Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
File: 2lNAluw_e_xU1lT84PAWitlmIs0.mft (raw, json)
Hash identifier: XQmJ6Hf0+S636GquQfJsazTK8hXdcNbblSkyQIsk0gU=
Subject key identifier: 2E:F7:5B:3D:0A:AF:02:76:89:6E:EA:E3:4B:BB:63:E2:7B:E8:D3:55
Authority key identifier: DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
Certificate issuer: /CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Certificate serial: 01A13D4A713E19891A2A50B41246B03D0CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
Manifest number: 0809
Signing time: Thu 15 Oct 2026 02:00:51 +0000
Manifest this update: Thu 15 Oct 2026 02:00:51 +0000
Manifest next update: Fri 16 Oct 2026 02:00:51 +0000
Files and hashes: 1: 2lNAluw_e_xU1lT84PAWitlmIs0.crl (hash: Ia5klfLBWU7idup7XkZ0KOeKkZp5JKhtDSj4ct0EBvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:71:3e:19:89:1a:2a:50:b4:12:46:b0:3d:0c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da534096ec3f7bfc54d654fce0f0168ad96622cd
Validity
Not Before: Oct 15 02:00:51 2026 GMT
Not After : Oct 16 02:00:51 2026 GMT
Subject: CN=2ef75b3d0aaf0276896eeae34bbb63e27be8d355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:38:7c:4c:bc:fa:38:6e:af:fe:26:3d:47:
b5:f7:4e:2c:37:c1:d3:c1:0b:09:7e:46:89:82:b4:
52:d8:d1:5c:6f:c9:b2:04:86:bb:1e:b6:eb:6c:99:
be:f5:9e:64:e7:24:b3:7a:b4:49:7c:63:5c:34:f3:
9b:83:41:67:65:d5:5c:6f:5f:ab:1b:f1:73:03:5a:
30:e3:4f:5c:21:b2:e0:c3:a4:08:71:18:b9:33:5f:
d0:52:7c:3d:57:89:1e:ce:41:b3:db:1f:21:f0:98:
74:3e:be:e8:65:f3:20:82:76:8e:89:31:62:22:7b:
64:11:84:4c:42:81:07:75:9d:72:51:b2:74:b1:dc:
a1:44:97:56:2d:a6:33:8f:ae:6c:8b:bc:36:9b:1a:
4d:28:dd:d3:36:0b:6e:0f:ec:45:e1:18:c0:88:c9:
ee:56:e2:43:fe:b9:09:91:95:d6:95:92:04:47:10:
96:af:e9:ec:46:c6:f2:38:cd:8e:56:64:8a:7d:68:
c0:e2:33:1a:48:eb:04:63:1c:4f:eb:bb:51:90:12:
37:16:9a:95:cf:f7:73:27:d0:6c:fe:0c:58:1b:c4:
33:cf:de:e4:dd:2a:08:14:22:4c:a9:c9:63:22:af:
32:fe:54:ab:5a:67:9b:f3:2b:62:8b:ef:d5:3c:3d:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F7:5B:3D:0A:AF:02:76:89:6E:EA:E3:4B:BB:63:E2:7B:E8:D3:55
X509v3 Authority Key Identifier:
keyid:DA:53:40:96:EC:3F:7B:FC:54:D6:54:FC:E0:F0:16:8A:D9:66:22:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lNAluw_e_xU1lT84PAWitlmIs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4052b5-b59e-433f-87aa-86f2a1af4d79/1/2lNAluw_e_xU1lT84PAWitlmIs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fe:52:69:6c:d6:c2:a1:cc:60:2e:79:bc:5c:17:a4:63:aa:
8d:e5:5f:5c:54:50:fb:78:a7:b6:91:28:54:65:fc:42:aa:e4:
4e:41:0f:87:2b:9e:e0:f0:99:dd:f2:ba:1e:a4:87:5d:fd:76:
6d:8c:13:6b:c9:8f:e2:06:58:99:34:11:5f:1b:77:5f:f0:89:
b7:4a:b3:46:65:98:c9:1c:13:70:15:ca:71:9e:d9:aa:48:05:
39:67:66:aa:86:e0:e0:57:de:96:cc:61:dc:b6:a9:68:d2:9c:
4f:71:43:59:be:85:a1:fb:af:56:ca:60:ed:2d:49:45:aa:84:
9e:b0:17:42:54:cf:23:73:81:91:49:c5:68:74:61:a8:66:7a:
00:00:c9:75:9b:be:bb:42:c2:7c:e6:7b:34:93:36:be:ae:aa:
6d:00:2c:e3:25:2d:64:b0:88:8c:a3:4f:03:b4:8d:63:b4:46:
71:8f:86:5f:3f:1f:bb:0d:01:d7:5b:20:de:a9:01:af:9b:e8:
68:25:9f:77:27:70:2f:47:09:42:47:0b:2a:7b:d9:a5:74:93:
28:9f:e9:64:fd:13:cb:80:d9:49:6a:c8:d7:f1:5e:d1:f6:c0:
bd:69:3e:06:07:f5:e5:65:b3:f6:af:e6:bd:3f:27:be:0b:4e:
b8:e9:90:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:52 2026 by rpki-client