Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
File: 2lPr-vXBh42KIqk44XMqigdxTzU.mft (raw, json)
Hash identifier: QkjdtSGYkWyUliUkCPM+vET6xF8cZHU71MP0fAg0iSs=
Subject key identifier: 43:3F:CC:2F:40:9F:73:23:5F:48:59:50:02:C1:50:D0:A6:12:CB:59
Authority key identifier: DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
Certificate issuer: /CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Certificate serial: 01A13D1347387254323A93C089159143728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 01:00:35 +0000
Manifest this update: Thu 15 Oct 2026 01:00:35 +0000
Manifest next update: Fri 16 Oct 2026 01:00:35 +0000
Files and hashes: 1: 2lPr-vXBh42KIqk44XMqigdxTzU.crl (hash: ubpgj9ReeaMPgg2DQfB62L0mwpnWDhnPlP420wNY1nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:47:38:72:54:32:3a:93:c0:89:15:91:43:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Validity
Not Before: Oct 15 01:00:35 2026 GMT
Not After : Oct 16 01:00:35 2026 GMT
Subject: CN=433fcc2f409f73235f48595002c150d0a612cb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0e:08:ed:94:79:e7:37:1b:37:52:2a:52:cf:
5b:d0:30:1c:69:8a:a2:43:97:bc:38:73:36:e7:cb:
e7:b1:7f:30:90:37:6c:03:97:bb:94:75:2e:c4:1a:
49:01:cc:26:27:b2:7f:bb:2b:6f:c9:13:85:9c:0a:
ba:7d:d4:49:46:5e:4f:60:a3:0f:20:46:f5:78:87:
c1:a4:75:b0:07:f7:8a:6b:74:6b:e6:7c:25:1f:b6:
3f:79:19:2d:7f:30:a0:4e:ee:ff:7e:57:25:30:b0:
c1:07:6d:82:b5:4b:e4:8a:14:b0:69:11:77:c1:7d:
2d:ab:ee:f5:29:ee:54:39:99:96:80:4c:41:c9:e3:
10:42:10:db:55:26:ae:e0:1d:9f:61:bc:19:0e:34:
a8:36:11:f0:e4:70:47:ae:70:d2:4d:5b:a7:d9:5a:
8d:93:9c:77:66:7d:7e:ce:ca:a9:53:bd:c3:f9:22:
a3:32:42:1e:44:fb:08:a6:f9:d2:48:3d:4b:b2:68:
fe:e0:d4:56:2d:6c:7a:d2:86:33:15:4e:79:a2:81:
aa:aa:d9:10:b5:2f:2a:84:cf:eb:38:82:ac:f1:35:
53:99:48:b1:11:71:71:73:6d:aa:4c:01:f7:57:7f:
5f:c9:99:c7:b9:98:0d:f8:cf:f3:a0:59:e9:6a:e8:
ec:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3F:CC:2F:40:9F:73:23:5F:48:59:50:02:C1:50:D0:A6:12:CB:59
X509v3 Authority Key Identifier:
keyid:DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:72:68:47:43:09:a9:40:59:07:bf:c6:f8:b2:df:4d:75:e9:
34:c7:80:7f:6d:8e:83:27:b1:17:8f:ba:ab:23:aa:d5:a4:13:
4b:ce:7d:11:75:ca:63:4f:5b:53:ad:5d:ef:8e:b2:cf:48:3c:
9c:ad:7f:8f:c0:39:d8:77:f5:9c:04:cf:d0:6f:01:89:d6:53:
1a:5c:2b:54:1e:f5:10:cb:14:65:a1:47:de:c4:27:f0:fe:a9:
ba:20:b1:7b:75:4b:bb:92:5f:6c:dd:ee:f4:4e:4a:d4:f6:fe:
69:07:15:a1:06:07:e4:70:f2:5e:d5:af:f5:aa:28:9f:64:13:
9f:38:57:91:aa:14:98:a7:f4:3a:ab:29:09:9b:36:2f:32:5d:
b0:e8:dd:45:56:1b:f0:79:7e:06:e2:a1:9d:5b:80:16:63:ca:
1b:c5:dc:4f:cb:d7:50:26:47:da:bb:4b:1a:53:4d:16:50:0e:
22:0b:6e:f6:d4:a4:b7:ac:b7:0f:33:db:04:e3:73:04:1c:82:
88:b2:eb:8d:4c:45:01:fc:8b:34:95:12:42:67:6c:e3:71:a1:
c1:d6:ed:dd:52:a1:96:68:77:92:46:db:6a:a7:73:1b:f3:f6:
cb:99:ce:b3:4b:f7:bd:cd:bc:27:04:67:e0:4f:8c:2c:a4:0e:
56:2e:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:14 2026 by rpki-client