
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: eVPNhZNPvjAX9u14XkDtztfmdlhWnboV+LLPUkTuC1k=
Subject key identifier: AA:B5:25:FF:2B:06:67:49:FD:D3:76:EB:C9:18:80:D7:4C:0B:3F:DC
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 01A00101F713AA1494858B4816366085A918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 16:01:41 +0000
Manifest this update: Fri 14 Aug 2026 16:01:41 +0000
Manifest next update: Sat 15 Aug 2026 16:01:41 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: v808RV/Rcr0dZcEO4GHJN9VoiX6PiPXkpw0f35kOQFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:f7:13:aa:14:94:85:8b:48:16:36:60:85:a9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Aug 14 16:01:41 2026 GMT
Not After : Aug 15 16:01:41 2026 GMT
Subject: CN=aab525ff2b066749fdd376ebc91880d74c0b3fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:bc:29:8d:9b:21:ba:3b:50:23:47:15:66:
88:bb:77:09:53:e3:6b:d6:8a:dd:4a:da:f6:a3:b4:
c2:bd:f0:f1:c5:ca:c8:1b:13:ec:75:e3:48:48:02:
8b:54:38:a5:5a:19:8b:7b:29:25:48:76:86:06:b7:
ac:90:1e:b7:00:c5:c5:8b:a2:56:c9:9c:fd:88:76:
fa:e7:a3:ba:14:97:86:c1:eb:5b:a0:ac:98:61:a5:
f6:d0:75:96:70:c5:68:4d:4c:f0:d6:d9:ff:69:7a:
f3:5d:d0:10:8a:87:36:cd:41:2e:15:31:9e:fe:cb:
3d:d6:23:30:7a:4c:f0:05:69:60:b1:00:1a:d3:48:
a4:a8:d5:73:cd:79:d1:1d:47:2f:75:d3:0d:23:a0:
09:3d:a7:32:6a:66:c5:92:48:d0:53:2d:31:ab:f8:
f2:d7:37:a2:b3:02:49:ca:d6:4f:b6:29:f2:2d:d3:
4b:23:6b:f6:ec:cb:6b:ba:3a:c6:57:77:be:7e:30:
9e:81:6c:d6:5f:3e:b6:84:2b:b8:ef:e8:72:f0:69:
c2:ba:80:0c:cb:96:54:31:44:c7:9b:e8:91:6e:e0:
27:aa:6e:ed:11:b5:db:20:eb:36:6e:83:97:a7:5d:
8e:e0:6d:0c:63:eb:aa:73:f0:c1:cb:ea:01:c6:79:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B5:25:FF:2B:06:67:49:FD:D3:76:EB:C9:18:80:D7:4C:0B:3F:DC
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:bb:b8:d8:c3:55:40:09:37:b1:ba:e9:57:35:27:e8:b0:
7f:2e:8b:fa:f7:15:22:89:e4:47:f4:2b:05:e2:8c:f6:d8:74:
19:bb:3c:e5:60:d2:af:a7:da:78:04:fe:a2:ea:82:b9:47:bd:
60:d7:74:96:f4:6b:ad:b0:10:f2:47:73:4a:4e:4d:82:ec:ff:
91:93:83:69:cf:6d:c8:78:f7:c5:e9:65:0b:59:3a:12:6d:34:
2c:8d:52:0f:11:59:75:ab:22:9a:3e:d1:22:73:c8:48:d1:a5:
12:4e:66:6a:81:a4:47:49:0b:0c:96:81:53:e4:f9:18:c5:11:
c9:ac:e6:dd:46:28:14:0f:21:8a:f9:56:96:92:27:f8:fb:d6:
de:73:8f:63:10:ef:ab:86:d2:0b:24:13:38:32:c5:28:46:39:
0f:12:0d:48:94:f7:fe:98:07:e3:0c:9e:ff:17:8f:76:de:6f:
ca:91:c3:1f:d0:a2:57:b8:af:54:89:22:5d:29:56:74:7d:f9:
2a:36:2c:2c:06:ad:d6:92:ee:99:81:43:72:79:0a:83:c7:d9:
d9:66:2d:f4:b5:8e:b2:5d:0e:a7:61:0a:e2:05:ed:ce:06:d4:
4d:61:a1:e1:b8:19:27:9e:46:3a:88:fc:9b:5c:49:4b:a6:50:
cf:df:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:49 2026 by rpki-client