Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: NCuRbjrXd0A6vih9lx0hZN7u0rMyEplOm1eG3Dp+CNM=
Subject key identifier: 6F:F2:0D:9C:22:6C:44:50:55:8C:40:94:20:42:25:3E:8D:1B:D6:9F
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 01A0CE2417D330B00DF440A84C7BD54D1D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1A66
Signing time: Wed 23 Sep 2026 12:01:06 +0000
Manifest this update: Wed 23 Sep 2026 12:01:06 +0000
Manifest next update: Thu 24 Sep 2026 12:01:06 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: J9U8ARKgxTN8Wrbs9drPbQXLqrwYMQCsTAnpizPMHgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:17:d3:30:b0:0d:f4:40:a8:4c:7b:d5:4d:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Sep 23 12:01:06 2026 GMT
Not After : Sep 24 12:01:06 2026 GMT
Subject: CN=6ff20d9c226c4450558c40942042253e8d1bd69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7a:94:97:27:ec:45:be:b8:c6:30:e1:3a:ad:
04:a4:41:c0:b5:0c:54:21:83:0e:94:1e:d3:59:31:
c0:4b:29:59:50:bb:07:09:5c:78:ff:8b:ce:52:7d:
d8:ab:ed:41:5b:47:31:0c:b4:14:fa:7c:9b:03:bc:
45:95:6d:2c:a1:4e:f1:a7:39:fc:0b:1e:0d:ea:71:
62:0b:e6:91:e8:ba:ff:1f:c8:fb:73:62:ef:14:67:
15:e7:ce:6e:7c:9b:3a:5b:c2:01:4d:1e:eb:f2:97:
9e:91:79:1a:91:a9:7b:34:c6:89:86:96:5f:0d:21:
72:25:56:b8:93:75:75:42:96:81:24:a3:4b:f6:2e:
3c:47:22:2e:9a:20:5f:34:78:b8:1c:90:a4:17:e8:
f6:8f:8a:66:11:b5:6e:04:79:a2:f4:a5:c5:d3:5a:
69:ed:1b:0b:75:b6:a2:4f:86:2a:fe:6d:86:13:78:
a1:25:ae:57:dd:b4:31:d2:2e:59:d4:0f:30:f1:c7:
ed:bc:5d:32:53:bd:e9:19:ff:f1:90:c5:f9:ba:0d:
6a:71:91:05:c9:27:f1:ac:8b:35:2a:71:3c:32:35:
06:a7:cd:1b:8a:b7:65:6e:0c:7d:50:79:04:90:71:
a2:1a:1f:ae:b8:50:58:5f:68:a0:39:b4:77:a9:0a:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F2:0D:9C:22:6C:44:50:55:8C:40:94:20:42:25:3E:8D:1B:D6:9F
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cb:51:d5:3f:4c:15:11:7f:ca:ca:44:3b:6f:45:76:47:a8:
48:25:2b:a4:d9:08:d0:0d:f3:7c:2f:d2:78:7d:71:b0:93:e9:
05:99:f8:b0:bb:cf:71:4c:78:51:54:0a:c3:de:9c:40:ec:1f:
1d:a7:1a:df:85:60:ef:52:6c:43:cd:52:d2:d2:8e:4f:a0:d3:
3e:72:03:d3:93:98:d4:a5:fb:f6:a8:3f:8e:43:4c:d3:e7:fa:
c2:0a:27:70:85:e3:0a:cd:1e:e8:86:2d:d9:48:c9:6c:76:49:
02:d8:25:bd:b5:cc:51:5e:69:0f:a1:e9:50:b7:3c:1b:d7:b3:
73:70:4a:fd:2e:36:91:61:ce:04:5c:f2:d3:5b:91:d2:1d:31:
cc:d6:6d:e7:82:31:02:68:7f:c5:f5:d2:f4:c9:31:ba:72:b1:
ab:01:c5:2f:ee:36:c6:51:93:69:0b:e7:c3:e7:68:cd:1f:28:
26:54:2a:e6:e6:7f:eb:ae:dc:ae:aa:22:53:16:f6:36:16:51:
dc:e7:69:14:87:0b:b8:ff:67:ec:7f:43:04:b1:b3:f9:3e:5b:
ca:ea:04:d8:ae:de:22:bd:ff:70:30:fc:bf:ea:36:0c:b6:05:
0c:1b:ec:46:28:52:00:9b:46:c1:49:b1:db:bc:b9:5f:d0:39:
2e:92:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:55:54 2026 by rpki-client