Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: 0edb3X8EVlGm1RX0aeAcunrL6Fbci+PBEXkSH0IULYw=
Subject key identifier: 49:2D:88:DA:45:03:B0:F1:77:84:02:0D:91:22:4D:E6:38:CA:28:FA
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 01A0CAEB780516EE1ABDA24BBD33E332CB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: 04DC
Signing time: Tue 22 Sep 2026 21:00:24 +0000
Manifest this update: Tue 22 Sep 2026 21:00:24 +0000
Manifest next update: Wed 23 Sep 2026 21:00:24 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: 8xm2ZDIyzWi9NVh6ddX59lEKksQkmbBRA7dIwOakDMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:78:05:16:ee:1a:bd:a2:4b:bd:33:e3:32:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Sep 22 21:00:24 2026 GMT
Not After : Sep 23 21:00:24 2026 GMT
Subject: CN=492d88da4503b0f17784020d91224de638ca28fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:7d:64:a8:6b:a4:db:12:5c:19:0c:d6:55:
28:90:c3:06:d0:ad:0f:41:dc:34:0b:b9:5f:c9:ac:
01:3e:51:d7:4d:95:bc:bc:e9:32:77:ae:3f:a6:44:
00:d4:e4:84:db:4c:cb:c7:e6:8d:0f:1f:ad:ed:ac:
84:d9:29:70:54:e9:4b:86:ef:cc:8d:1e:82:66:9e:
86:04:a2:df:8a:6f:b5:da:4a:1a:a0:04:f5:0d:bc:
41:8f:a6:d6:9e:4d:ce:23:a3:bf:94:17:42:24:21:
9b:d9:aa:0e:68:7c:ab:b9:56:02:71:42:1b:f0:82:
0d:46:a2:69:d5:b7:03:71:44:8e:4e:7f:7a:91:ce:
6d:d4:25:38:ec:8c:00:a3:81:c1:a7:e2:d1:47:ff:
5e:67:f5:cd:25:4d:84:98:36:da:f3:51:94:e1:80:
47:4d:f8:f7:c6:48:d9:e7:97:01:d2:63:cf:c7:18:
b7:52:e9:cd:71:c0:cb:3d:68:49:fb:32:42:2f:ef:
47:4f:4c:e3:da:19:14:c0:e9:3f:45:72:12:7d:49:
d5:88:24:fe:a7:e0:cb:49:34:8a:d3:d7:e7:dc:8c:
52:15:85:4e:41:d3:3b:fe:45:11:e2:12:b4:4a:46:
77:af:63:89:39:41:46:39:9e:1c:2b:55:b9:c5:fe:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:88:DA:45:03:B0:F1:77:84:02:0D:91:22:4D:E6:38:CA:28:FA
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e5:c0:a9:39:3a:83:60:a4:da:23:59:92:29:c9:e9:b8:30:
fa:4d:d2:33:42:19:d6:88:45:28:f5:55:0b:92:45:e4:b8:d6:
b6:ce:7d:a9:39:f2:80:14:58:f0:4f:cb:e8:fa:92:39:93:05:
5d:03:f3:09:c9:47:32:40:18:29:bb:e6:1f:cc:e9:80:35:d9:
82:43:d9:06:b1:bd:cd:64:7a:42:d8:48:db:a7:94:7c:eb:2e:
f9:ae:44:46:21:a1:2d:86:28:64:0a:4a:46:38:f9:ad:83:7b:
41:2c:14:16:60:6d:e5:d4:14:c5:cb:c2:5c:ac:6f:67:ae:95:
76:22:c1:df:2b:31:e4:2a:5d:b2:40:3c:dc:8f:0d:3d:68:c6:
ab:86:b3:06:46:cf:8e:11:ca:fc:fb:62:1a:ac:99:16:dd:82:
b5:c8:a0:02:06:d2:9c:73:9a:9c:ad:09:96:b5:8d:0f:78:4a:
81:55:51:9b:3a:3d:52:5c:de:e4:07:4e:f7:c1:53:2d:36:f0:
d6:81:64:6a:a2:ac:cf:75:64:99:29:0e:77:db:be:60:96:e1:
2b:a3:ac:a0:fe:0a:1e:ea:f0:31:d6:69:18:1a:ac:2e:72:3a:
5b:5b:5f:90:c4:9b:3e:3a:5d:ce:48:15:82:0a:1b:c3:69:4d:
b0:bb:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:26:18 2026 by rpki-client