Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: PxH5fVnmrbqaCyiaXgnJKBtNQl/icU1sgnSEaJ+faIE=
Subject key identifier: E6:50:1E:8D:EC:A8:67:AF:08:2F:2D:39:5A:EB:9F:18:D9:2F:AD:A8
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 01A13FDE6A33FFF5B5405F0FBDA10CD89098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 11AD
Signing time: Thu 15 Oct 2026 14:01:43 +0000
Manifest this update: Thu 15 Oct 2026 14:01:43 +0000
Manifest next update: Fri 16 Oct 2026 14:01:43 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: sV04LiKBGr2ccs972xK7yMOOg4Ti6fnlKrFymUJydzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:6a:33:ff:f5:b5:40:5f:0f:bd:a1:0c:d8:90:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Oct 15 14:01:43 2026 GMT
Not After : Oct 16 14:01:43 2026 GMT
Subject: CN=e6501e8deca867af082f2d395aeb9f18d92fada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:47:38:76:27:e2:a0:96:0e:e3:d1:27:59:
0a:c0:54:42:93:42:c5:3e:f0:dc:c0:4e:28:7f:5f:
0f:b8:3a:45:99:ea:98:12:a7:88:52:d7:52:e5:4c:
85:40:d3:8e:72:06:2d:b4:c5:af:f5:98:cc:66:87:
2a:64:4d:99:a2:8b:80:1c:01:ed:b6:7d:ff:e4:c0:
c2:c9:73:af:25:49:04:6c:cc:a3:55:7d:69:3c:e4:
2f:48:44:92:d9:c7:c1:1d:e5:7b:28:33:13:09:a5:
a0:f6:0d:dc:4a:14:e5:cb:9e:64:5a:32:b2:18:2c:
3e:6a:e1:8b:ef:f4:b6:49:20:7a:95:57:2f:a2:3d:
4e:4f:2b:5e:46:d4:4e:ad:17:67:38:79:48:a5:06:
bc:5e:ff:c5:cf:f6:28:ef:73:52:ee:32:96:c0:a3:
6d:7f:4e:bb:97:51:d7:11:27:fb:0e:d7:b5:4f:a2:
c0:2b:e0:a5:68:bf:5d:9a:fb:7d:3e:e6:28:2c:8c:
67:96:4b:2d:2b:aa:89:f1:0f:61:6a:91:0d:0b:62:
7d:ce:8e:4f:58:72:8f:ba:7c:b8:bd:35:46:8f:94:
71:a7:85:0b:b4:20:6e:69:bf:13:81:fe:a6:de:7f:
2a:f2:ed:e7:e8:ed:e4:ec:0f:66:a5:f8:25:a1:79:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:50:1E:8D:EC:A8:67:AF:08:2F:2D:39:5A:EB:9F:18:D9:2F:AD:A8
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:93:94:bb:3f:6a:46:1f:bf:8d:3d:c0:f0:d3:78:01:49:fe:
4a:80:20:03:05:5a:8a:5f:fe:0b:b4:d4:11:e3:49:a5:01:d6:
f4:34:cf:e3:b4:5b:07:49:22:12:11:4d:57:b3:0f:78:de:e8:
55:20:3b:f5:55:9b:2b:52:8c:61:e7:a0:bb:dd:a3:62:ed:e3:
a1:73:cb:8d:97:5f:f7:13:22:4b:e0:45:1c:ac:11:9b:6b:bf:
f1:7e:05:42:2c:93:8b:ae:28:2d:16:ac:6b:0f:01:aa:2b:d0:
9a:80:9f:8c:48:cc:3b:c4:fe:a7:19:3c:2f:7c:6d:14:13:ab:
28:bb:a7:48:47:de:98:af:96:95:fa:7a:39:c5:5b:8b:c3:d0:
a7:c7:c4:10:33:d0:d8:04:57:94:61:9c:b5:a0:ab:1d:2d:0f:
88:97:f8:f6:e5:65:8c:c9:76:87:68:7f:4f:29:f7:ba:61:9f:
29:c1:96:da:57:65:02:36:aa:a0:64:a8:f5:89:ef:e5:37:f8:
10:37:8e:d1:30:0f:40:38:64:8b:5b:3b:99:ba:12:ce:4d:cd:
14:fc:39:cc:bf:48:b4:08:7a:2c:c6:3e:5e:70:69:51:bf:0a:
3b:d5:25:fa:f5:0e:32:e9:ec:2a:5d:f1:bc:e3:6a:77:30:5f:
42:f1:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:12:39 2026 by rpki-client