Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: 5imSpI20NorjzdvhokEvikwdQzpivbPJ6Enf73awiEs=
Subject key identifier: 5E:03:35:9E:E2:AA:81:D8:B9:35:81:75:4E:E6:C4:99:FE:89:83:AB
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 01A0C21FCA3264D6638488CE1097CE84ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0AF5
Signing time: Mon 21 Sep 2026 04:00:58 +0000
Manifest this update: Mon 21 Sep 2026 04:00:58 +0000
Manifest next update: Tue 22 Sep 2026 04:00:58 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: INdXL3QeVvkLFG6QXcNTxRg09qkTH9YxcJU2s/n6u4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:ca:32:64:d6:63:84:88:ce:10:97:ce:84:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Sep 21 04:00:58 2026 GMT
Not After : Sep 22 04:00:58 2026 GMT
Subject: CN=5e03359ee2aa81d8b93581754ee6c499fe8983ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:c0:94:d7:60:f7:1f:68:65:56:1b:2c:0f:
5f:dd:51:e4:63:ea:36:6d:36:c3:08:9b:e4:ed:e3:
23:be:95:fd:04:b9:ba:bc:6a:53:90:60:fd:f3:9d:
29:78:21:5c:88:9b:cf:9b:b2:e7:59:b1:22:0c:f0:
32:a4:62:95:88:91:8a:f3:19:ce:b0:60:d7:b4:a8:
4b:19:7e:40:c9:f9:ad:85:d8:54:a3:0c:34:17:1e:
cc:05:c3:8f:5d:b1:5e:50:6a:03:3d:c3:d8:63:e0:
73:f2:e6:7f:40:2c:03:18:77:1a:8f:d4:ae:4a:5c:
49:c2:73:2d:c9:6a:a2:53:94:e5:71:9f:10:69:68:
b3:b7:a5:a8:38:28:ed:3d:1f:d9:c1:ca:12:5f:73:
1f:b0:3b:f4:20:5d:68:6d:b5:c3:ad:0e:e0:ad:87:
64:ca:a6:e3:c5:aa:22:6f:b0:c2:2a:ba:0c:32:d3:
81:17:57:7d:67:83:2d:ce:e9:3c:f1:0d:ff:a0:aa:
f5:05:c2:57:c9:88:33:d1:bb:12:f8:2f:bf:55:c6:
73:9c:a8:68:63:a7:e1:4d:fc:86:08:fd:c5:f8:3a:
1f:f1:85:db:23:4f:35:80:bb:dd:b9:85:1a:4e:29:
7a:fe:25:7b:26:7f:68:66:55:ff:ef:c4:f4:05:ea:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:03:35:9E:E2:AA:81:D8:B9:35:81:75:4E:E6:C4:99:FE:89:83:AB
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:84:3b:28:a7:44:d7:3e:5e:5d:2d:ea:ef:19:a4:d8:a2:1f:
77:a3:49:0e:c0:e0:7d:a3:3e:d3:37:1a:56:49:36:02:bd:c0:
59:28:3e:9f:d6:93:53:dc:ce:11:13:12:47:99:a3:90:ab:c3:
92:5a:52:84:b2:6a:6d:74:8c:7b:6c:6d:f5:23:7f:79:cd:18:
4f:74:21:a1:8d:5d:e8:f1:24:02:b8:39:8f:21:a2:6d:97:d3:
49:71:98:49:43:bf:4e:c3:38:55:13:c5:c8:46:45:35:8b:11:
13:b2:a4:49:cb:3e:61:32:07:78:a5:81:52:b6:00:04:06:dd:
aa:56:01:7f:0d:c1:26:d6:61:54:7b:ba:7d:6f:92:3e:68:7b:
b6:e7:6d:66:c7:6a:d8:b5:82:65:1d:9f:c6:40:8c:89:ce:f5:
ee:e1:8e:bc:d0:5e:2b:fa:41:b4:8f:f3:e2:05:12:d1:3f:4b:
e0:2b:0a:7c:1b:a9:fa:a0:fc:03:bf:82:0c:79:e4:3e:a2:cc:
b1:a2:10:6c:a2:c8:be:a3:2e:1d:5d:62:05:71:27:b0:58:2b:
83:72:9d:a0:a1:48:0a:25:89:0c:4f:40:dc:1a:56:07:08:75:
7f:2e:3e:80:fd:96:a3:96:08:8f:74:e2:ce:82:1a:85:d7:6f:
5e:81:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:56:35 2026 by rpki-client