Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
File: 2lTIIO5UFUMsaLATYZJ1_0xubqU.mft (raw, json)
Hash identifier: vkZBJsW+PwK+WEID4IKd6g0pDLnW43dHg+UIkj/z2xE=
Subject key identifier: 9C:9A:ED:91:88:C2:A1:24:F9:85:E6:63:64:9D:26:5D:9A:09:69:0D
Authority key identifier: DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
Certificate issuer: /CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Certificate serial: 01A001018265D09478548B0EEC4EF71BBC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
Manifest number: 0A84
Signing time: Fri 14 Aug 2026 16:01:11 +0000
Manifest this update: Fri 14 Aug 2026 16:01:11 +0000
Manifest next update: Sat 15 Aug 2026 16:01:11 +0000
Files and hashes: 1: 2lTIIO5UFUMsaLATYZJ1_0xubqU.crl (hash: iw/3rbGzaV13VIhO6ARq7FJ9X6BUuONjaoYvhRA1DZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:82:65:d0:94:78:54:8b:0e:ec:4e:f7:1b:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da54c820ee5415432c68b013619275ff4c6e6ea5
Validity
Not Before: Aug 14 16:01:11 2026 GMT
Not After : Aug 15 16:01:11 2026 GMT
Subject: CN=9c9aed9188c2a124f985e663649d265d9a09690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:c5:90:5b:57:87:05:d8:d0:3d:18:8e:9e:
2b:6d:a6:dd:9b:86:f9:29:cd:75:bb:8c:90:11:68:
5e:c5:d0:bc:f5:f8:43:ae:ca:f9:d2:46:ba:78:0b:
8e:72:ec:d0:15:4d:13:d8:2b:a3:cf:7b:90:6c:32:
6e:a1:bb:50:ba:77:74:12:76:c5:64:12:10:26:99:
ce:98:dc:88:08:9b:e4:d3:42:7f:5e:21:20:77:66:
aa:15:13:51:b1:c6:f4:8b:4d:72:df:21:b9:7b:11:
4b:e7:95:ff:8f:16:2f:1f:09:79:64:a4:3c:6d:95:
85:f1:91:f7:d3:ea:27:09:18:36:16:8a:6e:f0:42:
95:08:1a:8e:43:7a:af:e5:da:34:0e:5d:82:c8:66:
2b:89:11:77:a4:8b:c9:e4:fc:e7:3d:f5:a4:a3:c8:
c8:c2:67:bc:91:ce:e6:9d:60:12:48:7e:c9:fa:14:
03:e3:fb:2f:a1:28:72:ca:40:06:2b:c9:94:e5:b1:
28:a0:09:35:7b:c0:64:ad:03:6b:f5:72:aa:34:f0:
b0:15:7c:e2:e6:80:3b:fb:e3:c4:3c:bd:9a:f2:52:
17:48:21:2a:c6:aa:64:49:38:62:33:1e:27:c5:01:
d3:ee:c4:61:5f:cb:37:52:6c:c1:bb:51:d4:12:54:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9A:ED:91:88:C2:A1:24:F9:85:E6:63:64:9D:26:5D:9A:09:69:0D
X509v3 Authority Key Identifier:
keyid:DA:54:C8:20:EE:54:15:43:2C:68:B0:13:61:92:75:FF:4C:6E:6E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lTIIO5UFUMsaLATYZJ1_0xubqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/87a9d9-667f-41f3-aec9-8098205f872e/1/2lTIIO5UFUMsaLATYZJ1_0xubqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:48:40:41:10:ad:4a:26:bb:fd:2f:0f:22:b4:19:02:b1:37:
fb:83:dc:ec:cf:e0:fc:de:85:8a:6e:95:eb:80:e4:9f:0f:23:
95:f6:1d:23:d1:af:2a:ef:71:30:a8:5a:48:c8:78:dd:02:f9:
24:16:41:a5:0e:cd:af:49:81:7a:d6:cb:04:54:30:0b:ea:b5:
21:37:02:8d:87:5c:ff:ed:1a:09:d1:1c:56:be:c4:94:e8:cb:
4a:9e:f5:0b:97:5c:c3:66:d7:78:92:a6:fb:58:48:fc:2a:b3:
74:0e:69:48:42:98:df:e3:4d:e9:d0:2a:e5:8c:02:20:18:9d:
75:7d:de:d3:57:82:4c:9c:ff:17:46:03:c9:ec:92:ad:e0:1f:
80:8c:f8:b2:27:09:d5:0f:bf:0f:71:59:aa:64:c0:ba:15:ea:
db:86:5b:84:d4:c7:42:e9:15:d6:0f:fa:08:4c:83:ce:39:32:
71:bf:bf:bc:36:5e:17:11:2a:59:45:77:a7:12:80:b3:62:72:
ef:60:87:6f:23:eb:ac:5e:e7:6d:8e:8e:03:1a:85:8a:1e:f6:
6f:d5:de:85:7c:bf:7a:5c:79:46:bd:95:db:ac:51:78:1a:e4:
97:e0:8b:c1:09:f7:ff:d0:57:df:c1:7a:65:87:e9:ae:40:4f:
92:b3:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:38 2026 by rpki-client