Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: SvfUarXmx/UKYhj6x76pfbnefbB5aBERR50pAQjRPA8=
Subject key identifier: 9B:15:5D:BD:6F:64:1C:75:D8:A8:6B:46:BA:9F:E4:94:30:94:C6:EB
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 01A0C5FC4EFD679CA025BA37169DCBFD069B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 1147
Signing time: Mon 21 Sep 2026 22:00:41 +0000
Manifest this update: Mon 21 Sep 2026 22:00:41 +0000
Manifest next update: Tue 22 Sep 2026 22:00:41 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: vUUTq+WXH7MNa77Z8CNJxtGX+g/Zar7A4nFOPPu1tPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:4e:fd:67:9c:a0:25:ba:37:16:9d:cb:fd:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Sep 21 22:00:41 2026 GMT
Not After : Sep 22 22:00:41 2026 GMT
Subject: CN=9b155dbd6f641c75d8a86b46ba9fe4943094c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:74:95:7c:e7:5d:f5:c2:fc:c3:e2:d8:3f:e6:
6e:54:a2:41:30:6e:1d:6c:61:52:b7:ad:7d:ba:e3:
46:97:08:8e:a4:b0:ab:4b:1b:fe:1b:44:3d:90:aa:
94:2e:25:66:ed:81:aa:65:58:93:b8:b1:4c:3e:2c:
e4:54:90:11:83:f4:51:54:27:a7:e0:bb:f5:0a:6a:
03:2e:78:a0:54:fa:09:94:c5:43:9c:74:cf:fb:57:
22:7d:0d:70:dd:25:3e:b0:ef:6c:2b:cb:de:4e:61:
97:ac:d1:f5:db:83:6e:e4:d7:14:0b:69:15:8e:fd:
2c:b6:85:48:69:4c:ca:0c:ef:87:32:02:6f:46:10:
45:e1:47:e6:ee:45:56:9f:50:b2:ea:19:52:2d:4e:
c7:12:0e:94:8a:85:b4:1d:4e:64:a0:1a:f4:21:f4:
58:d3:0a:f0:fb:a3:7d:68:0a:6f:1e:e8:48:6a:80:
ee:06:1c:59:f2:bb:06:05:5e:83:6c:f5:95:f7:d4:
22:7b:1b:ef:8f:a2:fb:fc:2b:b6:53:db:07:de:99:
00:98:70:c5:df:d6:6f:cb:dd:24:43:c8:d8:1a:9e:
5d:e5:f1:68:29:c9:7d:6d:f6:d0:1f:de:24:00:b0:
05:22:15:cb:54:bd:eb:42:30:43:89:c2:f7:04:61:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:5D:BD:6F:64:1C:75:D8:A8:6B:46:BA:9F:E4:94:30:94:C6:EB
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:8f:0d:87:bf:16:9c:7d:bb:87:9b:0f:a9:0f:95:68:4a:08:
80:3f:2d:b1:90:da:41:7f:a2:ab:a7:cb:ce:c8:59:8c:ad:34:
ab:79:1a:47:e1:67:50:e0:34:b0:e8:88:24:e2:e1:89:c1:db:
4c:b0:f5:cd:71:d3:78:17:dc:43:a4:1b:a2:79:01:d2:8d:3c:
31:71:14:1c:32:6f:e1:38:2d:a9:97:89:43:8c:b0:9f:3a:4e:
34:5b:b5:47:96:5e:bf:d6:9e:86:ba:09:6a:08:39:45:30:38:
78:88:e5:46:9d:1d:eb:4f:0d:89:ed:fb:89:b4:6d:32:82:06:
00:0e:3f:c5:ec:82:bf:7f:f5:a3:17:b8:8a:bf:85:a4:cf:ed:
46:e3:d5:51:d0:b8:a7:06:4f:fd:b7:4a:03:df:cf:69:9c:02:
93:f1:d4:5a:30:b9:55:d0:98:3e:14:0d:94:50:a0:73:26:8c:
26:b0:19:41:a0:a5:1b:27:d6:40:84:13:d1:16:d3:90:b3:de:
fe:7e:12:1c:13:4a:7e:04:27:77:9d:3e:32:13:81:00:83:51:
b4:ac:91:75:d0:70:8f:21:8c:8e:91:33:9d:06:c5:1b:2a:46:
c2:03:58:bd:19:55:d5:be:f6:b7:7b:ae:6b:28:98:6f:86:58:
a1:14:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:17:49 2026 by rpki-client