Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
File: 2muiKY_gnTGl_1TyuBbEAVAtu_8.mft (raw, json)
Hash identifier: bOYowyue88mPtaDW1L1uyUA1B+CqPm2gL7eNzppcJJk=
Subject key identifier: AE:21:40:D2:90:6D:38:0E:B1:4B:90:CF:C5:AA:C1:6C:D1:D7:EF:09
Authority key identifier: DA:6B:A2:29:8F:E0:9D:31:A5:FF:54:F2:B8:16:C4:01:50:2D:BB:FF
Certificate issuer: /CN=da6ba2298fe09d31a5ff54f2b816c401502dbbff
Certificate serial: 01A0404E837E3B61D0142D6C2C4E00A12FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2muiKY_gnTGl_1TyuBbEAVAtu_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:22 +0000
Manifest this update: Wed 26 Aug 2026 23:01:22 +0000
Manifest next update: Thu 27 Aug 2026 23:01:22 +0000
Files and hashes: 1: 2muiKY_gnTGl_1TyuBbEAVAtu_8.crl (hash: lsrsg25HEqCXCLEi8m4RweoEwP9qpxiLP1FwPgPuSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2muiKY_gnTGl_1TyuBbEAVAtu_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:83:7e:3b:61:d0:14:2d:6c:2c:4e:00:a1:2f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6ba2298fe09d31a5ff54f2b816c401502dbbff
Validity
Not Before: Aug 26 23:01:22 2026 GMT
Not After : Aug 27 23:01:22 2026 GMT
Subject: CN=ae2140d2906d380eb14b90cfc5aac16cd1d7ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:fb:5d:33:7d:89:24:0b:bc:20:13:b8:3c:
c7:7c:06:bc:da:5c:98:3e:fc:81:da:d5:fd:02:86:
77:19:3e:5f:77:fa:44:6d:dd:33:01:eb:bb:3c:18:
9a:f9:54:7a:b9:d4:99:fa:30:b8:6b:60:2e:29:ba:
0a:a7:80:78:1e:4b:88:53:ef:30:8c:24:d2:94:b1:
32:94:35:a5:5a:38:ce:28:2a:4f:0a:a4:78:60:d2:
ff:6b:76:16:f4:85:ec:ad:26:49:2a:56:8f:70:d8:
dc:c5:cd:42:db:6f:90:97:28:ad:99:62:eb:55:f0:
5d:bd:88:74:8c:19:d1:3e:09:c0:31:a3:77:6c:b4:
3b:51:dc:01:4e:87:c5:37:ae:68:79:9c:d0:da:b0:
f0:e3:03:ac:a3:2a:93:1e:4c:51:15:5d:33:bc:25:
09:ef:b0:83:6b:1b:ca:94:00:f5:22:15:04:bd:c8:
71:4e:43:d7:4f:2c:e5:cc:22:3a:0a:05:2b:e1:3a:
83:61:ff:64:b1:4e:5c:d3:01:de:38:97:b5:3c:76:
07:41:3c:d0:3c:e3:13:6b:60:be:28:c2:4f:0c:ad:
fa:40:4b:e2:94:66:a1:25:2f:1b:27:59:37:ac:dc:
03:f5:e6:9f:5e:9f:04:8d:75:e8:23:63:8c:3b:3b:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:40:D2:90:6D:38:0E:B1:4B:90:CF:C5:AA:C1:6C:D1:D7:EF:09
X509v3 Authority Key Identifier:
keyid:DA:6B:A2:29:8F:E0:9D:31:A5:FF:54:F2:B8:16:C4:01:50:2D:BB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2muiKY_gnTGl_1TyuBbEAVAtu_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/2muiKY_gnTGl_1TyuBbEAVAtu_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d1:cd:fc:70:3e:da:c9:7e:cf:ce:dc:77:bd:cc:fb:ee:9f:
ca:9b:0f:6a:52:dd:84:41:11:dd:c0:2d:77:15:0b:6f:e8:4c:
b7:02:4d:c0:31:ce:a1:51:5a:17:d1:87:b2:46:d8:47:c7:b7:
de:43:ea:0e:7b:96:e8:de:c1:f7:f0:da:a2:a5:3a:56:5d:fa:
3b:8b:9b:37:62:ed:8d:3b:4b:a2:52:a3:6a:ff:8a:42:1b:15:
69:9b:71:ef:e3:15:b8:d9:12:35:e6:0a:a2:7b:e3:99:4d:2d:
06:0c:ef:97:27:b0:54:f0:d8:26:1c:ca:d0:c8:00:c6:a3:7d:
8f:20:ff:1b:5c:79:5d:03:f0:20:86:76:00:80:4e:f6:1a:69:
1d:59:d0:0d:91:7d:18:84:62:95:84:0e:bb:1a:57:f7:45:19:
ad:88:4e:92:98:16:4f:88:93:6a:17:37:45:d7:d1:99:fc:2e:
6e:9e:0c:9f:ea:e2:32:6e:fd:e4:88:74:d7:f8:fb:2a:8d:33:
7f:53:75:c0:10:95:43:12:6e:4a:60:ed:5d:5d:e1:f3:83:5c:
df:80:e2:a3:ff:47:dd:5a:a6:15:50:d8:d3:39:e1:46:a9:23:
ce:59:88:2d:04:d4:06:14:1f:e5:3e:60:35:8c:c5:c5:27:57:
7a:2d:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:45:59 2026 by rpki-client