Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: UAGy0IwC2Z47hhhZmrpcxmHZhci1TphcoUmL0b9Grzw=
Subject key identifier: D9:55:ED:76:05:43:1B:F3:F2:53:D6:15:0E:40:74:55:B5:42:2D:33
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019FAA887607F3C910614C3584CE2EEB9E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0C3D
Signing time: Tue 28 Jul 2026 21:01:37 +0000
Manifest this update: Tue 28 Jul 2026 21:01:37 +0000
Manifest next update: Wed 29 Jul 2026 21:01:37 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: GWSypSLCMmsm2DBNdmkHJuFSU8HvhEXQA+I6k7lYN0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:76:07:f3:c9:10:61:4c:35:84:ce:2e:eb:9e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Jul 28 21:01:37 2026 GMT
Not After : Jul 29 21:01:37 2026 GMT
Subject: CN=d955ed7605431bf3f253d6150e407455b5422d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:29:b8:f7:b8:4f:3a:c6:39:b5:7d:81:e6:
ed:04:7e:06:1d:ce:b3:36:3f:42:f1:37:60:ab:24:
48:17:04:7a:45:32:13:7f:dd:ef:22:57:a1:56:65:
33:e2:c6:cf:e7:55:97:18:cb:f7:f8:ed:60:28:23:
cf:50:c8:56:20:33:a8:85:a8:56:fe:0f:63:a0:70:
e2:0e:b8:c3:3b:cc:15:dd:5d:5e:0e:80:5a:fa:12:
bc:b2:85:b5:2c:e0:ac:bf:b5:8e:9b:6e:f9:5e:56:
1d:18:b0:b0:6f:d5:44:c4:03:8a:40:b7:c6:28:ba:
93:d0:0a:b1:38:fd:37:63:14:55:3f:a2:20:92:d1:
3f:b5:34:9d:8c:64:42:d2:2d:99:9c:e1:24:c3:69:
12:36:5b:5d:14:00:7a:12:db:1c:77:17:bf:6e:9c:
1a:33:9f:f5:ea:c2:67:b5:dd:d4:5a:00:20:22:c6:
85:85:c4:74:80:15:43:af:24:ad:5e:5f:24:a2:81:
0d:cf:3e:64:e4:f9:58:99:df:22:71:20:5a:26:f5:
3f:a1:ed:69:b5:f9:5a:dc:c2:db:0c:d2:ff:a0:65:
7e:dc:e5:f5:b1:99:70:a9:e9:93:76:7d:29:55:58:
b7:68:72:14:fc:fa:d1:48:4c:68:43:65:d9:2d:82:
bc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:55:ED:76:05:43:1B:F3:F2:53:D6:15:0E:40:74:55:B5:42:2D:33
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:26:6c:49:ec:da:0e:75:41:a4:22:2f:d4:2b:08:8d:c6:43:
19:77:19:d4:7d:54:48:b5:ed:cd:1e:38:6a:50:1b:70:c6:12:
fb:f9:97:9a:a0:b1:17:7c:74:f3:00:b6:27:c7:c5:68:45:ce:
9e:0c:81:ff:d4:ee:e2:75:df:b3:c6:0b:c0:1b:48:4a:3a:52:
32:e2:e2:95:7d:3b:cc:b4:a4:4b:41:ad:87:8e:05:d7:e8:ae:
fa:bc:52:f1:11:dc:11:a4:61:42:72:23:dd:32:4a:84:10:13:
72:5e:f2:0e:a4:71:13:c3:03:10:87:e5:38:d9:b8:e9:cd:ce:
c3:41:76:a5:cc:de:65:c2:f4:ca:16:e2:dd:59:44:21:c6:cd:
65:a4:fa:10:e3:df:08:49:ca:f7:3a:d5:4d:e5:a3:9f:d8:a8:
d3:08:49:fd:d2:63:9a:00:db:52:05:77:81:68:9c:75:e7:1c:
31:93:c7:b6:42:77:bf:56:95:a8:cf:82:5f:e1:7a:cd:3b:be:
9b:0b:89:38:e6:6a:0d:1f:6e:1c:bb:91:25:d6:47:46:69:9d:
b2:c2:a9:45:41:c0:6f:38:35:88:a3:72:2b:51:9e:be:16:97:
db:6e:02:b4:0d:d8:1f:0e:59:68:97:bb:30:57:6d:b8:fb:c4:
3f:49:61:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:48:05 2026 by rpki-client