Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: GCkcN/ObQxqzitBdJ/AuEGkPXU1eTsPrZQnGigEcXiw=
Subject key identifier: A7:8E:FF:EF:5A:14:7F:7D:DB:25:17:4D:7D:D6:38:DE:57:DB:E8:C5
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 01A0016F98E12F86665BA58686631BA06702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 1990
Signing time: Fri 14 Aug 2026 18:01:25 +0000
Manifest this update: Fri 14 Aug 2026 18:01:25 +0000
Manifest next update: Sat 15 Aug 2026 18:01:25 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: G7jfrX7juSKtoKktw3uvOlP1mcYxVm1MPEjV5CpXAq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:98:e1:2f:86:66:5b:a5:86:86:63:1b:a0:67:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: Aug 14 18:01:25 2026 GMT
Not After : Aug 15 18:01:25 2026 GMT
Subject: CN=a78effef5a147f7ddb25174d7dd638de57dbe8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:16:dd:c2:46:72:92:31:4a:9c:3e:21:bf:
e7:45:a9:aa:96:bb:63:61:64:11:d1:ff:1e:d3:b1:
1a:78:47:07:d1:77:67:ea:1e:39:a9:13:34:27:a1:
fe:db:9d:97:92:be:2e:52:79:b1:5e:26:f7:81:ff:
96:09:a4:eb:c8:9e:32:c3:44:b1:5c:c1:11:cf:cb:
48:5a:77:ea:de:59:bf:f1:1e:c2:27:da:52:fe:db:
23:75:6d:df:6f:ee:8d:55:8c:dc:37:3d:08:d0:40:
de:3d:7e:01:27:f7:91:80:fc:52:27:79:65:84:70:
db:ae:ac:93:8a:c9:ff:14:cc:52:54:5d:4e:e6:21:
57:32:5d:2f:95:2f:eb:b4:db:07:ce:63:ee:5e:fc:
80:16:14:ea:ca:b2:df:b4:cf:2f:04:5b:a2:1f:e3:
03:57:1b:1b:19:89:c1:71:1f:f1:65:09:93:46:b9:
e8:9d:30:dd:05:c8:16:10:58:bf:e5:98:f4:54:58:
c9:0c:32:1b:6b:08:fc:8b:2b:a1:97:9a:ac:8c:29:
53:0c:49:82:0f:bf:d7:29:ea:21:9e:4b:a1:93:fe:
a5:7f:7c:36:36:a8:d2:ea:6f:6e:8a:69:2c:db:5d:
6d:bf:93:79:de:70:e8:6a:1c:00:7f:27:45:93:11:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:8E:FF:EF:5A:14:7F:7D:DB:25:17:4D:7D:D6:38:DE:57:DB:E8:C5
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b7:42:42:fd:6b:99:20:9e:25:a4:79:91:ce:87:d6:5e:4a:
c0:de:14:55:42:29:5e:dc:2b:61:3b:8e:6b:31:f9:ca:1c:11:
3a:77:66:ff:60:a0:39:54:40:e7:02:c3:d5:c9:82:b5:71:90:
04:6e:54:66:9d:9e:4a:5f:53:8b:65:78:fd:e9:bc:53:a7:25:
61:c5:9c:22:f1:49:3e:43:ad:a5:58:63:f4:f2:d5:6e:19:43:
47:78:94:ea:36:19:2a:d7:75:0c:b9:c9:3b:2b:4e:bc:a0:9d:
af:19:21:b4:0f:03:61:c4:9a:96:bb:d4:4b:45:f2:46:fb:a7:
bb:40:59:97:96:f2:21:ac:1c:f0:36:c0:cb:c2:e1:b8:18:5a:
bb:34:cf:b3:ae:4f:00:34:6f:21:fe:1e:c7:1c:3f:a6:22:ea:
fe:d3:73:69:c8:86:0f:5b:ae:fc:86:c7:e4:57:93:34:7b:2a:
ef:ba:4f:76:d2:8c:f3:ac:04:c2:30:3a:ea:51:39:45:7b:e4:
9e:56:d5:b8:3f:fd:2d:4e:4e:28:f5:21:8a:d4:da:48:c4:16:
d0:85:a7:30:13:66:df:a5:ae:1d:71:22:25:41:fc:92:2e:b0:
a5:ba:86:b4:6c:6e:48:7a:5c:9e:04:63:76:c3:9a:81:31:8e:
45:d8:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:01 2026 by rpki-client