Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: 5LBn0P40yTvkHS+D+Y8IUAUr3cc93TIlyR2HHiw03mk=
Subject key identifier: 43:78:2D:3F:87:4D:BE:D0:49:A7:DA:58:84:82:0F:3D:75:B7:08:8F
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 01A13FDE74F71F0CFA228EC34EF75284956F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 14:01:45 +0000
Manifest this update: Thu 15 Oct 2026 14:01:45 +0000
Manifest next update: Fri 16 Oct 2026 14:01:45 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: RbAEHr3SsisLVu066xJ2+M+MM6ZQrcqwpogrn9fnec4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:74:f7:1f:0c:fa:22:8e:c3:4e:f7:52:84:95:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Oct 15 14:01:45 2026 GMT
Not After : Oct 16 14:01:45 2026 GMT
Subject: CN=43782d3f874dbed049a7da5884820f3d75b7088f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:12:35:b1:5e:99:19:2a:f2:72:a4:6e:f8:
90:1d:d2:bb:73:f4:39:d5:52:b1:fe:e1:c9:2b:3f:
57:04:27:2c:f7:52:d4:10:ef:fc:a0:b6:49:3a:29:
3e:b6:b4:bf:f9:f5:9b:b6:63:53:bf:10:31:4f:0b:
4d:66:c2:12:53:60:d4:5d:54:52:6e:5f:8e:f7:0c:
7c:f2:02:cb:27:63:49:be:a3:a1:5e:71:7a:e0:b4:
e0:ea:02:d6:65:db:87:37:ce:1c:10:79:7c:5e:ec:
7d:d6:c8:e3:4d:78:e9:04:2f:dd:9c:e1:61:e8:8f:
e2:61:e7:31:ca:f1:1c:e1:dd:72:fd:c3:04:5f:b3:
30:38:bc:c2:fc:ff:e3:0e:3d:00:76:e3:fe:e8:78:
9a:b7:a9:39:d0:52:c7:a0:8c:3d:b2:ee:0a:9d:1a:
78:88:86:83:ff:8a:e1:cd:11:2d:fd:92:5a:62:14:
6c:47:76:a5:73:be:a7:22:41:16:da:9a:a8:a6:36:
fa:61:ef:03:9e:28:8e:9c:9c:12:05:5d:ef:13:76:
39:48:c0:78:cc:1b:d7:9e:63:4a:80:e4:7f:36:a0:
2a:04:5f:d4:b6:aa:76:2a:a2:56:26:5d:82:95:51:
24:a1:ed:f7:a4:ab:b8:38:fd:44:e7:93:8b:1c:b5:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:2D:3F:87:4D:BE:D0:49:A7:DA:58:84:82:0F:3D:75:B7:08:8F
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4e:39:6d:06:09:3f:7d:99:bb:15:a9:c0:9e:91:db:2d:bc:
d1:81:37:ef:2b:1d:ad:f0:0b:5a:7d:08:31:0b:90:ca:fe:6b:
d0:c3:75:1c:ef:3f:88:c2:64:f0:28:e4:3c:dc:9f:eb:2a:b4:
e4:49:11:11:84:0f:22:8a:62:eb:e4:fb:d8:9c:82:a3:fc:f7:
b3:a6:8f:14:0b:a0:c0:02:81:54:32:97:a2:35:dc:a0:00:4c:
9f:4f:cd:f5:02:91:77:75:58:f7:14:e3:7c:62:b9:73:19:84:
16:d9:3f:11:08:11:51:6c:a4:65:c5:1a:33:62:2e:9a:00:af:
66:5d:b5:4e:48:73:35:51:c9:2e:78:d9:f2:90:a4:66:f0:1a:
45:c8:c1:c0:46:d2:76:ad:28:5a:09:22:b0:58:1c:71:cf:f6:
25:2c:a3:80:c1:3a:e5:43:e8:33:80:81:eb:c5:71:5d:d3:4d:
e8:40:23:66:be:7b:e3:52:db:7f:53:e5:7a:fb:b7:63:74:82:
48:83:33:8e:0b:b6:c2:ea:6a:64:e6:a2:8b:6a:94:7e:ea:36:
64:2d:99:e8:7d:78:7f:0d:e9:05:52:e5:bf:a5:70:e6:fd:bb:
32:e8:92:78:c2:cc:85:b0:f3:3e:86:12:39:9c:80:5b:e4:43:
43:7a:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:35:11 2026 by rpki-client