Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: f27mkmF2SUdT+ilPGFJWFPK1ubnaQdcoFzpk1A6pNEw=
Subject key identifier: 6A:7A:9B:2E:01:51:BD:E3:4A:E2:36:0E:F8:6E:E6:1B:21:47:B8:2A
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 01A0DB3B2691BC88FDC343B5A57CAAD1A42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 1152
Signing time: Sat 26 Sep 2026 01:01:21 +0000
Manifest this update: Sat 26 Sep 2026 01:01:21 +0000
Manifest next update: Sun 27 Sep 2026 01:01:21 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: S6aQk7rk1fipz76NX+kc03ylAm2Abo60QRGHHsl4ft4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:26:91:bc:88:fd:c3:43:b5:a5:7c:aa:d1:a4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Sep 26 01:01:21 2026 GMT
Not After : Sep 27 01:01:21 2026 GMT
Subject: CN=6a7a9b2e0151bde34ae2360ef86ee61b2147b82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:30:5a:52:31:06:7c:11:ac:5f:59:90:a3:
95:bf:59:d9:26:43:49:32:5c:c7:42:78:c8:18:a2:
41:cd:be:2c:74:b3:cd:a9:d7:95:11:62:47:9a:68:
17:ca:01:ec:c6:6c:3c:2f:53:67:b8:49:89:26:a1:
17:b0:39:b0:e3:e1:4e:6e:f9:c2:ff:c2:c3:b5:e0:
08:da:45:63:e6:2c:01:2b:c9:26:9a:f5:77:c1:f8:
5c:24:3c:7c:6d:8b:64:46:c0:c7:16:f7:ed:6f:f0:
0b:d8:95:57:31:e9:71:c3:36:57:79:fb:5a:bd:ba:
00:80:13:d3:bc:38:70:95:47:37:40:6b:33:a1:24:
a6:a4:11:5f:34:5f:59:5f:d6:77:72:a5:35:98:07:
97:1b:8c:0b:83:ba:f4:ba:ff:d5:02:b8:95:43:90:
21:b7:7b:ea:9f:a7:be:f2:55:ea:04:1d:2a:c6:e2:
32:19:05:6b:3a:29:5b:85:a9:18:fe:99:96:55:c9:
d1:de:ee:ee:f6:68:34:22:f1:48:72:86:7c:aa:6b:
40:dd:14:cc:f3:4b:cc:03:b7:f7:16:8d:79:d0:27:
60:7b:d3:4f:b8:8c:ba:96:66:97:a0:bd:6e:13:ac:
43:7c:bd:99:12:aa:c6:b3:af:d0:74:99:a7:66:5c:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:9B:2E:01:51:BD:E3:4A:E2:36:0E:F8:6E:E6:1B:21:47:B8:2A
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2b:67:0c:75:51:d8:00:b8:08:94:f6:5b:dc:9b:cf:17:2c:
91:6e:17:2e:18:d6:51:78:ce:23:d1:20:58:68:97:9e:ff:79:
e6:98:be:1f:28:e7:f3:19:43:0d:ee:9c:64:9f:d7:4e:43:cf:
ac:3f:e7:21:41:ff:8d:f0:e4:34:2f:3b:55:d5:d5:1a:27:9c:
72:f1:e3:2d:7e:7e:20:aa:d1:f2:ff:3e:8f:d6:3b:4e:d4:7f:
14:ad:ac:bc:b3:5f:e6:4b:4e:ee:ad:f8:84:6b:29:f4:a0:fa:
88:8c:d8:9f:a7:98:9f:ce:05:cf:17:7b:68:36:48:56:67:fd:
12:8f:52:d1:c4:f9:59:1b:22:d0:57:e0:6b:1f:16:63:5a:0f:
cb:21:07:08:fa:2b:da:84:19:e9:47:c3:e3:30:33:27:97:bb:
36:35:e3:a8:10:8a:a4:89:d5:b3:96:8a:32:ab:45:03:4b:87:
61:5f:15:ee:9f:9e:bd:b7:b0:88:da:32:36:9a:04:b9:80:21:
0a:88:08:96:41:ce:98:01:f7:eb:40:e5:c6:a6:c8:48:7c:59:
9d:d2:bb:1c:91:53:b7:45:ab:e8:74:cd:9d:fb:2c:16:47:0b:
92:47:ae:d8:11:5c:29:da:9b:5e:dd:35:18:f7:8b:83:00:11:
82:ae:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:08:54 2026 by rpki-client