Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: 7Tos5lnOEJaKA2F5ki0A5EXvWjR+kmGxBl/VKoZzP5k=
Subject key identifier: 3C:B5:1B:8E:BF:BA:67:1B:53:3D:C8:F2:E5:6A:A4:C1:10:E0:A2:81
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 01A0C4E95122B8ADE922BAC62B5AAA119405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 08A7
Signing time: Mon 21 Sep 2026 17:00:19 +0000
Manifest this update: Mon 21 Sep 2026 17:00:19 +0000
Manifest next update: Tue 22 Sep 2026 17:00:19 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: seTqU0IuF1Yp4+SVwPdhPUXZA2QSE1jNY/DAXb7SzYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:51:22:b8:ad:e9:22:ba:c6:2b:5a:aa:11:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Sep 21 17:00:19 2026 GMT
Not After : Sep 22 17:00:19 2026 GMT
Subject: CN=3cb51b8ebfba671b533dc8f2e56aa4c110e0a281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:01:2c:e8:48:e0:cd:86:55:27:18:e8:47:
6a:0f:a2:d4:1b:3f:25:15:93:8a:5f:b5:0b:59:34:
e6:d2:51:f7:cb:8c:24:59:e0:4e:a5:1c:5d:15:13:
82:61:2d:01:dc:b5:a2:4d:e8:b7:11:ad:89:1e:24:
30:e8:ec:09:30:ad:6f:aa:11:f3:eb:8a:52:6c:3b:
b5:33:ab:2d:21:b2:53:0e:ee:86:91:0e:49:42:df:
ea:7d:ea:56:00:bf:0e:3f:e1:28:de:88:78:45:ae:
26:a2:0d:8c:13:e6:9c:33:60:d9:18:d2:c9:70:00:
de:9b:db:b9:ca:4b:38:0e:42:1a:dc:4c:69:0e:5d:
0e:7a:53:30:28:c4:5d:59:4c:3f:bb:3b:7b:8f:3f:
55:96:38:24:52:2a:bf:11:55:30:1a:fd:28:fb:b5:
2d:04:f3:68:64:b9:58:e9:7b:33:ff:4c:a4:17:40:
8d:5d:46:f9:36:13:08:6c:a4:2d:af:60:f7:74:59:
a8:89:8a:40:bc:57:a8:03:6c:13:cf:74:f8:1a:23:
6e:bf:0f:bd:42:13:15:32:96:ad:f3:5d:9e:1e:0f:
b6:4d:82:7f:54:93:f1:5c:e2:c4:3c:d0:81:ae:73:
65:73:69:9a:e7:b0:69:a6:bc:13:68:a8:a6:bf:71:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B5:1B:8E:BF:BA:67:1B:53:3D:C8:F2:E5:6A:A4:C1:10:E0:A2:81
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:48:05:28:1c:41:45:b0:a7:30:ff:fb:72:6c:25:fb:8a:
42:e4:44:b0:c5:19:25:f8:2d:f8:11:3b:ba:6b:28:0f:6d:71:
bc:b1:b2:40:a4:1b:ec:0f:ea:c6:0f:7f:6b:fe:e1:2a:2a:eb:
89:6a:7e:ad:e2:3a:c5:d3:8d:09:af:b9:53:82:40:14:1b:2f:
cf:e9:fd:fc:ce:72:44:e8:44:06:a2:26:74:04:d3:03:0e:4f:
10:6a:f8:c6:8c:98:7d:29:f1:47:5e:48:0c:37:97:57:e1:28:
cb:3d:78:ce:2d:86:47:83:fb:6d:32:19:e1:e9:6e:0c:40:b2:
55:5a:b1:5c:b3:fe:51:ea:4c:a0:6f:08:61:48:f5:e8:bd:ac:
0d:ff:16:f2:1d:03:7b:81:25:43:f2:3a:a5:28:84:97:da:43:
b4:78:40:ed:25:b9:76:fc:d7:89:6b:e2:25:ca:d2:3b:0d:57:
05:c1:3d:1f:7a:e4:7e:20:ce:3b:f5:5c:70:d8:63:28:aa:99:
cb:11:77:2a:4b:b5:46:57:a8:c5:a1:2f:04:97:6d:4e:14:1e:
2a:3c:d7:14:09:65:3d:51:81:1e:14:7c:62:42:1a:80:f7:6d:
9a:9d:a1:c0:ff:e5:5a:6d:97:64:da:60:94:f7:af:4f:fb:0b:
6f:4a:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:55:17 2026 by rpki-client