Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: SO3OQPnj4yQdvXNiz8ZNCQoGLmZhwxCf555R+ZZJP9Q=
Subject key identifier: 70:A9:15:AE:66:64:E0:BD:40:C4:02:91:37:94:6B:97:CF:50:3F:85
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019FAAF607882E6442E1D7C317C1311B9587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 05F9
Signing time: Tue 28 Jul 2026 23:01:18 +0000
Manifest this update: Tue 28 Jul 2026 23:01:18 +0000
Manifest next update: Wed 29 Jul 2026 23:01:18 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: /SLISYob4yRXjgBa+uYsym7Uy57uOSmrQXJF5Y8sHz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:07:88:2e:64:42:e1:d7:c3:17:c1:31:1b:95:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Jul 28 23:01:18 2026 GMT
Not After : Jul 29 23:01:18 2026 GMT
Subject: CN=70a915ae6664e0bd40c4029137946b97cf503f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:97:fe:44:a3:38:12:8b:46:f9:3f:e1:fd:
bb:1d:d5:9f:3e:cf:70:ef:41:f3:dd:12:80:9a:2c:
23:05:89:e4:c3:6a:20:f5:7d:ae:6e:21:da:ab:53:
69:b0:52:2b:54:4f:f9:22:80:eb:64:f4:f5:62:0a:
ed:32:51:95:a4:e1:31:1f:a5:09:bf:20:65:49:08:
bf:04:d8:2b:52:76:59:27:24:ac:32:56:c4:8b:b6:
3d:e1:50:bc:cd:e8:28:da:86:58:c4:1f:0e:d8:ac:
cd:09:3e:d7:13:97:4a:64:ab:04:0d:9d:f4:42:b9:
0a:be:5e:d9:7a:c4:1c:18:ac:30:97:58:d2:b7:58:
a0:d9:c9:55:fc:ef:97:d8:e5:26:a0:96:69:49:0e:
69:23:b8:2a:fe:1c:09:e3:f4:59:d8:68:ae:91:c4:
17:fe:e7:b5:b0:2a:d0:17:7e:3c:78:08:99:09:0d:
b6:5e:9c:ba:da:55:21:35:16:ac:9f:16:cb:a1:07:
b7:94:3c:db:53:4a:af:f8:43:9c:d1:d0:d3:60:1c:
b5:c6:c0:1b:94:2c:3f:d8:b4:a6:a9:da:2d:d4:1b:
53:18:c2:41:b2:c0:ea:a2:e6:37:9f:b1:63:50:ca:
84:73:b4:7e:ba:de:12:d6:7a:79:35:34:4f:82:b8:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A9:15:AE:66:64:E0:BD:40:C4:02:91:37:94:6B:97:CF:50:3F:85
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:68:51:46:34:51:a3:a1:ab:d9:60:ae:07:88:b9:ca:f5:67:
0a:65:56:f9:d7:4a:50:eb:99:e8:30:fa:a2:6b:f7:de:55:2e:
17:ef:ef:bd:ea:83:87:db:50:0f:39:56:80:a9:68:9d:63:58:
09:2d:03:46:0c:5a:af:19:95:eb:67:7d:4a:9e:46:6d:83:64:
28:9b:d7:e2:e1:41:fe:54:fc:61:57:b1:b5:f6:9d:fa:d6:3f:
94:0a:f7:80:c6:4e:e5:d8:47:5f:d2:43:48:f7:25:2e:92:1a:
86:5b:dc:0d:8b:1f:6d:8b:7e:2f:c9:35:97:a1:11:4e:46:cc:
81:32:23:ab:94:73:57:f0:52:4c:4f:11:e2:4d:da:b3:6d:94:
72:a7:8b:5d:9d:b0:0d:58:5f:3a:82:d9:b2:8e:84:bb:4f:27:
f2:39:ad:a1:bc:50:37:f8:e6:41:5b:08:3c:b4:37:b4:fd:6f:
aa:7f:fe:05:cd:cb:bc:8d:a3:90:b1:57:cf:e9:6b:7d:2e:f8:
db:ed:e5:5d:85:74:7f:e9:55:eb:00:18:c7:62:c6:37:b4:96:
d8:71:7a:de:68:16:f2:8d:95:14:36:85:45:74:a5:91:f9:91:
9a:8b:2e:a3:45:25:d7:ed:06:87:49:99:c2:92:22:b3:8c:bc:
17:85:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:02 2026 by rpki-client