Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: 3KNIen4+zwT+mVgYiuPC6aHWVsmhN1MPJ6bFd8QFygI=
Subject key identifier: C5:59:A8:3B:EA:8F:BB:8F:A9:54:BE:E6:07:40:CA:F3:1B:15:D1:A3
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 01A13FDE4660AE67852730E14F7C3C42A068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 0754
Signing time: Thu 15 Oct 2026 14:01:33 +0000
Manifest this update: Thu 15 Oct 2026 14:01:33 +0000
Manifest next update: Fri 16 Oct 2026 14:01:33 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: sdXp3n4dfI2uj7txbIQDkNROMwcC7r1/DgGGD/z2D6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:46:60:ae:67:85:27:30:e1:4f:7c:3c:42:a0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Oct 15 14:01:33 2026 GMT
Not After : Oct 16 14:01:33 2026 GMT
Subject: CN=c559a83bea8fbb8fa954bee60740caf31b15d1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:f8:9c:b7:75:2d:5d:39:ea:de:81:7c:22:
c3:93:37:d6:6c:99:b0:f0:e6:75:48:f6:74:1c:b5:
7f:8a:49:ec:d9:64:8f:99:8d:36:6c:fe:3e:43:e1:
b6:09:48:53:cd:45:e9:4e:c6:aa:5c:37:43:d2:f8:
f1:5a:58:0e:b4:9f:c4:18:5b:55:44:89:de:1b:61:
3b:eb:b8:31:82:4a:e8:8d:dd:1e:1b:a2:77:d0:9c:
75:d5:cd:ce:cf:a3:7b:8c:02:a4:a4:2c:79:15:c0:
f1:9f:07:c8:b1:be:ab:f1:3d:7c:78:70:1f:0d:22:
2e:49:df:42:74:84:64:c5:64:2d:6f:86:f6:00:65:
cb:5f:e7:32:d1:eb:91:55:7c:04:48:74:a5:7b:6e:
65:7a:b9:53:54:3f:c1:9f:41:e0:0d:23:e1:53:07:
fc:0d:88:9c:a1:24:e5:87:60:f8:d2:6c:49:74:40:
80:97:0c:ab:7d:54:5d:7b:3c:74:54:25:1b:ba:10:
12:ed:0f:66:28:da:17:cb:e6:25:6f:44:d9:34:d7:
0d:45:86:87:93:99:f9:19:ba:ca:b3:e7:91:2e:32:
df:5e:8a:63:2f:b0:36:ce:45:4b:38:a7:81:6d:25:
c7:4f:7a:aa:0d:55:d2:6f:ee:66:cf:67:5d:96:a4:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:A8:3B:EA:8F:BB:8F:A9:54:BE:E6:07:40:CA:F3:1B:15:D1:A3
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:03:9f:26:68:b0:72:5f:f2:75:30:1f:06:5a:c4:a0:62:88:
97:81:4b:b3:1c:c0:26:16:f6:da:41:d2:97:3e:c9:58:3b:8c:
ba:8f:6f:db:7b:06:b6:1c:96:6d:13:a1:65:97:a7:2d:50:cb:
2b:91:88:74:ab:bb:8a:cc:0c:38:14:09:ce:0e:8d:d4:31:e7:
3d:95:3a:58:70:2e:9d:6f:97:6e:b8:e8:3d:1d:c2:dd:aa:71:
37:55:be:6f:d3:ca:18:40:c4:75:67:52:db:bf:d1:41:2f:f5:
fd:00:44:bb:db:2d:90:b8:d4:7a:36:70:be:a4:91:6c:1e:72:
b6:9d:a1:01:44:15:9e:f1:b0:b0:a7:d1:64:fb:c7:55:b2:cd:
a5:d4:5e:bc:0b:69:52:78:ee:b5:e8:e8:56:75:f9:50:11:06:
7d:5b:b4:01:d0:3d:46:55:09:11:c6:3e:93:1b:f4:ca:64:d6:
c3:8c:b4:54:2f:0a:7e:7f:5a:25:bb:d6:46:bc:d6:13:31:22:
c6:21:d7:7f:65:ce:eb:4f:c6:55:22:c5:14:bf:8b:3f:e1:a2:
fc:ec:a1:88:3b:87:0b:f3:b6:44:26:b2:16:25:d0:8f:cf:b6:
17:d5:80:2b:5a:f2:99:9b:21:ac:20:a2:e9:62:de:d0:2c:1d:
65:c6:39:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:22:20 2026 by rpki-client