Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: pGXd3XW5WG+1u5afb6vc/xvVQ12kQKzuzQ15Puqq5PQ=
Subject key identifier: EC:C4:9E:7D:3E:CB:C0:EA:CC:23:DB:9C:7C:D4:22:FC:05:F3:AF:AD
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 01A1DFF10D4A3F35D6031A8990E7BB64821A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0DD9
Signing time: Sun 15 Nov 2026 16:01:19 +0000
Manifest this update: Sun 15 Nov 2026 16:01:19 +0000
Manifest next update: Mon 16 Nov 2026 16:01:19 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: JUzKBQoV0llv5/x44B3aPJ/XS5cak98cq6wSgL+Ivx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:0d:4a:3f:35:d6:03:1a:89:90:e7:bb:64:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Nov 15 16:01:19 2026 GMT
Not After : Nov 16 16:01:19 2026 GMT
Subject: CN=ecc49e7d3ecbc0eacc23db9c7cd422fc05f3afad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:6d:1b:e2:5d:cb:f4:9b:42:56:13:73:d3:
3d:79:63:2c:9e:ca:d5:de:53:7b:4a:44:32:4a:0a:
60:c0:c1:73:91:22:45:ee:de:71:dd:fe:b6:a7:31:
f3:2c:a2:93:23:c6:d2:c1:53:a9:0b:1f:ae:f9:dc:
b6:15:3b:89:10:35:05:b2:c4:d7:70:34:20:43:23:
ce:85:d6:53:fd:f9:90:4b:69:7c:f4:05:db:f3:2b:
9a:8a:00:cf:a0:cb:ea:21:a4:80:06:91:11:be:a6:
1d:1d:3d:4c:12:fc:a3:07:60:60:c4:13:51:2d:52:
f0:da:4e:db:68:dd:1c:25:e8:b1:70:00:33:41:08:
dd:c5:ed:5e:7b:76:50:81:96:87:4e:7b:35:59:9a:
97:a7:59:f6:a2:9a:5a:eb:a0:dd:75:b8:90:a6:4e:
9b:e6:42:ba:49:88:c1:97:0a:28:ed:3d:f6:9e:aa:
41:47:3f:bd:3b:99:e8:21:1d:53:9c:dc:db:24:46:
3e:8c:08:d2:d6:6f:a8:dd:81:fe:d9:52:ce:a8:36:
0b:95:6c:3d:e7:3e:93:c1:19:0f:37:d6:4c:c1:50:
9b:87:0f:1a:20:f9:9c:65:83:12:bc:55:c0:02:01:
fc:eb:1b:77:9a:4a:41:df:bb:df:43:dc:12:18:e9:
5d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:9E:7D:3E:CB:C0:EA:CC:23:DB:9C:7C:D4:22:FC:05:F3:AF:AD
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b6:44:fb:e7:3a:9a:2c:82:9c:d7:14:b5:01:7e:6d:fd:e5:
fb:75:86:32:c5:d1:7e:ad:1e:0f:5f:c7:64:22:45:8f:f0:a5:
35:56:88:7d:0c:a6:d1:12:47:70:2e:3c:13:44:87:72:b2:99:
d7:c0:9f:4e:ac:64:61:f7:8e:30:38:f0:aa:b4:01:af:9b:96:
50:36:95:bd:36:ca:2e:c8:ae:e7:81:2e:7f:0d:91:64:db:c5:
e2:37:9f:36:57:58:cc:03:ca:00:c8:6e:02:3b:76:c4:c2:fa:
a4:e7:5e:b1:fd:94:24:af:55:fd:7a:0b:19:d6:f9:24:fc:21:
ee:8d:f9:2e:48:13:f7:1d:b6:41:97:aa:9c:ad:14:16:ee:22:
b8:d9:d0:36:f3:b0:ab:53:a3:ab:ae:91:76:37:7f:17:c7:7b:
6d:8d:0f:f4:3d:c9:5b:bd:6a:00:c3:d0:5d:1b:ed:51:1b:c9:
e4:16:56:64:a0:46:b5:3e:09:07:bb:eb:7b:75:d3:e9:20:b8:
91:48:60:f4:61:f2:e4:3c:7f:5b:fe:32:69:a1:45:f6:9e:cc:
ed:5c:eb:92:74:bf:73:f8:97:63:28:d3:2a:ff:1c:b0:92:00:
f0:2d:bd:36:14:40:53:0b:a5:dd:6d:87:ef:bd:6c:9e:b6:41:
08:8a:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:44:33 2026 by rpki-client