Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: w6EqKfB8Choc4CN8yuWH2rSkSe1zhJK6U+39LYTpmKA=
Subject key identifier: 70:01:D0:96:47:DB:6D:70:BE:A1:29:17:20:1D:4F:A5:B3:1F:C4:98
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 01A0009394D4624259D05BD0A1FBA47340A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 0765
Signing time: Fri 14 Aug 2026 14:01:06 +0000
Manifest this update: Fri 14 Aug 2026 14:01:06 +0000
Manifest next update: Sat 15 Aug 2026 14:01:06 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: Xb9HwhtYDVe0ef3+Hke3xLtpebgLnXw7bSas6nTxzZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:94:d4:62:42:59:d0:5b:d0:a1:fb:a4:73:40:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Aug 14 14:01:06 2026 GMT
Not After : Aug 15 14:01:06 2026 GMT
Subject: CN=7001d09647db6d70bea12917201d4fa5b31fc498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:87:48:48:74:eb:59:5f:90:f8:ba:d2:23:
c5:b1:fa:51:3c:ae:3e:5b:86:aa:98:fa:70:b3:46:
63:d0:69:15:7d:64:12:d8:8f:a1:6a:5d:11:cb:db:
48:86:9f:c7:0d:75:ad:e5:41:cb:8e:59:53:4b:4f:
b1:f2:90:74:cc:8f:37:d9:fb:cb:1c:56:df:2b:62:
c3:c4:1c:b9:b5:88:53:ff:70:30:c7:79:ff:97:a4:
ba:c6:a0:75:fc:0a:46:c2:76:29:ab:e5:85:64:b2:
4e:8a:f6:28:06:c9:d0:aa:76:35:83:b6:1b:30:50:
73:b7:b8:2a:70:dd:22:69:e2:c7:71:dd:e4:50:34:
a1:ec:ed:8c:36:8d:5f:b9:f3:87:8a:37:55:b8:44:
4a:d4:63:1b:3b:9a:13:c7:96:66:88:f5:3e:ec:ce:
d7:b8:52:df:89:24:50:91:87:2a:ff:05:70:03:c4:
79:8c:67:99:b9:a1:02:5f:ae:4f:28:16:da:a3:63:
d2:5e:14:7c:3d:e5:89:e4:12:9c:fb:d8:ac:74:95:
22:15:a8:fc:dd:b9:ac:b2:4b:9a:e4:71:fe:3f:8c:
68:de:53:dc:52:ee:64:0e:fa:f5:97:55:8b:25:b9:
fb:d5:53:c7:5a:37:c3:79:68:ff:d1:a2:a2:88:66:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:01:D0:96:47:DB:6D:70:BE:A1:29:17:20:1D:4F:A5:B3:1F:C4:98
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:01:fd:0b:38:e6:97:c9:d2:86:17:73:1d:d0:f6:97:dc:3a:
c0:7e:72:8f:4e:a9:47:5e:9b:88:4b:80:ff:88:5c:33:d8:ae:
63:07:64:2e:d5:30:40:71:80:e1:15:b7:3a:e6:c0:56:4d:29:
b0:9a:63:86:b4:3d:40:a9:17:94:90:10:68:29:23:84:92:a9:
b9:05:0f:a0:97:3d:fd:71:39:bd:68:9e:64:84:6d:6e:d4:9b:
86:6a:60:d0:40:9c:3e:a9:ac:5c:24:fc:3e:3b:1e:97:ab:b5:
90:37:b0:5a:18:70:e0:35:dd:49:81:36:b2:33:bf:f3:47:e3:
20:dc:e0:a8:37:6e:62:19:a5:3d:24:75:dd:86:0c:55:ff:2d:
ac:3c:d5:96:51:b6:78:1c:ab:12:f3:c5:e3:84:89:e8:b1:d1:
a6:65:53:48:2c:1d:4c:77:c6:9c:08:6f:08:de:03:94:6d:42:
f3:62:e0:cf:44:39:3e:14:7d:f2:8c:1b:b8:5e:29:0a:0e:3c:
2e:20:7e:4d:87:fd:31:54:24:ec:b8:5e:7e:93:a6:2c:17:1a:
19:ca:12:d3:e9:23:cc:8d:fb:5b:36:c7:73:ed:ce:95:60:b2:
92:2b:fb:08:3c:00:05:0a:e6:d1:2b:b7:dc:6d:27:71:ea:98:
aa:ea:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:44 2026 by rpki-client