Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
File: 2n-fhLKCx8d4S509G2Lb4NT_CbU.mft (raw, json)
Hash identifier: aeVFww0GcmpARm0B31wyYoKMZlGJ2lxlVIOzkkNMkAc=
Subject key identifier: C3:C3:DA:C8:A8:03:9C:3F:11:6A:85:E6:A1:1E:A5:5C:F2:5A:13:E2
Authority key identifier: DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
Certificate issuer: /CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Certificate serial: 01A0C4E96B85E3567D7185E33C12146F2D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
Manifest number: 71
Signing time: Mon 21 Sep 2026 17:00:26 +0000
Manifest this update: Mon 21 Sep 2026 17:00:26 +0000
Manifest next update: Tue 22 Sep 2026 17:00:26 +0000
Files and hashes: 1: 2n-fhLKCx8d4S509G2Lb4NT_CbU.crl (hash: 1xJXYz+YzaifxVp7o5+spMEbqOQLLq6WbH5SThVVfOw=)
2: HgfT2JSenK4GJsUbQzV8uG_wvvA.asa (hash: LZUpiuRRs3R10CKCH8iywjuLF9goXXtxdoAmImqKVGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:6b:85:e3:56:7d:71:85:e3:3c:12:14:6f:2d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7f9f84b282c7c7784b9d3d1b62dbe0d4ff09b5
Validity
Not Before: Sep 21 17:00:26 2026 GMT
Not After : Sep 22 17:00:26 2026 GMT
Subject: CN=c3c3dac8a8039c3f116a85e6a11ea55cf25a13e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:09:cb:f9:5c:2e:54:86:44:00:d7:3b:97:
c6:19:62:5a:75:fe:00:d7:bd:b2:1f:7b:9a:45:9b:
22:b7:1e:7a:8f:55:2d:2b:27:94:12:91:d2:ee:4a:
e7:f3:90:ca:da:a0:ea:28:1e:51:ba:2b:5d:6e:93:
de:e2:b7:8f:ce:6c:8f:3e:69:36:e7:af:66:33:39:
cc:00:05:ad:93:d1:c6:21:ed:f4:b7:64:73:a6:23:
21:8c:1e:b9:8a:f3:fd:e4:86:d7:02:dc:c0:89:6d:
e8:77:f7:fe:dc:c6:72:31:90:0f:d7:5e:9e:b1:2c:
18:23:55:a0:00:6e:16:b4:6a:f5:21:88:ac:0d:47:
15:31:d2:90:50:70:c3:3e:88:d3:99:31:94:f6:22:
56:19:07:3f:08:ad:d4:5a:37:ee:27:49:38:45:b3:
09:01:47:9d:fd:e5:2b:56:29:f0:3d:1f:aa:63:dd:
d3:d1:bc:a5:fb:91:8f:17:17:0a:45:37:b5:40:89:
d9:c7:4d:e5:b8:63:a9:95:cd:33:f4:35:9b:2c:38:
ef:b1:19:82:3f:9e:86:78:81:29:9e:28:35:6a:e4:
57:b2:1a:6f:8a:46:f1:61:e3:62:56:13:67:05:3a:
98:08:a6:0b:4b:d9:9a:5d:43:c1:c0:67:6a:ba:8e:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:DA:C8:A8:03:9C:3F:11:6A:85:E6:A1:1E:A5:5C:F2:5A:13:E2
X509v3 Authority Key Identifier:
keyid:DA:7F:9F:84:B2:82:C7:C7:78:4B:9D:3D:1B:62:DB:E0:D4:FF:09:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n-fhLKCx8d4S509G2Lb4NT_CbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fdafb7-1574-4425-9489-6ad4ec9ffe77/1/2n-fhLKCx8d4S509G2Lb4NT_CbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a3:3d:50:ca:0b:7d:06:66:94:fe:c7:67:de:5b:1d:e1:b8:
f2:69:3b:67:b2:2e:31:e8:c3:1f:8c:dc:db:03:3e:40:3c:5e:
09:ce:ac:89:d6:ac:51:61:29:31:d1:69:bf:16:c9:65:31:34:
22:f0:05:b7:bd:8f:ce:a5:e7:38:7a:ab:10:2b:fc:55:09:0c:
71:29:72:61:25:16:86:55:2b:82:77:70:94:c4:e6:05:54:df:
d7:92:ba:6c:53:50:6a:d1:d9:64:24:4d:0d:2f:ff:a8:f1:95:
c4:13:4a:69:4c:a9:8d:00:3f:f5:20:90:a4:51:be:18:27:74:
7a:11:94:32:a3:47:54:22:32:2c:fb:8e:ed:04:cf:61:46:a4:
97:d8:fa:75:4b:1a:e7:16:c9:b2:96:06:e0:47:77:6b:f1:e6:
4a:2a:6d:3d:fc:c2:ef:02:b4:9f:4e:df:0d:20:13:ca:98:cc:
30:3a:3f:e2:37:3b:17:6e:42:da:6a:6b:7f:28:d5:20:5c:ab:
c3:cd:ee:d6:15:c3:27:3d:81:0a:8b:d3:a3:a4:99:b8:19:ed:
4d:80:34:1a:98:1a:8a:cc:dc:4f:8c:23:92:20:25:e2:d5:e2:
01:ff:5e:01:7f:d9:d5:8a:4c:59:ed:24:8a:26:cf:01:75:56:
62:ea:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:15 2026 by rpki-client