Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
File: 0Nela7eOsawUaqeHHn3JaNsczZI.mft (raw, json)
Hash identifier: Dwx/E1SH1ujzy59EDY9OYERBOJ+QTzQ/lPSQdTkzFMQ=
Subject key identifier: 8E:BF:34:E3:1D:A4:FE:D3:DC:59:2B:2E:9D:DE:2D:1D:AE:A0:21:C8
Authority key identifier: D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
Certificate issuer: /CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Certificate serial: 01A1A85E4A7B6D7199B4FB82D3BAEA444844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
Manifest number: B2
Signing time: Wed 04 Nov 2026 21:01:53 +0000
Manifest this update: Wed 04 Nov 2026 21:01:53 +0000
Manifest next update: Thu 05 Nov 2026 21:01:53 +0000
Files and hashes: 1: 0Nela7eOsawUaqeHHn3JaNsczZI.crl (hash: tu64tTe61kCDfVzH5OjFO8y0OIgw5WgEJNIbrQ/3vfk=)
2: JLByziykIJxOkdRHlfnOUIKld14.asa (hash: HqyCTDNuHO2yjsx9RL3OglB542RB34xPOGuCGG7RJxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:5e:4a:7b:6d:71:99:b4:fb:82:d3:ba:ea:44:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0d7a56bb78eb1ac146aa7871e7dc968db1ccd92
Validity
Not Before: Nov 4 21:01:53 2026 GMT
Not After : Nov 5 21:01:53 2026 GMT
Subject: CN=8ebf34e31da4fed3dc592b2e9dde2d1daea021c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:98:b0:72:98:ca:c5:79:f9:e0:bd:8e:56:
18:89:6b:ce:ae:e4:e6:30:f2:4d:07:42:ef:e2:6e:
90:c5:f6:6c:b5:48:b2:92:03:cf:15:eb:e7:f8:ea:
7b:86:fb:ef:a7:f2:f2:75:f1:fa:36:16:36:55:eb:
ce:d1:a1:ae:2d:e0:c2:0a:7c:3f:54:3b:82:3f:f7:
4d:f3:2e:bc:67:93:1b:0a:37:db:c8:9d:c3:90:8d:
96:3f:de:e4:4b:93:db:64:fb:e8:67:12:b5:cc:1d:
9c:0f:48:83:d3:fa:22:da:3b:e4:48:c2:55:63:04:
54:bc:31:36:d8:1d:5e:e5:a7:46:a6:c3:a4:1a:0b:
81:5a:7a:5f:82:3a:66:f3:e9:c4:da:f9:8c:26:fb:
2c:e8:4c:78:b7:7c:f1:17:d8:1e:3b:c6:39:d1:ae:
65:4e:87:07:30:1d:fb:ec:56:a4:47:94:05:30:32:
4c:57:11:39:04:e6:92:92:15:bc:e0:dd:91:c7:f0:
eb:3b:a0:b1:49:43:7e:70:5a:55:6a:83:46:fb:21:
45:30:f6:75:3c:b6:16:31:ae:11:97:66:1a:c8:f0:
74:5a:b0:a4:3d:5a:95:27:c4:37:35:ad:d0:7c:4f:
28:20:84:68:a7:c0:f4:c6:67:71:62:13:6c:be:d2:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:34:E3:1D:A4:FE:D3:DC:59:2B:2E:9D:DE:2D:1D:AE:A0:21:C8
X509v3 Authority Key Identifier:
keyid:D0:D7:A5:6B:B7:8E:B1:AC:14:6A:A7:87:1E:7D:C9:68:DB:1C:CD:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Nela7eOsawUaqeHHn3JaNsczZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/964e06-e186-4cb5-aaab-af99cfadacb6/1/0Nela7eOsawUaqeHHn3JaNsczZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b8:a8:0a:41:f3:c8:a7:17:af:59:33:b5:7d:28:77:e9:73:
49:39:2c:c7:bc:5a:f1:03:56:0a:ad:77:c9:f6:fb:45:7a:6a:
5c:b3:f6:f0:c9:2c:13:9f:59:a0:a4:1a:8f:d7:3e:74:c7:31:
1a:7a:25:93:74:b0:87:ab:82:d7:ee:b9:a6:02:0b:18:a1:71:
a0:02:58:8f:d3:bd:19:8d:23:d2:99:ec:96:ae:81:3d:46:72:
af:5b:79:25:70:4b:b9:6c:b3:c4:3c:89:2f:32:45:5b:80:e3:
0e:e1:da:cd:58:85:b3:0b:ab:47:16:fb:bc:32:2e:95:72:3e:
e3:ca:a3:38:90:23:d6:fb:7e:05:7e:89:33:1a:0b:84:c3:ec:
f1:97:f2:e5:16:50:97:c4:ca:37:82:69:09:ca:12:e5:bc:5c:
41:68:26:56:6f:ea:d6:00:ca:a6:44:e3:51:0b:9e:47:87:97:
6d:8a:ee:80:df:1f:ce:67:f5:e4:70:d4:78:16:90:c0:60:fe:
65:25:f8:a5:06:fe:fe:41:ca:73:f9:dd:6d:08:fa:53:f5:c5:
41:d9:ac:b4:47:89:e3:8c:a9:64:5b:f3:44:1b:30:05:ed:62:
7c:f7:fa:f7:97:c0:5c:8b:c7:b3:cf:46:e8:b9:25:aa:08:d5:
a4:c9:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:06:10 2026 by rpki-client