Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
File: 2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft (raw, json)
Hash identifier: zFIY5zVAQkOcfaVilYdePkHuz4I8VaXEgV+cmws3ShQ=
Subject key identifier: 2E:20:02:C9:54:09:57:A7:05:B6:9B:3E:36:71:8C:35:4B:B4:74:86
Authority key identifier: D8:B5:4E:91:21:9D:6C:A7:64:03:F8:B1:07:F6:56:29:61:39:F2:B5
Certificate issuer: /CN=d8b54e91219d6ca76403f8b107f656296139f2b5
Certificate serial: 01A1A9A771CBFE1186787171CED381FE131B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
Manifest number: 0210
Signing time: Thu 05 Nov 2026 03:01:25 +0000
Manifest this update: Thu 05 Nov 2026 03:01:25 +0000
Manifest next update: Fri 06 Nov 2026 03:01:25 +0000
Files and hashes: 1: 2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl (hash: IzD0WJIKkcaLyXVTVBN8shPlqpwqUugYPa3aAmnKgr8=)
2: azJk3jbM95gw45DMayjfbSC1DVc.asa (hash: f78br46llF1nPC5ot0D8hFrl68chpf+BcLtFLar8IO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:a7:71:cb:fe:11:86:78:71:71:ce:d3:81:fe:13:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8b54e91219d6ca76403f8b107f656296139f2b5
Validity
Not Before: Nov 5 03:01:25 2026 GMT
Not After : Nov 6 03:01:25 2026 GMT
Subject: CN=2e2002c9540957a705b69b3e36718c354bb47486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:1e:7a:a3:ea:ce:ee:5d:69:20:87:83:d5:
93:ea:c0:59:a9:02:02:eb:92:59:97:7a:3c:4d:22:
ec:6b:04:8c:4e:f6:c2:5f:f2:02:7c:ee:4e:f1:a8:
88:cb:4a:ac:95:b3:b8:a6:ec:ae:ef:54:cc:7b:06:
92:17:78:26:6e:9a:47:93:a3:28:01:ab:a1:4a:79:
ce:dc:90:36:7d:f2:fb:ed:bb:fe:99:7a:e4:aa:04:
0d:e1:68:ec:99:29:23:a0:9a:82:b1:d8:8a:4e:d6:
6b:2f:20:6a:8f:9f:ca:45:e9:e8:6d:dd:65:57:72:
c2:13:ae:e3:88:8a:24:3c:c2:a6:3f:92:d8:24:40:
fe:38:90:ea:d2:f5:73:e7:a5:4c:c5:75:97:bd:be:
16:30:3d:0b:d5:c5:9e:3b:b8:d0:a7:a8:26:d1:8b:
19:7c:b1:55:38:f4:51:4b:9a:4a:fa:da:53:5e:49:
d4:ce:20:f6:59:97:32:c6:ec:ad:bf:22:9c:7f:3f:
d4:d8:e6:31:59:30:9c:7e:69:09:1a:38:04:01:d3:
b6:f4:1d:50:43:12:e0:c9:b3:13:fa:a6:87:cc:02:
38:73:8d:64:b5:9a:fb:97:8a:d6:9c:85:b2:12:39:
63:d7:43:a2:34:64:d5:e1:cf:8a:c2:d7:a7:81:3c:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:02:C9:54:09:57:A7:05:B6:9B:3E:36:71:8C:35:4B:B4:74:86
X509v3 Authority Key Identifier:
keyid:D8:B5:4E:91:21:9D:6C:A7:64:03:F8:B1:07:F6:56:29:61:39:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2LVOkSGdbKdkA_ixB_ZWKWE58rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5b3478-5d10-40e5-a694-e8164dfa0682/1/2LVOkSGdbKdkA_ixB_ZWKWE58rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fd:62:8a:18:00:b4:a5:14:4b:2b:5b:3e:f0:3c:c2:98:53:
e0:b8:39:a9:64:07:72:07:29:40:a5:e3:5a:90:48:3a:bf:83:
29:74:14:3d:4e:9e:f5:05:86:e4:d6:d3:7d:8f:c6:11:f1:17:
92:6d:a4:e8:48:39:82:3e:e5:4f:d2:5e:d5:09:7b:90:e3:27:
28:28:5f:86:04:bf:cb:bc:25:86:3d:54:06:80:59:8d:da:4b:
0b:da:6c:16:cf:61:4f:c0:cd:59:86:dd:e7:90:3f:96:dc:b5:
ef:10:61:e8:f5:6c:56:b3:3a:39:96:cc:8b:0c:42:7f:0d:8d:
15:74:03:ad:f3:2a:54:db:40:ac:6f:9f:ca:4a:de:8b:00:05:
4f:b2:0c:5b:82:71:d7:a0:95:09:cb:f3:71:76:5a:5f:77:f8:
58:4f:40:24:4c:6d:bb:24:50:47:f4:12:3f:62:60:78:c7:17:
d5:dc:d2:26:13:f1:74:f8:14:56:c9:46:9c:85:2c:25:bc:25:
59:18:b6:d9:9f:12:d3:27:9b:7f:1f:39:19:fd:cf:34:ce:1b:
67:15:6d:bf:36:0d:a6:ca:d2:ee:f8:71:15:f7:b7:b3:57:e3:
1b:43:52:eb:d8:b7:09:1d:41:e4:bd:35:79:a4:67:20:cf:81:
c7:02:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:39:48 2026 by rpki-client