
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: 5f/XvqCeb8gY+DT/p1UsvmdPLtdhab7NMW4gwceHnCE=
Subject key identifier: 42:0A:61:10:56:E7:15:83:49:DA:67:B4:AD:FC:D8:FC:73:AB:2A:74
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 01A0C47B6C3AB05EF49959C2EF0D8B5495C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0C6B
Signing time: Mon 21 Sep 2026 15:00:17 +0000
Manifest this update: Mon 21 Sep 2026 15:00:17 +0000
Manifest next update: Tue 22 Sep 2026 15:00:17 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: 45Zwh+kHEvjAz+KSmUVzHFBD/TVtqo8nerL+tU6UEiI=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:6c:3a:b0:5e:f4:99:59:c2:ef:0d:8b:54:95:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Sep 21 15:00:17 2026 GMT
Not After : Sep 22 15:00:17 2026 GMT
Subject: CN=420a611056e7158349da67b4adfcd8fc73ab2a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:47:52:21:fb:e4:fd:5d:6d:52:2f:45:2d:
93:82:75:e4:c2:01:7d:f8:95:dd:a8:67:18:76:86:
41:35:c2:65:a7:f0:a2:62:a3:e0:06:f1:73:27:92:
df:b9:07:d4:3d:98:cf:32:86:f6:3b:b0:fc:a7:8f:
4a:1d:68:19:d2:eb:31:d6:c7:91:e8:b6:ab:dc:c1:
62:13:b1:36:90:9a:90:86:8a:dc:53:c9:ee:b2:8e:
fc:f3:f2:d8:ad:a6:af:c7:37:8f:cd:01:61:6f:0c:
12:13:5b:4b:5f:92:63:8d:97:63:8c:5f:ef:fe:ed:
2c:df:04:f8:fd:80:89:fd:5f:fc:97:9d:0c:5e:70:
e6:5c:70:6d:e9:cf:3a:f1:e9:1c:13:32:cb:07:76:
f6:75:b7:32:29:58:16:f8:46:de:d6:af:5a:73:c4:
75:e5:a2:d7:fd:84:94:12:12:39:a7:f0:6a:cb:53:
fe:b6:62:33:a1:ab:e2:fc:c4:a0:48:67:dc:ef:f7:
60:b1:b2:01:b6:03:ca:48:fb:c9:b5:2c:93:f3:f6:
50:1d:18:42:26:cd:67:2b:5a:98:4e:19:61:d0:26:
0b:cf:15:9d:47:b5:b6:ad:be:3c:da:af:b1:36:5c:
f5:bf:3a:ec:5a:d1:03:93:4e:40:d9:51:9b:d4:7e:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0A:61:10:56:E7:15:83:49:DA:67:B4:AD:FC:D8:FC:73:AB:2A:74
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f9:3c:fc:4a:ce:d2:9d:bd:a1:44:c1:b8:3f:ab:91:29:b2:
8f:70:cb:f3:33:79:64:e2:1f:7f:d9:a2:e6:51:b9:ae:b8:f1:
e1:4f:dc:1d:b1:0e:25:52:d0:c0:2a:9e:13:92:af:c5:6d:e0:
fd:7e:ea:5c:ea:d3:f9:50:cc:22:92:0b:de:56:41:a1:c7:81:
e9:b5:29:6b:87:42:f8:88:8a:ae:bf:73:d0:c1:74:74:30:cf:
2a:f5:78:5e:53:aa:ca:b7:be:42:52:4a:2a:13:db:53:03:ee:
90:a3:21:64:ee:15:11:62:29:2c:de:64:6f:c2:96:dd:e2:80:
28:68:40:46:f2:bd:a1:f1:30:ff:2a:8e:63:9d:2e:86:5d:6b:
bb:da:d1:fb:e9:f4:7d:cd:60:84:36:1e:94:3f:ad:17:8a:09:
30:a5:b0:2a:c5:f7:be:50:e7:77:f2:8f:86:7b:ea:85:51:7b:
2d:54:fa:8e:6b:6a:71:be:02:b8:b4:01:f1:b7:c0:b8:51:e7:
1c:2b:91:8f:ec:fc:ee:15:a9:80:a9:2c:76:49:44:30:98:22:
81:a0:0b:58:5d:8e:e3:1d:f0:f6:fc:39:9f:4c:e4:3a:ff:c6:
0d:a7:c3:0d:ed:99:0d:14:9c:5f:30:f1:de:0d:e8:6c:c9:67:
71:bb:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:49 2026 by rpki-client