Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: EzQD8x2sAwEQJ3ji0vfJydciXtRnLprsnvgJByE8kzk=
Subject key identifier: D6:99:E8:B6:8C:BE:E4:2B:85:10:A1:CE:01:FC:5B:F7:38:AB:1C:A2
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 01A13FA7C40AB687988DCBAE2D3570D6F399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 13:02:01 +0000
Manifest this update: Thu 15 Oct 2026 13:02:01 +0000
Manifest next update: Fri 16 Oct 2026 13:02:01 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: AuDYDxgepD1bYTuxedxXjNM4JGKeCWmQI1UsORPGQSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:c4:0a:b6:87:98:8d:cb:ae:2d:35:70:d6:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Oct 15 13:02:01 2026 GMT
Not After : Oct 16 13:02:01 2026 GMT
Subject: CN=d699e8b68cbee42b8510a1ce01fc5bf738ab1ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:e4:2d:50:7c:77:61:19:00:2d:48:aa:a3:
1f:a5:60:7b:35:42:0d:0d:59:e7:8c:db:53:fc:4f:
5b:8e:71:05:05:fc:44:1e:05:b7:7e:ca:13:94:86:
a7:b4:25:af:ba:ca:b0:11:31:03:62:01:34:2c:e4:
8d:18:21:6e:11:c4:ae:45:08:ca:16:f7:f1:52:04:
78:60:6e:5e:df:12:8e:e3:21:ce:c6:86:eb:41:f9:
ce:c6:05:c3:e8:02:ce:d8:d5:51:6b:0b:e1:fb:17:
2e:5d:0d:87:90:9c:5c:cf:7a:0c:5a:6d:3a:af:86:
0c:4e:ec:08:c5:b2:28:12:80:89:0f:6b:15:8d:45:
01:17:91:a5:14:b2:7c:d7:ee:09:40:7b:9d:23:e3:
68:6e:18:dd:db:ee:ec:0b:15:3a:8d:5b:9d:a7:34:
66:b6:74:75:a1:8c:50:c7:92:2c:cf:21:3f:c6:32:
c5:55:27:5f:3c:19:b6:ef:fe:ad:c7:4a:97:1b:df:
7e:a3:1a:13:09:34:ac:62:0f:4b:ca:5c:67:1b:b3:
0c:3a:8d:99:79:47:b1:3b:63:bc:39:3d:21:bb:f9:
df:8e:b4:f8:83:a6:bd:40:03:19:c6:ea:9a:2c:ab:
e8:29:fd:27:28:bd:f7:60:26:6e:fd:08:2e:ba:d8:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:E8:B6:8C:BE:E4:2B:85:10:A1:CE:01:FC:5B:F7:38:AB:1C:A2
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b3:15:2e:b9:a8:2a:2c:ef:93:87:07:18:1b:70:f2:67:f7:
9f:32:d3:21:e8:55:28:bc:e2:0f:67:3b:88:66:ee:39:7d:77:
bd:35:7d:b0:89:f0:d7:dc:c4:f5:6a:8f:b8:71:98:76:b9:4f:
88:ec:4f:51:2f:e2:ea:f3:43:6c:5b:c2:89:2e:05:09:37:67:
5d:0c:9f:8d:23:67:55:11:5b:72:e0:64:8d:c5:40:d9:2d:4b:
5c:49:3c:8b:85:f2:11:64:84:1c:97:69:eb:91:db:c4:af:00:
a9:9f:96:0c:c6:7a:44:f8:b5:c6:97:f3:bd:e2:08:5c:17:43:
e0:08:54:ee:5c:49:ed:e7:e8:bb:1b:fa:eb:22:c0:7c:a9:c8:
2a:54:bd:da:53:fa:cf:b6:ea:f0:33:32:ca:dd:b3:3d:a8:17:
fc:8c:be:81:4f:19:88:3d:87:8b:6f:a2:f1:7a:17:f3:5e:cc:
b6:0e:93:54:6e:3b:f7:10:ae:01:79:63:df:12:94:db:af:7d:
e3:62:bc:1a:bc:d6:87:ff:14:31:e4:4b:93:ca:95:92:b7:2a:
f1:cc:dc:25:10:5d:ed:19:51:9b:a6:18:c9:ce:8e:5c:bf:ba:
ac:a7:c3:92:9a:34:3c:d4:f2:01:bb:be:01:02:80:30:f6:ac:
e2:19:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:36 2026 by rpki-client