Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: 7M8t+sCjDTaGc0qTYp5jZ1M1f7fbTMzsjc4pU+LR7FA=
Subject key identifier: 08:DC:95:96:CD:2F:9A:EA:F9:99:06:8B:8B:9B:AD:12:C1:D4:62:45
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 019FAA1A8C06BD217F7EC3AA6C39F5E0C3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0A64
Signing time: Tue 28 Jul 2026 19:01:34 +0000
Manifest this update: Tue 28 Jul 2026 19:01:34 +0000
Manifest next update: Wed 29 Jul 2026 19:01:34 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: jq3BNpuWf5ZiFEC4LiVZk725/BrmgpEvlbw9P8bdgMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:8c:06:bd:21:7f:7e:c3:aa:6c:39:f5:e0:c3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Jul 28 19:01:34 2026 GMT
Not After : Jul 29 19:01:34 2026 GMT
Subject: CN=08dc9596cd2f9aeaf999068b8b9bad12c1d46245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:56:62:a7:9e:26:6b:9f:67:d7:c9:ae:4e:
ac:2a:6a:0c:2f:8f:d7:5b:c5:33:bc:0c:71:2e:32:
f1:9f:5b:2e:ca:18:9c:67:2f:44:d8:26:b7:9e:84:
44:3f:f1:d7:23:02:87:bb:3e:0c:83:ac:3b:93:f2:
83:19:77:76:d8:4f:bf:32:7d:00:15:33:f1:64:e3:
8f:db:1a:3f:43:07:08:20:22:b6:f6:46:0e:26:5d:
27:92:a2:b9:17:f1:dd:ab:c8:ef:d4:6d:85:d5:5f:
6f:71:86:e2:02:60:b6:77:b2:35:a0:0e:56:b2:0e:
4d:71:97:18:c8:e1:80:63:56:05:99:e7:26:86:f9:
25:c3:3a:db:e4:08:56:c7:9a:17:0c:f2:ab:0c:09:
96:19:5c:b6:01:47:0d:c3:30:54:ba:b4:37:b1:d1:
0e:cc:34:78:59:68:53:9c:a9:b8:37:ac:8a:c2:77:
13:2a:dc:07:d5:63:f8:a3:47:42:c5:77:69:3b:ec:
64:6b:b3:d4:97:80:48:ba:0c:97:6b:b9:55:62:69:
60:90:ec:15:78:04:12:c4:fa:45:b5:b5:e2:56:61:
56:27:12:fc:a3:32:f3:fb:5a:f0:a7:2b:d5:5d:47:
04:81:4e:ba:89:dc:9b:e2:9d:a2:f0:19:a8:27:6f:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:95:96:CD:2F:9A:EA:F9:99:06:8B:8B:9B:AD:12:C1:D4:62:45
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:75:33:7b:11:fe:21:22:05:c7:45:3e:e4:0b:30:68:1a:eb:
8c:ab:13:4e:fc:79:68:83:1f:9b:e3:fd:8f:a0:fa:9b:2e:43:
09:d5:24:ce:0d:72:8c:be:8a:4f:4c:24:93:d3:98:49:00:80:
61:3e:c4:69:70:7a:29:17:42:87:98:d9:e8:26:a9:39:81:35:
be:3e:2d:f5:9c:66:3b:dc:b1:5b:96:52:fb:31:40:13:6e:9e:
ad:6e:65:54:59:c9:48:2f:47:fc:27:00:cb:4e:8a:88:70:1e:
fc:2b:1e:f5:dc:43:c5:8f:f2:c5:82:f2:1c:10:a6:88:74:18:
2e:88:ce:8d:36:94:92:34:64:8a:7d:f8:b0:10:ef:55:02:51:
c8:3e:4b:96:fd:35:cf:4c:ec:e9:e4:25:5f:d1:9c:16:9c:07:
f1:cd:ce:c9:0e:e3:0d:5a:5f:05:f0:d7:f4:9c:da:5f:4e:75:
4c:5c:85:0e:38:ae:91:22:be:35:a2:36:d1:79:c8:0a:87:e6:
a3:0a:c5:b8:a6:5f:b7:df:d0:6c:60:25:46:c3:68:ae:02:1c:
6e:af:2a:10:a6:a2:a3:7a:79:cd:a5:62:59:c9:bf:80:85:20:
a3:09:d6:8b:b1:07:92:1f:10:13:7c:26:b9:d6:19:3b:c0:20:
19:e0:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:37 2026 by rpki-client