Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: cAXZbgY7KkLqjglz8xmPuZxfbRJpkuWFWoWwXqEjBZc=
Subject key identifier: 89:17:CE:C6:26:E4:E1:D5:AB:54:D2:9F:FA:58:A4:78:1F:70:77:46
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 01A0005CE8E77475578BD58C480497F36726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1691
Signing time: Fri 14 Aug 2026 13:01:23 +0000
Manifest this update: Fri 14 Aug 2026 13:01:23 +0000
Manifest next update: Sat 15 Aug 2026 13:01:23 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: +uLvP8Zo5cToJsQyV/cBn9QKPt+cUMH8WKMclJuGoNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:e8:e7:74:75:57:8b:d5:8c:48:04:97:f3:67:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Aug 14 13:01:23 2026 GMT
Not After : Aug 15 13:01:23 2026 GMT
Subject: CN=8917cec626e4e1d5ab54d29ffa58a4781f707746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:bd:7d:eb:13:b5:64:79:91:86:a8:31:3e:
de:22:0b:19:c3:64:ef:51:44:4c:5e:9f:f7:01:9f:
8d:2b:ba:8c:d8:8a:b5:9c:cc:6c:38:20:df:e6:dd:
8e:db:9c:3a:95:25:40:7d:82:1e:2e:41:b2:d1:e3:
be:8d:70:ae:f7:85:57:f4:d2:db:2f:7f:ed:87:10:
19:d7:0b:41:aa:d6:6a:10:57:9a:bb:dd:94:1d:56:
6f:04:13:9b:b6:74:89:e4:8e:1b:74:82:81:92:33:
6d:b2:19:d7:48:7d:77:fc:f6:b7:79:d4:4d:d5:cb:
b7:05:ea:75:0c:ae:b2:7c:c6:a6:19:9f:b7:f8:26:
d5:17:08:d9:8e:16:76:ce:a3:1a:d0:e3:d7:7f:02:
2b:7b:d9:c6:00:71:7a:af:50:3a:92:2a:94:f4:12:
3f:dd:42:58:37:37:19:35:11:d6:4d:bb:b3:59:be:
83:c9:fe:57:c4:8c:ce:44:b1:ff:ac:c7:17:a2:d5:
2c:aa:14:c0:74:a8:99:18:df:e0:69:c2:b1:3e:dd:
82:cc:c7:24:a7:01:3a:8e:64:dd:0a:2b:b9:21:f6:
64:f7:52:87:fc:f2:69:dd:60:a5:d9:5d:00:e9:b8:
c3:e0:d0:e4:28:ea:0d:09:ae:57:a1:e0:22:11:4a:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:CE:C6:26:E4:E1:D5:AB:54:D2:9F:FA:58:A4:78:1F:70:77:46
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:86:8c:12:6c:72:19:0e:ec:53:c3:d0:80:99:50:40:13:a3:
04:ab:06:af:2c:3f:e0:b7:ab:7b:87:e3:f9:55:00:8f:36:9f:
36:53:97:f4:0a:b5:e2:77:9a:06:f3:ec:00:fd:3c:89:2a:22:
64:80:79:fb:1f:d6:11:9f:cd:fe:19:d8:41:93:60:a3:fa:ed:
00:e9:f1:73:47:76:fe:83:ff:3c:a2:92:3b:ba:d3:bb:25:ef:
bc:9c:03:2e:3a:41:f0:43:d8:20:1a:30:69:a4:a6:57:29:21:
af:06:b0:5b:76:ea:ef:77:4e:62:9d:c1:20:6d:18:01:dc:a1:
db:ff:c9:d0:c6:46:2b:30:23:2c:4a:e0:d6:af:c0:29:bf:33:
f8:f4:82:9b:6d:24:d1:07:12:7f:c3:66:b9:67:16:06:1e:64:
7d:7d:85:a0:d6:30:7f:7c:f8:79:7e:e1:e4:f1:38:f4:37:b9:
a8:2b:a1:88:03:7f:00:0e:ca:02:5e:df:d9:b1:25:7b:b2:e8:
c3:72:36:ab:1e:6b:3a:d6:ab:53:03:3a:d8:59:b1:3d:bd:ce:
3b:ae:af:30:e6:b2:d1:05:af:a1:d8:d2:24:74:d0:e4:c9:88:
1d:6d:ce:1a:cf:de:b9:67:3b:20:f0:4a:33:6d:32:0d:ab:74:
5d:25:dc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:30 2026 by rpki-client