Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier: Dugxa5JrhmNxBfeCn7D//ZCoqR48eEAcqR17Jl6Sv2w=
Subject key identifier: 65:BD:71:7A:50:24:71:31:5A:7F:E3:E8:74:35:5E:FC:8C:5B:CE:5A
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial: 019D97E26EF78EC14916F6AB35F20DABBDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number: 0FB3
Signing time: Thu 16 Apr 2026 20:01:32 +0000
Manifest this update: Thu 16 Apr 2026 20:01:32 +0000
Manifest next update: Fri 17 Apr 2026 20:01:32 +0000
Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: Y8kDEmZe22m/3i+vaVItj1RjWFH2KW5BpLtLevwnh/M=)
2: AvvuwRM1rXoB8yxstk4ZmsXgR1Q.roa (hash: G1ri1MeorzSK/rz57ShZ1na3AYjwABPoQHfjiBcWJn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:6e:f7:8e:c1:49:16:f6:ab:35:f2:0d:ab:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Validity
Not Before: Apr 16 20:01:32 2026 GMT
Not After : Apr 17 20:01:32 2026 GMT
Subject: CN=65bd717a502471315a7fe3e874355efc8c5bce5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ce:57:00:2f:bb:cc:6a:19:e0:4d:20:16:b0:
cc:68:5b:2b:6e:f2:36:73:88:af:17:04:34:12:69:
eb:81:b9:ff:86:ed:66:06:11:56:46:08:79:1a:b9:
e9:ba:ef:7b:46:04:23:9e:96:d3:af:cb:9c:5a:fb:
5c:20:79:e7:71:55:53:26:93:93:9c:56:55:25:ba:
24:77:24:76:48:b8:2d:4c:14:df:f0:c3:8b:a9:09:
fc:0e:77:65:04:5c:a9:d9:80:32:20:16:88:39:12:
ff:75:b3:fb:2d:d6:62:60:2e:c6:e4:15:bb:21:43:
2d:56:86:fa:05:6a:75:70:16:e6:1c:df:99:0c:02:
ee:18:d4:9a:e0:b3:ef:35:1f:f2:eb:b1:59:f0:97:
97:d7:db:e3:ff:c2:85:de:c2:7f:5a:60:de:49:84:
60:59:f0:7e:17:96:11:e8:6d:43:00:af:eb:c9:76:
dc:b8:86:e9:48:13:47:a0:f1:cc:df:88:19:37:79:
a8:bb:35:5b:ed:60:ac:53:5b:2c:39:06:2c:2d:9c:
f5:15:cc:84:9d:a5:5b:0e:8d:39:ad:05:79:5f:42:
91:ab:0f:63:e0:78:fa:fc:25:a0:0b:08:5b:2a:8b:
71:f6:25:13:4c:57:07:43:45:14:d6:c7:c8:c3:6c:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BD:71:7A:50:24:71:31:5A:7F:E3:E8:74:35:5E:FC:8C:5B:CE:5A
X509v3 Authority Key Identifier:
keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:03:a7:2c:f2:2c:c8:d7:fc:ce:b6:bc:f5:a7:1b:39:8f:
80:b6:30:4d:bd:db:a6:50:59:48:76:fd:42:67:55:bd:e2:f3:
36:08:6e:86:24:8f:44:ac:07:61:f3:ea:01:46:ba:5d:69:51:
c7:0d:d8:b2:1b:b0:d8:8e:7b:fb:fb:3c:06:fb:bd:1e:57:63:
cd:d4:e7:57:0c:86:91:86:77:bd:1d:92:c5:82:c5:06:f9:8d:
e9:0f:bd:19:3a:62:04:9c:a9:42:29:c9:4c:a7:a5:3d:aa:6e:
84:48:9e:e9:e6:87:22:53:af:11:28:57:13:1b:30:cd:fd:63:
35:43:bf:31:a8:28:83:c4:43:c7:97:ba:75:66:45:b6:7f:52:
a4:e1:39:ac:42:26:a7:45:d9:a6:47:83:8c:9e:7b:7e:37:1a:
a1:9f:98:2e:56:27:3d:4a:9a:a0:34:ef:4a:69:98:76:05:b3:
8b:5d:a3:9d:eb:4c:c5:66:ce:c8:8f:6f:fa:3e:3b:c4:0e:72:
b9:09:f3:26:89:ee:c8:9f:b7:9c:6e:72:0a:ed:74:68:66:6a:
2c:20:d4:bd:3d:9c:19:3e:c5:92:d7:a1:89:27:7c:82:71:d2:
8b:07:1b:71:f6:c6:73:47:49:c6:89:56:09:18:81:9e:09:a8:
94:95:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:03 2026 by rpki-client