Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
File: 2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft (raw, json)
Hash identifier: Cci3HywYrpgCfLSZ1+R+OJ/i0Z3bBe6tjKuUIOyAkQY=
Subject key identifier: F4:2D:62:42:DD:9C:0C:99:8E:E7:CD:0B:7F:54:22:54:81:73:16:88
Authority key identifier: DB:23:CB:8D:0F:C9:F2:C7:29:E6:A5:6F:1B:E7:97:0D:19:D5:BE:E2
Certificate issuer: /CN=db23cb8d0fc9f2c729e6a56f1be7970d19d5bee2
Certificate serial: 01A04129CE89BBE4863D2DA9BA87D3CCB015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yPLjQ_J8scp5qVvG-eXDRnVvuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
Manifest number: 4B
Signing time: Thu 27 Aug 2026 03:00:53 +0000
Manifest this update: Thu 27 Aug 2026 03:00:53 +0000
Manifest next update: Fri 28 Aug 2026 03:00:53 +0000
Files and hashes: 1: 2yPLjQ_J8scp5qVvG-eXDRnVvuI.crl (hash: TLO3RvWvuccL3EnKsSzlQLoQ4mNLh+bNCz785Ui/NmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2yPLjQ_J8scp5qVvG-eXDRnVvuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:ce:89:bb:e4:86:3d:2d:a9:ba:87:d3:cc:b0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db23cb8d0fc9f2c729e6a56f1be7970d19d5bee2
Validity
Not Before: Aug 27 03:00:53 2026 GMT
Not After : Aug 28 03:00:53 2026 GMT
Subject: CN=f42d6242dd9c0c998ee7cd0b7f54225481731688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:23:df:dc:d6:81:a6:8e:5f:6f:54:ff:20:
24:7e:0a:dd:76:45:eb:11:a9:66:43:7e:d2:87:b9:
04:a4:62:38:b2:dd:b0:89:4f:4f:61:e6:e6:d5:6d:
8e:2d:e6:8f:9a:10:85:69:28:f2:73:57:49:9b:88:
b6:b8:29:5d:56:27:01:66:fa:6d:d8:34:a9:ea:ab:
e9:a4:62:48:0d:bc:4e:9a:a4:02:1a:85:fc:0f:44:
2b:74:83:e0:74:6c:b7:df:94:a5:f0:6f:db:e8:4e:
eb:3d:41:46:98:68:2b:68:cd:c5:fb:df:a7:5f:4a:
8b:96:70:0d:a4:91:8c:bd:cd:49:60:b4:f1:9e:d7:
56:06:62:e6:3b:54:34:43:5a:37:86:91:0e:61:95:
54:89:68:30:80:3c:4a:16:9f:91:0a:ad:de:e7:bf:
12:02:61:bc:dc:95:ee:93:72:c9:f4:21:85:a3:ae:
0d:24:7f:a4:a9:34:18:e0:35:c7:a5:91:d1:70:dd:
42:35:73:64:ad:1a:5e:d0:d3:1d:1a:d6:74:83:72:
a9:a6:19:67:96:72:38:a9:75:b9:d0:53:5f:e9:c3:
72:2e:7b:99:7b:0b:db:d5:55:35:67:e9:b3:3f:9b:
40:92:38:e4:54:c2:30:86:94:0f:88:5d:cd:1f:ec:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:62:42:DD:9C:0C:99:8E:E7:CD:0B:7F:54:22:54:81:73:16:88
X509v3 Authority Key Identifier:
keyid:DB:23:CB:8D:0F:C9:F2:C7:29:E6:A5:6F:1B:E7:97:0D:19:D5:BE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yPLjQ_J8scp5qVvG-eXDRnVvuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ef2a20-2603-4cf2-bf0d-953a7296c272/1/2yPLjQ_J8scp5qVvG-eXDRnVvuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c3:cb:12:d5:da:c0:83:2c:a5:5b:7f:e3:24:b0:a6:9a:5f:
c8:d1:fd:64:60:89:40:25:07:32:ff:d1:12:92:f4:ed:b7:58:
1f:e1:68:60:95:5c:40:44:18:46:17:2d:df:22:46:2d:ce:eb:
c2:74:88:3b:f7:83:f0:77:7b:b2:d2:e5:03:76:03:b4:27:fe:
a9:b4:94:47:38:3d:e5:ef:7d:19:1f:89:55:ee:3c:a4:77:1d:
33:19:65:d7:dc:fa:d0:5b:be:4a:22:8c:93:1a:b9:9a:2f:be:
c4:54:c8:1e:2f:ee:52:fc:41:4d:68:1c:5d:07:4a:27:85:b3:
ec:78:2d:45:7e:d6:45:5f:67:8e:0a:d2:3d:28:bf:f0:82:9c:
8a:fd:67:46:59:22:ec:32:ca:9e:39:f4:f4:1c:86:86:ed:02:
c2:23:00:c3:ab:f0:34:10:1c:73:8e:2b:80:39:01:a5:e6:c4:
41:99:a4:ba:fc:56:fe:a6:f5:50:25:e7:72:52:bf:4b:d5:65:
90:8e:65:73:f5:23:dd:ec:9e:e3:83:42:b1:86:5a:30:d1:63:
64:db:89:38:25:b8:64:17:11:67:7e:20:69:3a:7c:43:03:6f:
34:0d:10:02:43:89:c1:be:d5:86:c0:dd:73:2a:4c:92:c0:8a:
19:ac:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:23:21 2026 by rpki-client