Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: trHx6we4jjCcsq9U4SZ5gqW2Gb67LAbfdXGIavKEm1U=
Subject key identifier: 7B:FC:76:8E:1A:6E:06:91:25:44:A8:A3:79:7F:37:21:68:23:81:87
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 019F90FED5AC1161B9C148A69F3191EB51E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0A57
Signing time: Thu 23 Jul 2026 22:00:47 +0000
Manifest this update: Thu 23 Jul 2026 22:00:47 +0000
Manifest next update: Fri 24 Jul 2026 22:00:47 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: OG8MATQJbwgO2Y2fS/8FfY2twpb6oQ1mleDUWbBQtkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:d5:ac:11:61:b9:c1:48:a6:9f:31:91:eb:51:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Jul 23 22:00:47 2026 GMT
Not After : Jul 24 22:00:47 2026 GMT
Subject: CN=7bfc768e1a6e06912544a8a3797f372168238187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:ae:f7:b0:60:f5:fc:d2:9b:ff:7f:43:fc:
bf:45:30:88:ed:73:cd:19:3e:dc:e9:28:b5:69:15:
8f:2b:99:96:04:db:76:46:5e:6d:7e:27:c8:77:5a:
91:7d:33:65:13:9f:f7:8e:f7:e5:df:fc:54:b3:4b:
39:eb:e3:ac:3c:68:80:7d:e0:9b:50:b6:01:4e:2b:
54:06:74:83:33:0b:17:dd:ba:ce:4c:98:2a:18:20:
51:75:bd:d1:d7:09:a6:08:25:a4:2a:9e:a2:c9:e6:
f4:e0:1e:fa:a4:fd:e4:9a:a6:05:88:a6:af:34:4c:
0b:9e:2f:84:e6:10:7f:50:d5:4e:63:58:68:a1:12:
37:8c:be:85:64:dc:c0:aa:e3:dc:c3:9d:f9:80:2a:
5b:7f:ec:65:0b:11:cd:b0:ea:72:5b:1e:e8:87:c4:
5b:64:ad:40:b8:af:80:a3:ee:c3:00:e2:9a:32:62:
cb:1f:ed:f8:60:72:5a:92:65:38:ba:af:09:04:7d:
1d:78:26:b4:a8:a0:13:ef:2f:5e:51:49:39:4d:09:
10:ac:fa:09:f8:e5:88:22:8a:70:95:fb:df:ca:41:
6a:9b:46:e4:fb:b5:88:15:38:be:1e:5c:23:8c:b4:
00:e0:5f:09:13:e3:23:ae:e1:96:f8:25:d7:51:50:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:76:8E:1A:6E:06:91:25:44:A8:A3:79:7F:37:21:68:23:81:87
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:af:ba:84:4a:30:ef:13:da:d2:71:c1:48:67:35:ef:35:32:
95:60:69:6f:73:9b:b9:06:c8:47:b1:29:a1:e2:55:2a:ab:3d:
6c:f9:48:81:10:c0:b6:87:33:1a:dd:5b:74:3d:17:d6:5f:41:
1b:40:cd:43:d8:60:7a:9c:48:2a:a9:73:97:26:e4:c6:b4:3c:
57:55:8e:90:1b:2a:83:98:ff:46:51:90:44:c3:4f:33:55:53:
c6:60:6e:b3:05:79:26:fb:dc:ba:81:e1:ce:45:9c:c9:d6:10:
8d:8d:3c:ba:5f:9c:2c:e4:2e:a8:55:8d:03:d5:2b:bc:df:b1:
bd:40:4f:c8:29:ce:1d:bb:61:96:8c:38:47:68:f7:1f:f9:24:
6e:ac:a6:48:7c:50:32:90:85:1a:0a:9b:84:2b:4e:81:e0:29:
8c:7f:f3:d5:0f:c4:28:87:c1:57:59:ee:48:8f:23:64:3d:9d:
de:cb:ac:44:02:04:2b:f4:ba:87:e0:51:ef:30:fa:49:16:57:
54:7c:9d:2a:8a:62:b0:9d:0d:2d:bc:c0:d4:c3:00:f5:14:06:
0c:92:f9:99:08:5e:e9:ac:ea:4a:89:08:d5:b4:5a:5b:0a:8f:
1b:41:6b:93:80:bb:29:87:11:1f:52:c5:03:e7:08:f2:a5:c3:
38:14:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:41:14 2026 by rpki-client