Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier: KhFtzYiCWsYLOlbuZBpCf1lOvaf/is1wfhGWbGLGyag=
Subject key identifier: D6:80:97:7B:CC:94:5D:30:88:64:11:09:83:E0:39:BE:D1:07:09:15
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial: 019CAA587B544F64DFFED1D545D347711ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number: 0F38
Signing time: Sun 01 Mar 2026 17:00:51 +0000
Manifest this update: Sun 01 Mar 2026 17:00:51 +0000
Manifest next update: Mon 02 Mar 2026 17:00:51 +0000
Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: ZeM+x6JmOW7lOLoOzvJlgcUPvYa22VAeogvWsVO8Iuo=)
2: AvvuwRM1rXoB8yxstk4ZmsXgR1Q.roa (hash: G1ri1MeorzSK/rz57ShZ1na3AYjwABPoQHfjiBcWJn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:7b:54:4f:64:df:fe:d1:d5:45:d3:47:71:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Validity
Not Before: Mar 1 17:00:51 2026 GMT
Not After : Mar 2 17:00:51 2026 GMT
Subject: CN=d680977bcc945d308864110983e039bed1070915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:1e:c7:10:87:0c:f4:7a:0a:f3:63:1e:c2:
53:3a:28:a1:8d:e5:04:5d:c4:ed:74:25:be:e0:35:
ad:6d:cc:d1:f5:06:1c:39:e0:b5:4a:a7:59:7e:10:
67:22:9c:18:46:7d:0a:36:50:0f:fa:48:3c:e2:af:
6d:42:53:6e:31:cb:ba:75:fb:23:cd:6c:f9:11:be:
fd:b3:77:68:c3:0b:c7:0f:a5:3b:77:03:b0:10:9b:
14:ba:11:6f:0b:f8:03:57:e5:70:de:17:de:96:53:
e3:4d:86:0c:7e:59:f8:5d:43:48:56:f7:75:c0:d3:
7e:d3:91:70:55:1c:95:da:d0:7f:42:62:c0:36:13:
86:9a:53:b7:14:de:39:4a:8c:d9:d5:82:11:77:c5:
3b:f8:f8:42:3f:bc:28:42:f4:e4:fc:19:40:94:53:
e3:e1:84:7d:27:05:86:e8:85:13:28:7e:32:1d:e0:
c7:e0:1c:06:22:ca:e9:00:89:2a:bb:1c:43:24:4c:
ae:0a:1b:cf:f9:60:f9:01:39:34:d2:7e:f6:a9:85:
82:d9:ac:b2:f7:57:88:24:c5:99:3c:b5:aa:f8:19:
5e:0d:24:ab:53:02:29:8d:67:87:eb:02:2b:eb:fb:
73:ee:30:1c:f1:0c:72:f1:71:f9:ed:66:34:05:fa:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:97:7B:CC:94:5D:30:88:64:11:09:83:E0:39:BE:D1:07:09:15
X509v3 Authority Key Identifier:
keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:5f:ce:3b:d0:ed:87:a8:22:6c:70:e7:31:b4:7d:88:d4:9a:
61:35:6c:7b:82:60:98:7c:4f:e3:e0:34:63:78:60:fc:72:64:
d9:68:0b:4a:9d:e7:91:eb:a9:27:2f:f6:eb:5e:14:33:23:1d:
e2:ed:31:fd:24:32:dd:f4:c2:73:77:f9:79:32:d6:3f:c9:3a:
2c:7a:b8:f7:99:6e:fa:90:05:6e:fc:34:ee:6b:9a:a9:a7:37:
dc:08:ff:2b:a6:50:19:a8:c1:48:6f:4a:70:9a:c7:4d:9b:92:
15:b7:56:d1:16:47:13:5f:72:18:f1:6f:27:d9:7c:ed:47:95:
5b:4f:dd:5e:aa:0a:ca:e0:61:b8:af:5e:f9:2d:59:18:74:01:
a4:11:c6:36:9a:70:67:d0:6b:ad:9d:fd:f9:cd:c4:b3:5e:1c:
c9:78:48:44:ab:89:3f:50:7d:f2:4e:36:d4:30:b9:5a:90:c5:
64:2b:e5:03:8d:e8:3a:8d:32:9c:a3:9d:0f:99:cf:47:49:9c:
67:89:da:e1:fb:71:de:38:c9:76:99:0c:bb:61:96:0b:5c:78:
ee:3c:e3:cb:e3:4b:d3:ae:0d:46:2b:85:a6:7c:43:00:46:7c:
7d:bb:ca:84:1d:74:0d:9f:8b:84:b4:03:3f:e3:45:f4:fb:17:
df:ad:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:03 2026 by rpki-client