Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: sSqmn+wIBXt5ue9KfapINWBWOS3SYbicByKo7147Uv0=
Subject key identifier: CE:BD:2C:62:E2:91:0D:0D:F7:38:4E:93:F0:16:93:6C:D8:D5:AB:7D
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01A0E7E3ED9C6AA19AB9EBF822892C164E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 11BC
Signing time: Mon 28 Sep 2026 12:01:09 +0000
Manifest this update: Mon 28 Sep 2026 12:01:09 +0000
Manifest next update: Tue 29 Sep 2026 12:01:09 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: oILuSGagBG91cGPYYd8uTFYsxKefoHSK73RWaeVaQgI=)
2: BTAvCBcRqPKnpuDR5p2Gq8wAQ3o.roa (hash: PhNCstC0mG6N6OSSLCaGAFo+BJH+pelpZfoyx1/vinI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:ed:9c:6a:a1:9a:b9:eb:f8:22:89:2c:16:4e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Sep 28 12:01:09 2026 GMT
Not After : Sep 29 12:01:09 2026 GMT
Subject: CN=cebd2c62e2910d0df7384e93f016936cd8d5ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:1d:24:c8:54:c2:4e:81:1c:83:c0:ff:b4:
42:60:11:89:3f:e4:67:dd:0a:40:ee:71:c6:01:8b:
de:05:a7:f4:c4:85:ae:ce:92:58:e9:a9:24:84:c8:
4e:e4:1d:14:51:5b:9f:c4:5f:13:f2:1f:fc:8c:a3:
ca:0d:af:8e:f5:95:00:5b:76:b0:21:c3:5a:8f:00:
64:4a:53:b0:9e:42:fa:17:55:8b:a9:ff:69:a0:d6:
ac:3c:de:5c:b5:57:e4:2a:45:33:1b:5a:ee:01:87:
2a:46:47:c2:4c:67:85:3a:0b:8b:78:17:ba:0c:d8:
3a:e7:44:0e:17:e1:56:ec:77:76:14:78:eb:2a:cd:
4b:cb:36:95:09:37:cb:b7:54:b2:88:4b:21:c7:a7:
47:6b:c5:62:c5:7d:8f:ef:82:18:5b:ce:89:21:eb:
ce:aa:8a:6a:6d:51:97:49:dc:fc:71:2b:1a:c0:de:
8c:eb:b0:9c:75:b1:9d:ae:d9:5b:2d:b1:1c:96:ab:
93:89:5e:8d:63:e8:ff:7a:10:b4:51:ff:0f:18:ed:
52:d5:b1:92:b5:f9:b3:a9:91:36:c7:5d:71:e0:73:
6b:ee:39:74:9e:e6:22:ce:4e:32:c7:1e:d1:57:03:
cc:33:95:c6:a1:f5:f5:b6:2f:d6:0a:05:c4:f2:aa:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BD:2C:62:E2:91:0D:0D:F7:38:4E:93:F0:16:93:6C:D8:D5:AB:7D
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4a:dc:b0:7b:49:7f:f2:0c:38:f2:7f:e2:40:16:ab:ba:27:
aa:9e:3a:2a:99:17:51:83:5b:d2:ee:7e:46:41:b8:e9:d1:35:
c7:a6:3c:54:9f:89:1a:60:4a:1f:ee:b0:f9:57:36:d4:ae:31:
03:6e:02:7e:27:a1:9f:69:62:a5:be:db:12:2e:a3:f4:e2:eb:
f9:3a:e8:e3:fc:7c:36:d4:ed:13:7d:6e:95:1f:75:33:02:fa:
f1:67:17:78:03:7c:f7:a1:9c:4e:35:43:b8:83:82:98:97:bf:
e5:77:26:1f:f1:dc:45:cb:96:84:e4:92:2a:4d:a9:cd:0f:d2:
d4:1b:9e:fb:15:a4:d0:57:2f:93:bc:b7:d8:fc:b3:30:45:78:
57:89:65:8e:cb:50:0a:ef:30:24:8c:b8:10:e8:eb:45:a8:a7:
07:08:1e:ff:7a:62:ed:fa:45:e5:08:5d:b4:5c:b6:ae:9f:68:
61:ea:b7:7d:d8:b0:91:c0:4a:a0:e7:69:e7:c5:c2:88:aa:bf:
28:48:5d:08:16:dc:1d:0b:94:64:f4:d3:ad:d4:44:73:b5:85:
c4:83:53:a2:17:c4:9d:9c:72:7d:b1:bb:ca:28:d7:2c:de:8c:
91:b5:ed:1e:17:ea:c4:96:3c:5c:e3:6a:af:ed:39:0d:69:48:
d8:9e:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:24:27 2026 by rpki-client