Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
File: 2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft (raw, json)
Hash identifier: At5fNKV+zzMs7hW2EiIy8aTYi9/Jl5n3QqiDPZlbgSw=
Subject key identifier: CF:8A:58:1C:B8:15:7A:08:01:5E:D8:2D:2B:23:DE:B2:F7:97:BC:45
Authority key identifier: D8:A2:CB:BF:F5:AA:65:36:83:AB:61:5A:63:27:18:1C:30:92:C5:9D
Certificate issuer: /CN=d8a2cbbff5aa653683ab615a6327181c3092c59d
Certificate serial: 01A040175CF2D4B8193B847FE6A56A98E29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KLLv_WqZTaDq2FaYycYHDCSxZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:01:07 +0000
Manifest this update: Wed 26 Aug 2026 22:01:07 +0000
Manifest next update: Thu 27 Aug 2026 22:01:07 +0000
Files and hashes: 1: 2KLLv_WqZTaDq2FaYycYHDCSxZ0.crl (hash: w0TS7WN9B8+YmsKw3YxJdU/O9lxq33rijItJrv7fMs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KLLv_WqZTaDq2FaYycYHDCSxZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:5c:f2:d4:b8:19:3b:84:7f:e6:a5:6a:98:e2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a2cbbff5aa653683ab615a6327181c3092c59d
Validity
Not Before: Aug 26 22:01:07 2026 GMT
Not After : Aug 27 22:01:07 2026 GMT
Subject: CN=cf8a581cb8157a08015ed82d2b23deb2f797bc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:8e:d6:8e:2f:43:f8:29:d4:e0:fb:16:b2:
f6:4a:a8:b2:4b:e4:60:42:c6:72:84:78:e1:9e:0e:
e6:4e:18:98:88:1a:20:00:e5:4e:87:0c:26:a4:16:
db:b6:a5:f0:b3:39:f6:a6:c2:35:86:d8:1d:fd:72:
53:54:cd:21:27:3a:4a:22:9d:9e:d1:46:0c:14:1e:
77:50:9a:42:e6:39:dc:cb:d3:f6:75:dd:17:9b:a2:
4d:fd:1d:25:1f:1b:e5:e4:36:f9:72:4c:c5:4a:c4:
58:90:8c:89:72:2d:cf:42:83:49:a1:b4:c8:02:aa:
3b:7d:ae:b1:d0:e2:3c:ba:c2:cd:b2:ba:f1:66:30:
0b:60:fa:01:f6:3c:bd:29:3b:08:d6:6c:1c:b9:a8:
ca:e1:c3:1a:53:5a:13:e1:6f:34:bc:dd:71:71:11:
dc:e9:57:ce:68:a1:8b:83:7b:c7:30:1d:e0:b4:08:
ea:ec:4a:5c:34:b0:c7:be:f5:fb:91:f3:20:7b:6e:
5c:cc:45:e0:3e:dc:68:cf:a0:d3:f3:a2:3d:9e:cb:
c7:32:e3:0b:5a:d4:e1:af:a4:4e:54:36:82:a7:82:
16:5c:17:65:98:ad:79:5f:2b:01:b4:98:36:4a:0b:
24:40:5b:6f:8c:74:52:68:54:4d:1f:d9:d3:c7:00:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8A:58:1C:B8:15:7A:08:01:5E:D8:2D:2B:23:DE:B2:F7:97:BC:45
X509v3 Authority Key Identifier:
keyid:D8:A2:CB:BF:F5:AA:65:36:83:AB:61:5A:63:27:18:1C:30:92:C5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KLLv_WqZTaDq2FaYycYHDCSxZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/845a0a-2a26-4bb8-97e3-952ba6f75513/1/2KLLv_WqZTaDq2FaYycYHDCSxZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8c:75:80:cf:d7:9a:5e:b9:e7:f3:02:c0:1b:77:1b:71:91:
33:ec:b0:16:59:dd:cc:e0:a9:0d:e9:1d:b4:a8:db:17:c0:28:
77:ad:4b:2f:56:2a:ad:a7:e9:09:65:28:b9:41:cc:d7:24:b4:
51:de:56:e7:6a:68:6f:b1:28:9b:78:6b:3e:a9:8d:09:39:97:
b0:8e:a3:b6:99:c5:19:97:21:8e:11:e3:ee:68:31:79:be:a6:
90:31:1d:7d:48:ff:29:bc:87:d0:03:1d:46:f6:75:f3:af:79:
e1:80:8b:97:61:56:58:b2:41:58:49:71:eb:31:55:4d:30:78:
a9:1a:1f:99:4e:c8:8a:d9:74:ab:ee:87:a0:9b:0e:84:6d:b1:
a0:ef:9d:01:37:4d:45:c6:a9:ff:ff:83:1f:25:41:43:04:39:
d7:57:9e:91:cf:ca:ec:2b:c8:e4:c0:cf:2c:69:4f:fb:33:90:
63:5a:0e:27:b9:e4:69:4f:3f:45:75:40:11:2b:db:f3:87:0f:
23:39:74:44:b6:f5:50:1c:42:93:4b:73:72:c1:6e:7f:0a:7a:
d7:3e:23:35:24:0b:95:23:5d:3d:2d:4f:27:77:2c:4c:39:7c:
33:42:74:46:6d:f2:cc:fb:9e:ed:e5:e5:bc:6b:9f:4c:3c:e5:
b2:f7:d7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:15 2026 by rpki-client