Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: +XyWIYu3lrBEeUVfEEiIGSyV2EyDvizhHZXP3I34WE4=
Subject key identifier: 05:C5:D1:08:9C:E6:C0:75:30:3C:69:89:8C:CF:1B:91:71:B9:26:7C
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 019FAA1A56B150BCCE2ED405D34D834D1286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0CB4
Signing time: Tue 28 Jul 2026 19:01:20 +0000
Manifest this update: Tue 28 Jul 2026 19:01:20 +0000
Manifest next update: Wed 29 Jul 2026 19:01:20 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: Alf/Joz4mYLK+l/aQm8I2vI0hmEAPrtzekszKdJIZXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:56:b1:50:bc:ce:2e:d4:05:d3:4d:83:4d:12:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Jul 28 19:01:20 2026 GMT
Not After : Jul 29 19:01:20 2026 GMT
Subject: CN=05c5d1089ce6c075303c69898ccf1b9171b9267c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:c0:f8:d0:b4:d4:14:5d:e1:d6:db:a2:ce:
3a:bd:93:07:74:62:75:3b:02:9e:86:b8:65:a0:28:
9c:41:45:39:ad:09:79:dd:8b:6f:df:d0:53:ce:f0:
fd:b7:3c:c6:9c:d3:2e:bd:38:5b:99:5d:77:7a:e7:
26:f1:6b:6a:26:20:aa:b9:06:ed:44:6e:02:2a:f5:
c8:ff:22:cb:95:fc:3b:ee:1b:a2:aa:ce:46:1d:87:
04:8b:e5:c0:91:59:78:6a:af:1f:1e:5a:bc:57:df:
35:8a:2d:c1:65:86:d7:27:d0:f4:a5:70:03:d6:9f:
bb:78:0b:ea:d6:d7:bf:a7:57:95:e6:66:58:89:ac:
b5:15:e3:53:bc:9a:c5:ac:56:f9:d0:f0:30:33:a0:
fd:0c:25:3c:68:26:b7:0c:40:5f:c7:44:ec:66:fe:
c0:81:31:07:49:69:28:ba:03:fb:0b:64:01:fb:18:
4d:79:55:74:60:08:1c:6d:79:0f:ea:ad:91:54:3c:
ef:af:5d:bc:01:70:11:03:1a:20:e3:e2:5d:6f:a6:
74:16:2d:98:8e:bc:ff:bf:cd:ef:a4:07:1c:50:4b:
08:88:57:ea:ee:fe:fe:48:e7:72:5d:58:b7:13:00:
01:3b:98:3e:54:9c:fb:70:08:bf:7d:32:04:d5:34:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:D1:08:9C:E6:C0:75:30:3C:69:89:8C:CF:1B:91:71:B9:26:7C
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:be:bf:a7:cf:08:68:69:40:a4:b7:21:71:7a:3b:3c:45:3a:
4a:aa:0b:a1:72:a2:27:ba:d2:74:b0:73:d9:ea:44:70:21:e3:
88:ee:2f:63:16:a3:5f:bd:3f:39:6a:eb:18:f0:58:c8:2d:1e:
eb:e5:eb:58:c9:e1:0f:14:90:95:a4:ee:05:ee:22:e6:1b:12:
0a:42:a9:cd:a1:fa:95:8b:36:15:a9:88:2d:0f:45:7c:76:d7:
ac:25:9a:78:64:8c:b6:95:57:d2:0c:5c:55:4a:84:8e:c9:f7:
66:6f:53:fb:17:a5:b6:05:16:19:e9:6c:3d:6f:3b:ce:f4:6f:
45:76:82:79:c3:b5:b6:7d:e3:82:d1:17:4b:4c:79:e3:9f:52:
72:d3:4d:d0:df:b7:18:dc:ea:93:0b:08:73:28:c6:41:59:72:
d0:f7:56:89:4c:cd:fd:3c:24:88:c5:0e:1f:62:6d:f0:a0:d4:
f0:3c:b7:8a:ea:02:45:32:49:dc:2c:0e:93:37:32:2b:52:1c:
a6:2f:6f:22:ea:6d:cb:dc:23:1f:26:02:71:e3:5e:90:a0:44:
8b:82:13:00:6e:31:72:12:1f:aa:2c:09:7c:a5:26:9d:60:ff:
f0:a0:16:18:5f:21:c5:e5:21:60:df:b9:89:2d:a9:5b:28:f7:
6e:a7:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:23 2026 by rpki-client