Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: JUWh+L3OHF6DFLwcQxe1rpCNMznyHJ/E24t3kyq5bgw=
Subject key identifier: 0D:46:2D:8B:3E:63:A7:86:F7:BE:F0:83:BC:32:61:5D:60:92:EF:C8
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019EBE7EF06398F772AC980C0436604AE9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0DF7
Signing time: Sat 13 Jun 2026 01:00:50 +0000
Manifest this update: Sat 13 Jun 2026 01:00:50 +0000
Manifest next update: Sun 14 Jun 2026 01:00:50 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: QgN1lbWabeYkpN3YyW9LHBdwyIZPR9AQ48tUsBp/jfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:f0:63:98:f7:72:ac:98:0c:04:36:60:4a:e9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Jun 13 01:00:50 2026 GMT
Not After : Jun 14 01:00:50 2026 GMT
Subject: CN=0d462d8b3e63a786f7bef083bc32615d6092efc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:98:69:d9:9d:4e:5e:cf:36:2d:18:52:95:91:
b3:ce:cd:b5:b1:16:51:cb:39:da:ff:14:8d:47:45:
72:33:99:c5:61:28:d3:46:a0:f1:ac:fa:6a:f2:8d:
c5:bc:39:c9:3b:7c:f2:70:c5:f0:e5:a9:eb:2e:d5:
7f:e2:6e:e0:81:7e:f7:30:06:44:ad:22:d5:09:cc:
16:f2:51:e0:09:53:9a:4c:b6:49:3b:49:73:bf:ed:
80:9c:a1:bf:b8:93:80:81:8a:c5:7c:f7:ec:83:d2:
b9:db:de:1e:bb:81:86:71:d0:b8:e5:45:4d:00:15:
27:4a:bc:6e:9f:24:4f:f5:71:63:8d:b1:ff:e0:25:
82:c3:4f:0f:ab:01:32:f8:6b:3f:7c:a3:57:4c:7a:
7b:00:08:f6:fe:9b:bb:19:3b:03:f1:0a:52:f3:28:
b0:6c:0f:c8:68:b6:7c:2d:47:55:b6:05:59:47:36:
45:5c:4c:6e:f5:65:fe:a6:10:7d:80:18:93:42:0c:
d5:a8:9c:b5:20:59:9e:72:78:66:f6:29:31:84:82:
f0:49:f1:86:a4:8d:6d:41:cf:1d:10:1d:a3:7f:c5:
5b:13:eb:98:f9:e1:44:a4:4f:5d:15:a5:3a:12:0f:
4e:58:97:94:3b:2b:c5:4f:03:c0:0f:8b:3d:23:07:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:2D:8B:3E:63:A7:86:F7:BE:F0:83:BC:32:61:5D:60:92:EF:C8
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:ce:99:f7:8d:a5:e6:e3:2b:36:09:b8:68:fd:b2:64:76:
bb:7c:20:02:5a:26:f0:47:09:3c:b7:ce:47:be:6e:6c:50:36:
94:e6:96:86:5d:5c:38:d2:ce:fe:19:54:36:80:c4:05:4b:72:
d6:53:fd:d0:35:48:b8:ed:16:ea:f0:7b:67:68:9a:d7:c8:55:
ce:31:d4:de:51:ea:f1:11:34:89:3b:57:d1:53:63:3d:f3:98:
da:9e:c6:6c:2d:2c:a7:3e:25:e5:48:3b:93:9c:6c:0a:a8:9d:
33:83:ce:99:71:e8:84:f0:e9:16:b1:70:3f:a3:ee:9e:2f:4c:
88:22:73:ac:9a:ec:0d:4c:be:30:21:57:6d:bc:99:44:64:e9:
ed:8b:6f:28:67:57:04:d2:b5:4d:54:a5:89:b8:cf:a9:97:60:
58:4e:fb:8a:d5:6f:c1:eb:cd:6d:5b:4c:2a:36:6d:eb:e9:97:
63:36:a3:29:32:f7:c6:7b:80:c4:16:36:be:38:c6:3d:87:0a:
3d:51:e4:dc:37:02:db:8e:4c:ee:db:69:63:a4:59:6f:aa:d3:
6b:e2:2d:f6:76:dd:a6:fa:27:c8:a1:cc:40:bf:d4:06:64:c3:
b4:39:4d:8f:84:b3:67:90:9a:42:23:ec:5a:75:7c:a1:39:9a:
80:18:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:58 2026 by rpki-client