Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: VucLSau+1UZBtitD8npadfoSnS2I6frOJBEz6NbZfho=
Subject key identifier: 6C:1C:A1:15:F8:04:17:12:D8:90:46:5F:97:DB:F7:F3:B4:5B:20:F2
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 01A1C5563BDCBBE2B6091EED8A329ACB6EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0D54
Signing time: Tue 10 Nov 2026 12:02:05 +0000
Manifest this update: Tue 10 Nov 2026 12:02:05 +0000
Manifest next update: Wed 11 Nov 2026 12:02:05 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: GyPOggrYQtCOgoWj3BzzMZsF+Odso+bB6M/YuBmS5go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 12:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:56:3b:dc:bb:e2:b6:09:1e:ed:8a:32:9a:cb:6e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Nov 10 12:02:05 2026 GMT
Not After : Nov 11 12:02:05 2026 GMT
Subject: CN=6c1ca115f8041712d890465f97dbf7f3b45b20f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:ab:2f:ab:c3:e1:85:ac:3b:9b:75:b6:8a:
ab:2e:90:43:a9:da:db:0e:f6:1a:e2:b4:91:b8:7a:
cb:0c:c8:09:7a:9b:0a:3b:60:07:b4:df:fb:b4:35:
86:bc:5e:15:ce:64:82:d2:5e:04:b7:98:95:c7:ad:
33:2b:1c:f3:d4:90:34:fe:1a:61:98:ac:a5:97:73:
4e:42:e2:d2:7f:1f:c3:f8:43:32:47:7f:af:b0:73:
8d:d7:a0:f9:88:ac:a4:67:9a:32:da:f8:0c:eb:dd:
0c:d6:68:95:f0:6f:66:9b:32:7f:59:70:e1:85:13:
0b:2b:ec:d9:13:33:cd:79:45:ce:51:fb:ab:d9:87:
59:bf:fe:92:b1:c0:6e:6f:d8:9d:d4:a8:78:3e:55:
6a:c0:ab:ff:aa:62:b7:73:36:c3:7f:59:c5:1b:56:
e6:b0:9d:6b:87:d1:77:2f:52:7c:0e:f1:ec:ee:d3:
77:28:39:ef:b5:fb:95:12:f2:ba:e1:c9:04:ab:80:
6c:bc:aa:51:13:27:35:4b:64:15:c6:8d:cc:84:f2:
ac:03:78:4d:57:72:71:e3:08:e0:f5:31:27:7a:a6:
1f:7f:6e:8b:cc:73:01:e5:b9:0f:52:35:e4:77:48:
09:e7:b5:99:fd:68:69:bf:ad:cd:17:fa:c3:0c:21:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1C:A1:15:F8:04:17:12:D8:90:46:5F:97:DB:F7:F3:B4:5B:20:F2
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:32:fe:c1:54:83:9c:3e:ea:82:f6:67:ea:96:ca:5c:50:
28:63:bc:37:fb:9e:82:57:60:b6:36:dd:f7:bb:9f:70:9d:b4:
1c:e5:35:bd:bf:09:c5:e9:92:84:0d:af:b1:49:d4:e8:25:32:
72:6a:90:16:e8:53:53:e4:8a:26:38:0e:89:82:97:fc:03:45:
20:5e:04:ad:26:4a:ad:dc:68:7e:e2:d2:b1:9e:6f:9d:3a:b3:
25:b0:7f:2a:07:e8:47:de:1c:54:23:0a:22:2b:56:84:74:f0:
4f:a7:f3:96:4b:65:16:19:00:61:5c:3d:6d:a2:4a:03:7d:8b:
29:ca:01:82:1d:f0:2e:0d:a2:c6:bb:df:95:03:f0:3d:16:c0:
91:b3:62:35:78:cb:61:6c:aa:ac:63:6d:62:08:db:6f:5e:39:
59:ef:b7:05:ef:3d:93:a5:ef:83:01:e5:3a:89:4f:6c:3b:ba:
8d:d2:b1:6e:91:f7:52:df:2f:f5:39:1b:bd:30:54:bd:23:ad:
86:1b:32:cc:bd:20:91:49:f5:b2:18:2b:65:81:d0:95:b5:4c:
1b:5d:24:92:40:7b:f3:a8:da:d4:4d:2b:04:85:d3:83:8f:35:
83:c2:b0:1b:4b:f6:f0:9b:33:af:b0:14:47:8e:5c:31:6c:ec:
a6:89:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:50:17 2026 by rpki-client