Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
File: 2xqlqI_mUM51-73mL66AzGIz3Ms.mft (raw, json)
Hash identifier: 70n6+wTMD4GXaDAkXKoaC/7kAnqbkxojkHULUmi6VQM=
Subject key identifier: B8:8B:2B:9A:1B:A9:8C:CB:70:40:FB:5D:8E:01:30:6C:17:05:52:A0
Authority key identifier: DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
Certificate issuer: /CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Certificate serial: 01A14195D1249DC0CD1C9A5F591A18755E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
Manifest number: 13AB
Signing time: Thu 15 Oct 2026 22:01:39 +0000
Manifest this update: Thu 15 Oct 2026 22:01:39 +0000
Manifest next update: Fri 16 Oct 2026 22:01:39 +0000
Files and hashes: 1: 2xqlqI_mUM51-73mL66AzGIz3Ms.crl (hash: idmvfwaOxHA41ugu99m5uKIahE7L6C4fwOHBY9P+ouM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:d1:24:9d:c0:cd:1c:9a:5f:59:1a:18:75:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1aa5a88fe650ce75fbbde62fae80cc6233dccb
Validity
Not Before: Oct 15 22:01:39 2026 GMT
Not After : Oct 16 22:01:39 2026 GMT
Subject: CN=b88b2b9a1ba98ccb7040fb5d8e01306c170552a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:ab:d7:8c:a2:d2:a0:43:1e:93:8a:bf:d6:
52:b5:2d:c4:be:13:cd:8b:c6:e8:d0:61:1f:be:7f:
0b:f2:91:d0:0d:88:2a:c4:aa:f4:8c:fb:8b:cf:f8:
fa:f5:54:b8:80:5e:f6:a1:bc:c7:07:28:25:e6:c3:
55:51:be:64:1e:04:c2:bb:9d:86:ea:5c:5f:d5:7f:
8d:42:8b:96:41:58:1f:ce:88:c0:bc:2f:b8:ba:4e:
e8:c3:53:b3:9f:2a:39:6a:35:b2:1e:63:e3:ed:c7:
ad:55:dc:42:d6:a4:f3:0a:02:13:ca:6e:d7:ab:fe:
95:52:39:a3:cd:cb:f6:c5:6a:aa:9f:11:22:92:34:
b6:75:cb:ce:c5:33:8a:8d:65:37:ad:b0:9f:98:b4:
cc:72:c3:f7:d0:1e:73:eb:24:7e:c1:2b:7d:0c:20:
ff:1a:50:fa:47:10:55:d8:dc:2a:b6:0a:b2:64:a9:
5d:ad:ca:ae:c5:a2:5d:0b:bd:cd:9e:aa:2d:d2:53:
96:93:53:c5:42:40:cc:fa:18:3a:7b:de:76:de:af:
4b:db:91:38:f4:39:1b:f5:bd:c5:13:74:d1:78:d7:
cd:93:16:c7:60:76:7a:67:03:5f:dc:50:d5:17:4e:
93:5b:00:cc:70:28:7e:85:a3:d1:75:41:9a:ed:2d:
89:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:2B:9A:1B:A9:8C:CB:70:40:FB:5D:8E:01:30:6C:17:05:52:A0
X509v3 Authority Key Identifier:
keyid:DB:1A:A5:A8:8F:E6:50:CE:75:FB:BD:E6:2F:AE:80:CC:62:33:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xqlqI_mUM51-73mL66AzGIz3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7db3b8-9863-49bb-90f0-d5bdcb630177/1/2xqlqI_mUM51-73mL66AzGIz3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:2f:26:dd:a7:5d:6c:f7:73:60:f0:33:2d:18:72:09:64:
5b:60:99:cd:15:3c:7c:71:62:3a:f3:1f:7e:5d:06:fb:07:ba:
34:b8:fe:b0:ae:cb:20:94:f2:90:a9:62:a6:f6:18:f0:55:e8:
9a:65:64:9f:6e:93:ec:72:db:c1:ee:cb:71:78:de:14:23:96:
9b:a1:37:58:e4:5e:ed:67:44:11:77:24:a3:ec:7f:4c:80:fd:
45:48:73:08:dd:4c:d0:6e:32:27:ed:93:62:08:ce:f0:56:ab:
f4:9d:b9:73:71:45:b2:22:7a:d7:9a:1d:2e:62:5e:42:4c:5b:
77:dd:71:5a:5d:76:8d:97:00:d5:52:b7:f8:5b:0d:50:1d:c6:
dd:75:d8:1c:02:1a:a5:bd:d5:de:7f:ad:04:82:10:e5:ce:be:
14:c5:d7:62:43:44:f4:85:8f:a5:6b:6c:43:f4:a3:9b:c2:a7:
d8:8f:3e:8d:1a:d4:9f:81:4f:86:ff:45:2e:0f:81:53:6c:0d:
44:58:c1:4c:c9:38:aa:9d:b0:78:85:3a:91:6b:03:63:92:b1:
fa:60:25:83:3e:86:fc:5b:a5:4c:0b:59:ea:b3:5b:98:da:94:
50:47:04:98:ce:e2:50:64:8f:66:72:07:78:0a:b4:9a:94:f7:
b9:f0:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:38:49 2026 by rpki-client