Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
File: 2LlxoaILZPFCUYAfj0NKQHX36pE.mft (raw, json)
Hash identifier: l/hG2PII055iB9lMCAM789TeguRofIX/mMUUmKC0Wjg=
Subject key identifier: 83:09:F3:45:98:C7:17:AF:8D:9A:BE:6A:74:92:22:9B:8B:37:B6:7C
Authority key identifier: D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
Certificate issuer: /CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Certificate serial: 01A0013861A5587F8031C1A433699C8FA109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
Manifest number: 06AF
Signing time: Fri 14 Aug 2026 17:01:07 +0000
Manifest this update: Fri 14 Aug 2026 17:01:07 +0000
Manifest next update: Sat 15 Aug 2026 17:01:07 +0000
Files and hashes: 1: 2LlxoaILZPFCUYAfj0NKQHX36pE.crl (hash: s6VY61Ud9Cpeh7U4+XoDDBIlXU0jfntxgBl/gkjWWd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:61:a5:58:7f:80:31:c1:a4:33:69:9c:8f:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b971a1a20b64f14251801f8f434a4075f7ea91
Validity
Not Before: Aug 14 17:01:07 2026 GMT
Not After : Aug 15 17:01:07 2026 GMT
Subject: CN=8309f34598c717af8d9abe6a7492229b8b37b67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:4b:b3:8d:71:d5:f9:95:66:67:04:83:03:
73:0c:ce:4b:d2:e6:a4:d0:50:28:2d:1d:6e:32:9a:
53:ed:b9:39:b6:ab:4f:f9:3b:81:53:f1:72:54:fa:
d6:c5:d5:78:3e:d5:bb:67:a3:a0:11:45:5d:bf:11:
7f:3d:a3:02:8c:5d:1b:02:9f:ea:e3:a9:19:68:0e:
68:72:1f:25:3a:ba:21:0c:53:5b:fc:a0:50:b4:6d:
5d:1a:a7:31:11:66:f1:e2:cc:b3:bb:2c:d2:09:ad:
3f:8b:16:f7:d0:66:07:89:10:22:f5:81:f1:96:b4:
cb:dd:ae:30:c3:9e:81:02:91:cc:92:2c:91:1c:28:
9b:63:50:1b:74:e8:db:65:e8:b1:0a:8b:5e:f0:4f:
59:ba:b9:e3:fd:48:e5:2c:fc:4f:6d:20:7a:bc:17:
07:0e:d8:21:e5:5a:b0:5f:5f:b6:f3:f6:57:02:80:
20:22:37:7c:9a:04:71:38:73:30:68:55:8e:8b:eb:
0a:18:c2:81:0e:13:a8:88:e8:27:c4:dd:48:e2:ad:
e6:1b:4b:b7:f6:9e:f5:bd:52:fa:c5:bc:00:ef:e6:
fe:cc:4d:c6:49:06:25:ce:83:23:40:0f:7b:bb:63:
d6:74:45:1a:9e:3e:4b:b2:19:9a:7a:4d:4f:d4:fd:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:09:F3:45:98:C7:17:AF:8D:9A:BE:6A:74:92:22:9B:8B:37:B6:7C
X509v3 Authority Key Identifier:
keyid:D8:B9:71:A1:A2:0B:64:F1:42:51:80:1F:8F:43:4A:40:75:F7:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LlxoaILZPFCUYAfj0NKQHX36pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9bd669-2abb-499b-a91f-4445a4d786d4/1/2LlxoaILZPFCUYAfj0NKQHX36pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f4:dd:59:e0:2d:85:af:33:6b:da:4e:47:7d:e3:fa:4c:b1:
ee:7a:0a:3c:70:42:b3:ba:d3:34:76:5d:1d:72:cc:b8:86:36:
ce:70:b4:7b:1d:bc:dd:06:c4:0f:59:c2:6c:7e:03:0e:9e:69:
41:f2:88:70:03:62:a6:4b:5e:d7:22:32:60:e4:0e:8f:b8:23:
dc:73:a7:49:57:f7:28:b1:f2:4c:08:23:fe:17:f4:bc:0b:00:
1c:34:53:31:9d:a7:cf:c8:4e:3c:b0:35:b7:72:df:46:a0:5c:
07:be:d0:91:02:12:15:f8:09:07:a0:78:f1:b9:7d:4a:bf:1c:
63:da:e1:a3:8f:06:b7:22:2f:51:f6:af:b2:bc:1d:50:c9:c6:
ed:15:f0:3d:8d:3e:92:9c:bc:c9:7b:da:1b:12:26:e4:15:5d:
ba:32:82:ac:52:78:c8:8f:ba:5e:a7:f2:2c:9b:a2:aa:91:67:
35:f4:76:c6:29:a9:2d:07:5d:91:d9:00:4f:78:1b:59:9f:7e:
59:41:7e:24:21:0a:91:2d:d7:18:ba:fb:10:3e:ca:e1:04:5c:
d3:73:44:65:42:4d:2f:6e:50:75:00:77:af:01:72:55:03:f3:
d4:78:2d:cc:73:bb:75:39:d8:25:72:db:d7:0c:d6:65:24:44:
63:91:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:13 2026 by rpki-client