Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
File: Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft (raw, json)
Hash identifier: qOIHSosSD5oMoOD/gkVXPvjInI7/QFgUjKkmhg5OlVw=
Subject key identifier: B5:C6:B7:07:2B:21:1B:06:B6:5D:31:D4:C8:88:80:B7:0C:4B:C2:F0
Authority key identifier: 32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
Certificate issuer: /CN=324d9d8b0504555676b918ee391dc153a987e38a
Certificate serial: 01A16834BC760EFD082660F54E9298D5D02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
Manifest number: 14DE
Signing time: Fri 23 Oct 2026 10:00:48 +0000
Manifest this update: Fri 23 Oct 2026 10:00:48 +0000
Manifest next update: Sat 24 Oct 2026 10:00:48 +0000
Files and hashes: 1: Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl (hash: MoYcKIb0ALRuNPkyZ8MgbpVDq7nFqAPH2pMEHnQzjLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:34:bc:76:0e:fd:08:26:60:f5:4e:92:98:d5:d0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324d9d8b0504555676b918ee391dc153a987e38a
Validity
Not Before: Oct 23 10:00:48 2026 GMT
Not After : Oct 24 10:00:48 2026 GMT
Subject: CN=b5c6b7072b211b06b65d31d4c88880b70c4bc2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:e7:d7:f0:b8:d4:ba:37:a0:dd:bd:56:70:
a4:38:5c:21:62:d8:63:d2:4d:b3:7f:c7:a7:25:69:
b1:39:e2:5d:a9:7d:a7:31:e5:41:a3:71:30:c7:da:
1b:d8:c6:ee:28:91:43:44:ec:73:4b:05:46:d5:87:
ad:84:40:52:40:28:5c:77:47:47:1e:c7:85:2e:6d:
ec:c8:03:1f:bb:ce:8c:33:21:4f:43:21:2a:57:c8:
25:6a:be:77:e5:ff:ef:d6:54:b7:b7:8f:75:91:f2:
ab:94:ca:9c:b4:5c:02:53:bf:c2:40:b0:17:07:4f:
13:2e:4a:35:9a:b2:d5:8d:ae:75:33:dc:55:e6:ec:
36:99:a0:a6:41:ee:1d:2a:81:dc:1e:e8:60:64:e9:
4a:89:86:e4:89:c2:7b:dc:26:0c:78:46:54:47:d0:
b3:37:19:be:27:dd:4d:86:cd:5e:6e:c5:8f:e3:13:
d2:21:bf:8c:49:bf:40:61:82:07:0c:03:3d:40:03:
48:42:ae:f8:f5:0f:95:8e:a8:70:35:06:6e:46:fc:
d1:52:a9:1d:d5:8f:41:9b:a4:35:47:cf:2e:af:c0:
8f:65:63:0b:27:8c:7a:68:38:7e:dd:38:cc:0e:2b:
57:3c:db:15:5e:07:df:b8:49:ec:2b:19:59:09:7e:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:B7:07:2B:21:1B:06:B6:5D:31:D4:C8:88:80:B7:0C:4B:C2:F0
X509v3 Authority Key Identifier:
keyid:32:4D:9D:8B:05:04:55:56:76:B9:18:EE:39:1D:C1:53:A9:87:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk2diwUEVVZ2uRjuOR3BU6mH44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16eb03-414a-4852-81da-db261aa46f21/1/Mk2diwUEVVZ2uRjuOR3BU6mH44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:58:2d:0f:a3:28:b0:f3:81:fc:2b:04:45:48:61:b6:3b:a7:
a8:61:84:b0:0c:49:e3:0f:67:d1:cd:52:72:e0:95:24:95:1e:
b5:d1:d3:57:ac:7c:57:8d:90:fe:24:0d:7a:9e:ff:9d:ea:e3:
eb:53:8b:b6:63:56:13:b2:a6:23:51:d9:5b:c1:8a:ae:8d:f5:
15:5b:a9:bb:40:a0:24:82:0e:42:59:b9:94:1c:bd:0c:07:55:
4e:c4:2e:be:b6:eb:83:de:44:ee:23:ad:e5:8b:c3:ab:b1:e1:
2b:90:dc:ad:36:a7:16:7f:01:d0:23:24:6e:f1:9b:e9:2b:8c:
9a:1a:f9:64:35:81:2c:43:2e:63:e8:d5:fd:72:8b:d5:e0:9b:
50:5b:b5:5c:61:00:97:48:1b:94:83:e7:c9:4c:c0:a9:8e:26:
e6:c7:c4:08:6f:d1:57:52:42:c3:72:83:0e:ad:99:2c:c6:3e:
d2:4a:02:f9:58:45:e3:c6:8d:1f:63:f4:8d:19:e7:12:07:d0:
ae:a3:f3:6e:eb:78:c8:61:bc:02:e3:a2:5f:bb:db:7c:51:e9:
fb:d0:8c:e5:e7:c8:9a:1f:a3:08:73:b8:84:8e:56:28:67:e2:
eb:89:76:de:7a:cf:6d:50:57:5c:54:61:58:b2:3a:6b:a5:75:
83:c1:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:16:48 2026 by rpki-client