Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
File: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft (raw, json)
Hash identifier: g8FdW5SaHeoqE8LwoDDtFJfzPWi7F03pEFebCJIq4M4=
Subject key identifier: 80:6A:CC:DD:42:C0:D6:30:54:20:C1:CA:36:3F:34:12:BA:94:FC:EC
Authority key identifier: D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
Certificate issuer: /CN=d9a23485fed8c850745232e3dc51ccead47254a4
Certificate serial: 01A13FA7325E16D0019CC5757DA62E3F1792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
Manifest number: 0EB3
Signing time: Thu 15 Oct 2026 13:01:24 +0000
Manifest this update: Thu 15 Oct 2026 13:01:24 +0000
Manifest next update: Fri 16 Oct 2026 13:01:24 +0000
Files and hashes: 1: 2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl (hash: ntgauJZIlw5H19pRHFKJiJXUODfjW7kQ0sd5fpN+7Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:32:5e:16:d0:01:9c:c5:75:7d:a6:2e:3f:17:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a23485fed8c850745232e3dc51ccead47254a4
Validity
Not Before: Oct 15 13:01:24 2026 GMT
Not After : Oct 16 13:01:24 2026 GMT
Subject: CN=806accdd42c0d6305420c1ca363f3412ba94fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:7d:16:d6:98:6b:41:ab:94:46:12:49:7a:
0e:f1:f1:35:8d:0a:83:80:84:bf:34:bf:39:3c:94:
ac:7c:78:0f:92:69:99:e4:61:ff:04:b5:d8:2f:a4:
89:e7:c0:bd:1f:c6:fe:f5:db:9d:2e:c3:4c:aa:7c:
fc:d1:6b:93:a0:13:6d:30:c9:0b:05:c0:cf:97:06:
90:04:b7:f7:79:14:e0:8d:c0:a8:85:16:2f:76:69:
ab:4c:3a:bd:f4:53:43:b1:7d:3e:d4:9b:c0:51:72:
66:2e:e6:1e:ab:23:cb:eb:0f:aa:36:bf:5d:f8:55:
e7:89:84:d8:a2:bf:e3:bd:0a:57:8f:44:83:68:5b:
3b:eb:6a:b4:3c:3d:8d:43:51:97:60:7a:3b:75:6e:
4c:5c:7b:64:fd:d1:1c:b3:4a:af:a5:4e:1c:de:cf:
f2:cd:45:bd:4f:61:74:57:14:fb:78:20:cc:4b:67:
b5:61:32:38:70:5e:5d:f1:c8:9c:25:ff:cc:9c:ab:
38:e9:36:a6:74:19:56:9b:6e:e9:74:62:e4:75:15:
c8:15:36:db:96:27:d9:f0:7b:60:e9:a7:80:0e:f7:
8f:bf:27:0a:45:37:4d:d7:0a:25:a8:d3:88:40:55:
5f:38:40:34:65:98:26:85:c7:7c:59:43:63:b3:3f:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:CC:DD:42:C0:D6:30:54:20:C1:CA:36:3F:34:12:BA:94:FC:EC
X509v3 Authority Key Identifier:
keyid:D9:A2:34:85:FE:D8:C8:50:74:52:32:E3:DC:51:CC:EA:D4:72:54:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/eda3ef-cda6-43fa-b8a6-a2461e431c44/1/2aI0hf7YyFB0UjLj3FHM6tRyVKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fa:e5:55:fb:1e:47:3a:7b:14:58:4b:3e:f9:2a:84:e4:e2:
52:9b:8d:60:a5:3f:ad:9a:47:6e:e2:23:f0:15:60:b9:9a:7f:
3f:e4:f1:c6:60:69:9c:41:12:30:f7:30:8a:88:78:16:43:dd:
6f:e7:50:cc:b3:9a:63:60:ec:3e:7f:42:15:fd:6c:10:cd:f2:
99:70:2b:58:32:70:47:82:82:f7:87:b9:93:f4:a5:d1:41:02:
e4:52:a5:65:9e:4e:03:14:93:80:a6:e9:d5:62:6d:20:58:4a:
3f:52:47:4b:32:1f:2b:3e:ad:d9:7e:d8:18:4a:0a:53:33:1c:
f4:8b:18:7d:aa:c9:c3:9f:cc:ea:4b:13:73:0b:2e:c7:90:c3:
69:8e:b8:28:60:1c:1e:2f:7c:ab:43:bf:98:11:af:7f:e8:e2:
a6:b1:66:a8:6b:dc:a7:60:ab:ed:96:74:f9:83:e1:a5:b7:1b:
f0:83:29:41:10:29:ba:2a:da:3c:c8:e4:47:20:d8:76:30:69:
97:de:01:e3:ce:5f:bd:2b:8a:32:29:fe:31:af:a6:b4:4e:09:
ca:73:94:89:97:f1:12:25:72:0c:f3:82:90:99:3c:9c:c3:66:
69:10:f7:f0:3d:82:01:a3:be:b0:a5:c0:84:48:5f:ca:1e:8d:
31:42:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:27 2026 by rpki-client