Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: OCbxhx4k7qn1FYEXf4GYJaQfmanlgASr6X9UHAGpUv8=
Subject key identifier: 22:13:69:D0:79:3D:A7:49:F3:D4:49:07:D6:6A:DB:6F:D4:B8:29:BC
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 01A0C6D861E9A5FD9A569372F2296FDFA691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 068C
Signing time: Tue 22 Sep 2026 02:01:04 +0000
Manifest this update: Tue 22 Sep 2026 02:01:04 +0000
Manifest next update: Wed 23 Sep 2026 02:01:04 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: q7m3eFGXqqwPn0cRTTEawXdyhQYx3Kh4JVL382XiWPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:61:e9:a5:fd:9a:56:93:72:f2:29:6f:df:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Sep 22 02:01:04 2026 GMT
Not After : Sep 23 02:01:04 2026 GMT
Subject: CN=221369d0793da749f3d44907d66adb6fd4b829bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:81:3e:d6:e0:18:05:04:e1:ba:8c:7a:d4:
9d:1c:7d:55:fd:01:03:88:bd:29:32:21:fe:b5:e2:
44:8e:40:51:d5:27:28:ee:7b:22:8b:a0:05:ae:42:
2b:18:a3:17:08:37:df:ab:74:2c:f0:ba:71:ed:3a:
84:59:47:ce:f1:14:29:32:24:b6:32:bd:3e:ab:ed:
ea:51:00:41:ef:00:89:0c:7e:54:64:df:89:0c:74:
da:5b:aa:60:6d:69:79:e6:18:1f:ce:b7:80:db:a9:
d1:3b:f6:4c:ad:93:94:63:90:6e:6b:59:6e:c6:c7:
85:8c:a4:b5:0d:51:cd:15:1a:f4:62:ae:31:ee:f8:
4d:b5:37:78:05:d7:b0:22:27:5b:26:d7:f5:e5:b0:
d0:ea:a4:cd:1e:18:b6:4b:8a:65:51:b0:f6:4a:b5:
81:25:53:ef:52:17:9b:1c:9c:4d:f0:19:0e:e1:63:
62:17:74:30:a6:fb:36:30:c1:38:b0:fa:a6:03:39:
0b:c1:2b:da:c4:cb:d1:82:e6:e5:04:16:5f:99:55:
be:35:74:c8:86:27:4b:90:4a:d0:9d:46:82:83:af:
6d:b0:64:8c:66:d3:05:7f:65:f5:05:57:cb:6a:df:
1d:a2:3e:74:2e:80:69:26:98:0e:92:18:5e:27:18:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:69:D0:79:3D:A7:49:F3:D4:49:07:D6:6A:DB:6F:D4:B8:29:BC
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e3:92:15:38:91:11:2b:76:7f:7b:27:0d:8d:1b:29:56:aa:
d4:30:84:53:c7:0d:cb:a1:1b:7d:50:b1:87:d0:a1:c6:36:3a:
1a:65:b0:ec:28:4d:5d:2f:30:bd:f6:3a:cb:a0:27:6a:39:55:
29:ef:b7:fb:36:f5:8e:7e:52:9f:cb:1b:ec:1f:de:ab:22:43:
68:d1:8b:b4:1e:08:91:54:d2:7c:0f:11:af:46:79:06:85:10:
94:0c:de:a0:d8:63:32:72:57:24:15:34:67:93:fe:17:f8:94:
11:d3:50:c5:78:40:8c:f7:ae:d2:76:47:20:6a:7d:c4:ad:d7:
59:a8:2c:bf:88:82:71:6a:f8:16:e5:d5:c2:e6:27:90:e9:4a:
80:c6:08:a5:6d:22:80:56:6c:67:db:1b:51:2b:9c:a9:ed:bc:
47:2d:00:29:df:58:a7:07:9d:9e:25:e1:7c:db:9e:6f:b6:57:
e8:0a:f4:9d:f7:ef:9e:ba:79:14:19:47:15:92:94:23:74:9d:
d5:ef:72:07:e5:21:5c:67:00:4a:25:b3:20:71:a5:41:6c:a2:
ec:19:3f:cf:10:c7:1f:3f:4a:75:d6:33:b3:0e:07:91:f4:2a:
43:cd:c5:4d:8a:04:d4:a0:32:c5:97:2a:ca:56:f7:7f:9e:8f:
74:e7:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:11:56 2026 by rpki-client