Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: ek4ehDqX1f6g7qr8ePuAYFmspljkNAzq4rzkUqZ25co=
Subject key identifier: 25:F6:C6:20:A7:C2:CD:28:6C:6D:A2:01:20:FF:87:C8:D2:9A:79:16
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 01A0C22031EA8C8CD946CEF0684C49560B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0F02
Signing time: Mon 21 Sep 2026 04:01:24 +0000
Manifest this update: Mon 21 Sep 2026 04:01:24 +0000
Manifest next update: Tue 22 Sep 2026 04:01:24 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: AFJ6u9dQdGHXOxPl/Moa3s78XZO/8QOVND47HBNHobI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:31:ea:8c:8c:d9:46:ce:f0:68:4c:49:56:0b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Sep 21 04:01:24 2026 GMT
Not After : Sep 22 04:01:24 2026 GMT
Subject: CN=25f6c620a7c2cd286c6da20120ff87c8d29a7916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:45:15:01:77:d3:37:78:cb:fd:ab:0b:90:
2a:52:4f:2f:41:a3:77:29:b2:bb:f4:be:0a:35:3f:
1e:b2:db:49:80:30:85:aa:9f:de:4b:3f:f6:48:32:
77:58:8f:fe:ad:96:57:5d:62:bf:50:3e:79:dd:7e:
60:ab:87:18:55:8b:35:f2:5d:ac:5d:3b:0c:99:15:
5f:c0:e4:a4:ac:cf:2f:11:03:b8:55:ff:01:af:b2:
57:f7:b5:39:5b:25:c8:cf:2d:0b:ce:5b:00:5b:cc:
b7:1f:ee:28:38:b4:6f:02:9d:4b:55:89:a1:05:85:
ca:23:94:35:7f:31:21:cf:a4:7c:6e:8d:95:99:23:
1c:8f:7b:f5:64:ae:44:d3:30:0d:76:ed:f8:63:ab:
e5:0e:3a:74:d3:50:fb:65:5c:54:8d:96:1d:4f:16:
c5:69:1c:d9:02:aa:97:16:05:2a:22:4d:81:d5:c8:
03:56:48:1d:8d:e7:7f:f2:9a:eb:68:2c:6e:c6:6f:
dd:27:27:34:c7:00:dd:92:75:a8:a9:76:19:b5:d5:
21:6a:60:da:1c:f0:a6:9c:5c:bd:4e:25:cf:7d:85:
71:5a:19:41:87:da:43:be:2b:59:b6:e4:29:52:0f:
71:9e:df:30:fb:4f:f7:a1:04:c1:60:eb:60:55:ca:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:C6:20:A7:C2:CD:28:6C:6D:A2:01:20:FF:87:C8:D2:9A:79:16
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b2:d1:ee:da:88:e1:13:5c:c5:5e:da:ad:09:41:c9:4e:83:
f3:7b:e1:e5:4d:a2:13:f1:63:f9:7c:e2:36:e6:01:63:58:fd:
3e:b3:b9:71:53:d4:25:5e:40:f9:b9:17:46:e9:e4:3a:17:41:
f0:4f:42:a6:66:f8:ef:3d:54:ee:60:ea:42:0e:8c:b0:6a:05:
59:69:46:65:08:3d:9d:7f:06:f7:2d:80:c9:8c:25:ef:1a:72:
ba:9a:36:95:d3:68:64:2b:f1:e7:3a:1b:0e:15:f9:ce:5f:80:
f8:a1:cf:3b:5e:47:fc:bc:86:21:f4:24:61:74:18:84:f6:aa:
de:0a:ae:66:20:13:46:1c:ac:e4:bf:c6:83:17:32:ac:ac:6b:
c9:75:02:e6:ce:79:90:4d:0a:6e:67:f3:5c:7e:fe:76:7e:d3:
f6:87:ad:85:8f:ee:e7:f8:e7:c4:c8:0f:9a:53:cc:1a:3d:ef:
f0:ce:d8:0f:26:61:54:e1:3f:7d:fa:d8:9f:1d:a4:2f:44:10:
68:d0:3b:76:7b:c4:2b:a5:35:cc:2d:c4:d0:c0:7e:bc:06:99:
8a:ed:32:89:01:89:bf:45:ed:ab:f0:4d:c4:98:e9:9e:4a:bc:
f1:b8:ce:d8:40:52:47:ff:b3:56:1f:51:9f:db:2b:85:b4:31:
c7:3c:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:13:16 2026 by rpki-client