Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: bp6EatAtfJqBKZeCrlJkm/VXQZhV0ew1yUq8F1Iz4z4=
Subject key identifier: 10:6B:B4:4C:95:29:69:F1:4E:18:A2:98:0F:B9:F1:6A:92:0D:B3:21
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 01A0C40DC9EF10ACE2FEDB919D94E329BCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1855
Signing time: Mon 21 Sep 2026 13:00:32 +0000
Manifest this update: Mon 21 Sep 2026 13:00:32 +0000
Manifest next update: Tue 22 Sep 2026 13:00:32 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: rHOfOnHFrwieqN0gRAf3Quh8XP/vKwEDeQj6hThL1vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:c9:ef:10:ac:e2:fe:db:91:9d:94:e3:29:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Sep 21 13:00:32 2026 GMT
Not After : Sep 22 13:00:32 2026 GMT
Subject: CN=106bb44c952969f14e18a2980fb9f16a920db321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:b7:e6:cc:7b:da:2f:16:67:30:ed:7a:db:
ee:92:4f:33:aa:a7:32:c2:d8:b8:d7:59:8c:c9:8d:
a2:45:8b:d8:e5:b5:a1:9f:43:f8:03:63:78:08:c0:
0c:f7:c0:c6:88:b4:a1:d6:40:9f:8d:b7:b8:cf:2c:
36:53:52:5e:81:26:5f:d3:60:d2:17:37:c6:8d:35:
62:dd:2c:13:91:31:f2:c9:8e:52:9d:27:18:f7:a2:
1b:18:0c:70:91:a0:3d:b3:aa:bf:5e:0c:cc:43:60:
92:64:fd:0a:43:11:c0:7d:df:16:b2:43:d4:0c:4d:
28:4a:25:53:19:16:ff:5c:a2:52:83:5b:ee:fa:68:
a6:8f:ed:72:a0:7d:a7:53:ba:fd:ec:d2:85:6d:1d:
fe:79:6a:d3:c7:e4:d4:72:e9:69:29:5d:dc:0c:09:
b0:d3:ca:0c:d1:de:15:27:e3:3e:c9:c5:88:a5:d1:
90:6a:af:fd:34:0d:eb:56:b3:1c:bb:1d:30:21:be:
bb:8d:41:2b:df:5c:c9:37:e8:ac:b9:63:8f:c4:e8:
6d:e1:77:c9:b1:b4:4b:18:03:6b:fb:1e:b4:9e:68:
57:ec:07:77:bd:03:89:04:dc:31:7a:60:c5:ab:5d:
27:be:16:10:53:de:16:2d:39:cb:a7:a9:3a:90:89:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6B:B4:4C:95:29:69:F1:4E:18:A2:98:0F:B9:F1:6A:92:0D:B3:21
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:95:b8:8f:2b:94:51:18:3f:01:fa:4a:46:ba:b4:76:6d:25:
bf:5a:18:db:14:ab:92:b2:6a:f3:95:a7:fb:6f:47:25:7c:e6:
da:21:14:5e:41:68:4d:ce:a2:8c:86:81:26:22:53:5d:09:09:
45:d3:49:6e:07:fa:d5:22:84:16:7e:d5:42:78:83:0d:1b:b4:
d0:e5:9a:cb:79:91:e7:21:b0:14:e7:dd:46:d4:93:35:b3:78:
60:2c:10:b9:06:ae:73:2c:d7:76:96:63:52:ec:8d:ed:2d:d0:
06:5f:1a:e2:77:cf:31:89:57:04:87:7d:31:ea:47:94:83:8f:
fd:90:b5:4b:46:4e:2f:63:41:f6:25:ef:49:1a:d3:36:6b:15:
3c:56:47:7c:2e:e8:80:c0:f4:52:5a:ee:6b:2d:76:e3:4b:ca:
ab:09:1b:fb:ba:56:7c:d6:6a:65:59:78:1c:a5:d0:59:56:21:
50:e8:c0:f3:5d:d5:2b:8e:23:b1:e2:07:2f:f6:ad:cc:df:3f:
f6:be:27:37:3d:1e:d9:cf:99:f8:2d:24:dd:c0:6e:2c:46:6e:
33:35:a1:0e:5c:33:f1:24:2a:24:57:e8:16:2b:89:82:d3:7c:
7d:3b:61:3d:a9:8c:bc:c0:aa:d2:e6:ae:c0:be:34:e8:1f:8c:
17:af:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:14:16 2026 by rpki-client