: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft (raw, json)
Hash identifier: vA7Zp9VTJF4OwNj5FvHgi9NrDkKF/NcF5SbaD+DV/zE=
Subject key identifier: 3C:AC:60:B4:26:6E:C2:24:65:04:57:82:CA:AF:C2:6B:41:52:15:F2
Authority key identifier: D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
Certificate issuer: /CN=d9a23485fed8c850745232e3dc51ccead47254a4
Certificate serial: 01A00100EF013029B25EF6B8F6B90A47095F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
Manifest number: 0E0E
Signing time: Fri 14 Aug 2026 16:00:33 +0000
Manifest this update: Fri 14 Aug 2026 16:00:33 +0000
Manifest next update: Sat 15 Aug 2026 16:00:33 +0000
Files and hashes: 1: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl (hash: 95J4/D3+77nSGKnLJYm4JjE30kSPeaGjOmOfp/nt4BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:ef:01:30:29:b2:5e:f6:b8:f6:b9:0a:47:09:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a23485fed8c850745232e3dc51ccead47254a4
Validity
Not Before: Aug 14 16:00:33 2026 GMT
Not After : Aug 15 16:00:33 2026 GMT
Subject: CN=3cac60b4266ec22465045782caafc26b415215f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:f1:51:7d:63:be:55:0b:9b:32:45:3e:1b:
ab:be:21:26:e2:ec:61:27:6a:15:2c:77:1d:57:7e:
03:0f:7c:9d:b6:2c:1b:62:01:b3:e4:bd:27:ca:f5:
57:67:d5:85:72:ab:82:02:5c:94:b0:1b:93:a0:c2:
81:b2:b8:5d:a5:a6:aa:91:88:52:8d:f5:2a:9e:76:
e9:59:50:0a:fc:63:8e:47:a2:c6:67:54:5f:14:c1:
bc:52:2d:e7:0c:46:70:7b:24:1c:5f:68:21:90:5f:
0f:be:68:f7:88:ba:7e:82:98:30:d7:4f:1d:24:0e:
90:c2:b5:4c:e8:7a:e1:d9:4c:77:d9:f2:82:ab:26:
2a:e1:08:bd:31:f5:e9:2e:49:04:3d:99:30:ce:4d:
fc:c1:a4:4f:d4:e5:2f:6a:bb:98:32:93:2d:e1:d8:
fa:b3:6d:a7:7b:f4:a9:12:10:05:0b:3b:57:c1:f6:
ab:e5:a8:6a:11:70:a6:18:21:35:e4:3c:62:de:72:
f8:4f:95:cc:70:71:0e:0d:aa:66:9b:79:45:5b:90:
df:9b:ad:3d:23:a4:26:3f:a9:9e:eb:33:ec:7e:3c:
c2:c4:72:26:71:6f:ec:94:c3:4b:af:b0:4e:18:a3:
24:e3:8d:a8:4a:57:be:db:06:fd:ea:6d:21:16:39:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:60:B4:26:6E:C2:24:65:04:57:82:CA:AF:C2:6B:41:52:15:F2
X509v3 Authority Key Identifier:
keyid:D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8c:59:02:dc:5f:34:5f:e9:f0:bb:41:f3:c8:c5:80:1b:0e:
d1:7e:19:8c:df:77:77:6c:44:fb:83:ac:84:4a:4f:9d:7e:c8:
2a:7f:19:89:ad:a3:0b:4e:22:7a:d1:28:db:ce:36:10:75:43:
e5:1c:7e:0b:53:6e:e7:51:c3:ba:80:b3:e1:76:42:00:b6:ac:
bc:a3:ab:1e:35:77:cf:b6:79:12:f8:7a:f0:48:2c:90:4c:a0:
60:71:48:9a:0b:26:ec:61:46:02:4a:6c:96:89:20:5f:df:b7:
34:79:b7:9f:d8:61:2a:40:83:eb:06:df:52:92:0b:da:ff:0e:
13:80:2e:88:46:66:85:90:e2:05:f5:ff:75:30:71:c5:fb:44:
51:ef:9e:5c:b2:e0:88:8f:0d:4b:05:19:01:33:9f:26:17:a7:
fa:d3:e6:15:ec:49:c5:48:3d:fd:fa:e0:29:a4:c7:83:80:be:
11:b3:da:a6:31:a5:88:01:5b:de:22:14:d0:96:1f:6b:8c:02:
c4:84:ea:31:a0:94:85:8f:a1:63:81:1b:ca:0c:1f:25:76:4f:
b5:5a:06:2f:b6:57:0c:16:33:03:89:78:fd:48:ef:9a:19:1b:
f9:5d:66:33:d2:b4:29:99:c3:33:fb:ee:11:d3:a8:cc:65:29:
4e:10:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:30 2026 by rpki-client