Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: ZfLH6RJqgFc23owAEVmmLosoQlJKVT1+XLnJU6g2IGI=
Subject key identifier: 6F:71:7B:3B:2F:62:06:EF:80:85:DD:06:18:30:A3:B9:80:42:14:F2
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 01A0CE23ECED9F751C5C6A4C7BA9B36735E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0C70
Signing time: Wed 23 Sep 2026 12:00:55 +0000
Manifest this update: Wed 23 Sep 2026 12:00:55 +0000
Manifest next update: Thu 24 Sep 2026 12:00:55 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: rKpBrgFtAgy5unCdOX5OP6a50AiQFHvxFHuS/ZI58A4=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:ec:ed:9f:75:1c:5c:6a:4c:7b:a9:b3:67:35:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Sep 23 12:00:55 2026 GMT
Not After : Sep 24 12:00:55 2026 GMT
Subject: CN=6f717b3b2f6206ef8085dd061830a3b9804214f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3d:19:bc:d5:0e:c7:1a:7c:53:60:a6:7c:b0:
35:5b:a7:33:73:db:09:ee:98:91:b0:6c:20:77:59:
94:15:dc:b2:3c:02:38:d7:a3:6f:8b:c5:d6:00:d0:
33:e7:90:09:e6:92:df:7b:d6:37:6e:58:0b:de:b7:
2f:95:dd:04:d9:12:96:4f:61:5b:1b:1d:e0:e0:4f:
49:58:1c:32:5b:d5:01:e1:00:4b:45:3b:26:22:34:
93:20:aa:8e:24:63:28:92:95:d1:86:2f:19:bf:b9:
eb:0f:7c:25:23:c1:63:90:09:83:ad:ee:96:d7:15:
ec:17:7d:a6:02:b3:53:13:3d:88:5c:59:f2:17:04:
d6:dc:25:9a:20:70:1c:12:35:99:90:6b:ad:d6:10:
34:ba:09:cd:7d:e6:52:db:56:62:eb:47:e1:16:c6:
73:ed:18:9c:d5:75:9d:1d:b0:9e:df:67:6b:68:fc:
96:fa:b6:8c:cf:9d:c0:a4:51:03:7f:61:23:52:1f:
51:c8:04:ee:3f:ac:1d:93:7f:df:f1:e7:e4:f5:5e:
c8:cc:62:0c:24:1e:5a:9e:c1:4f:29:60:bb:20:d0:
11:f8:53:bb:08:05:79:6e:98:03:81:d1:44:08:d9:
f3:22:d1:bf:8f:2c:df:bd:16:5a:ac:3e:c9:39:8b:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:7B:3B:2F:62:06:EF:80:85:DD:06:18:30:A3:B9:80:42:14:F2
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f9:b4:8a:67:3e:8b:cc:43:22:8a:c0:b3:81:f8:79:34:01:
12:7c:53:a2:0d:c8:0a:16:fc:65:19:9d:47:3e:70:b3:16:5f:
1e:45:5e:fc:cb:67:42:71:36:d1:60:1c:c4:12:50:7f:78:69:
11:3b:2b:7d:15:61:05:ea:ef:a1:3f:6d:82:1f:db:1c:dc:4d:
07:ba:85:1c:17:0c:18:69:75:2b:70:70:cc:20:4e:7d:fb:58:
e1:f8:8e:1a:40:7f:5c:e2:41:7f:53:04:1a:96:22:06:e8:2e:
23:5d:33:7e:74:b2:94:9b:ed:3f:a2:29:12:42:a8:6f:61:b0:
ef:b2:9d:b1:40:8c:54:8b:0f:5f:8c:71:8f:1d:3f:43:8b:d5:
1f:d3:9f:98:08:1d:a3:5d:0d:b9:34:3b:bf:01:85:ed:07:f4:
02:97:b8:87:72:93:6f:e7:41:22:cd:e8:c9:fb:82:4b:4d:fb:
4c:fb:88:04:bf:7b:d2:b9:be:9b:29:fa:77:4f:eb:f1:51:65:
6e:a8:62:78:1d:d1:de:03:02:b6:8f:f7:91:f9:fe:e0:b0:a5:
a0:9c:d9:5f:59:34:67:de:34:a2:b7:0b:cc:2c:5d:1c:93:26:
75:5f:77:0e:2d:8b:66:81:17:b5:7a:28:65:70:cc:7a:77:01:
80:db:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:32:04 2026 by rpki-client