Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: sB9sDiNMFJoa8dBVpi40zfNmYTN5ZvbALfsnpwYK9KE=
Subject key identifier: 91:2D:93:97:ED:11:14:47:CE:BD:89:CF:18:7A:0A:11:28:B9:C8:63
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 01A0C40DD6146666316374A3BF8A4E0AA5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0D46
Signing time: Mon 21 Sep 2026 13:00:36 +0000
Manifest this update: Mon 21 Sep 2026 13:00:36 +0000
Manifest next update: Tue 22 Sep 2026 13:00:36 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: RdNz+K1WsdwTOYQ9eDxgWPN4Nxy/AUFHOliSxsLi6w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:d6:14:66:66:31:63:74:a3:bf:8a:4e:0a:a5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Sep 21 13:00:36 2026 GMT
Not After : Sep 22 13:00:36 2026 GMT
Subject: CN=912d9397ed111447cebd89cf187a0a1128b9c863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:25:40:c6:67:16:7a:ed:1f:f8:02:01:63:
b5:bb:c0:a2:a4:cb:a4:1e:4b:d3:9b:eb:b9:86:eb:
8d:a2:0d:f5:99:7e:c3:1f:47:0b:05:4c:4c:7f:65:
72:37:be:85:46:c5:fe:1b:41:2b:3a:cf:dd:e2:e8:
9b:4f:a2:47:a6:5e:a4:81:06:c6:69:d1:52:3c:53:
07:7d:31:d3:d1:c2:f9:c0:43:83:dc:c5:5a:d8:1f:
07:a3:6e:14:3d:08:80:b6:30:7c:ed:e5:30:bc:4c:
39:1e:40:2f:89:cf:3f:8d:a5:e7:95:ae:fb:c6:d1:
91:80:3b:ea:dd:04:37:bb:11:52:00:35:2e:f5:fe:
5b:e0:62:53:4a:15:7d:5a:15:23:45:29:3a:d5:71:
5d:f5:b1:46:c9:6d:ad:1a:08:ac:54:cc:a8:32:90:
fd:54:2e:a7:c2:33:d4:ac:b1:35:3e:d6:48:cf:38:
fe:ce:63:c2:2d:fa:1d:ae:34:45:3b:02:5d:a2:33:
37:99:91:2f:ac:3b:5b:ff:d6:c1:59:48:0a:bb:74:
fe:03:a2:86:07:33:cc:16:f6:26:56:8a:ca:72:c2:
9b:1e:bb:07:53:39:de:2c:fd:e9:09:d1:20:42:86:
fe:2a:48:c1:3c:6d:23:d0:f7:78:fa:21:01:62:0d:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2D:93:97:ED:11:14:47:CE:BD:89:CF:18:7A:0A:11:28:B9:C8:63
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:63:b3:16:10:cb:6a:cb:ea:fe:95:84:91:74:ba:3d:63:ba:
9a:37:24:8c:c5:18:98:1c:c7:e9:b2:6e:33:68:0f:ba:58:44:
48:06:f1:e1:5d:cf:bc:59:c6:a1:56:71:b3:5d:2d:74:a0:e2:
db:f9:f0:9c:e8:66:d1:57:a3:d6:6f:86:8c:1c:6d:75:5a:c5:
50:bd:0f:f8:61:24:f8:22:d3:68:5d:e0:57:36:26:fc:aa:1f:
13:14:0d:fe:12:17:e0:fe:c3:7f:ed:6a:16:c9:47:e2:08:2f:
e8:42:97:c4:c6:b8:af:43:c9:e2:5b:79:41:2f:5c:e5:33:3f:
b5:87:f7:71:d3:a2:9a:92:d2:c1:2b:ca:0e:69:62:6d:11:c9:
53:0c:4d:a3:1f:1d:a1:fe:81:12:5b:fe:02:e5:8a:f2:b1:b4:
02:ff:d2:c8:e3:30:0f:07:42:e0:dd:86:7c:93:ba:0e:5c:8f:
84:c1:9f:56:fe:a6:e7:9a:d0:16:29:87:ba:e7:a8:43:7c:ca:
e1:be:25:58:b7:5b:3a:f8:79:c1:32:e1:3d:ba:f6:30:7a:96:
5e:6b:9a:05:63:42:3b:75:52:c0:3c:7e:90:86:33:b4:36:3b:
8c:55:3b:ea:fb:90:3c:bd:a5:81:a5:6c:13:75:d6:61:50:32:
b4:ae:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:24:04 2026 by rpki-client