Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: 8GKCIw+ydzBiznN45hdxrAVIew18iZiYD6l2M1SRh9Q=
Subject key identifier: 5A:9A:CA:D6:C2:99:1C:C4:61:15:BD:CD:2B:7D:38:F2:A5:3F:97:F3
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 01A0DB3BC4EBE59316E8ED2D304D24143D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0B02
Signing time: Sat 26 Sep 2026 01:02:02 +0000
Manifest this update: Sat 26 Sep 2026 01:02:02 +0000
Manifest next update: Sun 27 Sep 2026 01:02:02 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: rYkAaUxIpscK/nlWS1xmKJHUuupkoXbvi8GxciQ+GRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:c4:eb:e5:93:16:e8:ed:2d:30:4d:24:14:3d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Sep 26 01:02:02 2026 GMT
Not After : Sep 27 01:02:02 2026 GMT
Subject: CN=5a9acad6c2991cc46115bdcd2b7d38f2a53f97f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:bd:a3:64:08:0a:de:04:f3:64:2a:cc:86:
65:30:1c:78:01:67:ab:cc:a2:95:bf:3e:d1:2e:4e:
73:cc:43:19:8f:5d:15:73:ba:b8:49:7b:12:9c:6f:
92:50:1a:a0:ea:3c:5b:6c:68:ea:7d:a2:3b:14:3e:
c5:f1:03:c7:94:cb:97:02:8c:ac:1d:85:4f:ea:c5:
93:7c:ce:d7:fa:25:cf:eb:5d:93:ac:4f:22:f4:99:
a0:3a:c7:50:1d:0c:01:08:40:89:cc:25:e6:2d:51:
b6:b6:9d:58:bd:80:08:8d:bb:90:5a:c3:1c:51:94:
37:dd:b8:4f:f2:4f:70:ba:9a:cd:39:03:31:eb:b1:
53:76:f6:7a:53:77:f5:83:bb:c8:21:11:cc:cc:ef:
3f:4a:04:f5:b5:48:78:31:cf:84:bd:04:11:aa:e6:
21:14:54:8c:ce:ae:10:2b:0a:71:19:d0:f4:ea:9b:
12:9f:85:06:3c:00:a4:c4:b7:9f:0d:e3:c2:e2:f6:
2b:25:f0:ca:f1:8d:df:42:92:47:78:e4:19:bb:f5:
40:07:0a:16:da:30:b2:87:cd:f5:48:18:38:1e:12:
3f:80:3d:35:13:61:54:23:10:24:d6:d5:d7:27:0d:
da:b1:67:94:dd:de:c0:1d:e1:f8:8c:a4:6a:91:c2:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:CA:D6:C2:99:1C:C4:61:15:BD:CD:2B:7D:38:F2:A5:3F:97:F3
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:79:26:bc:92:e6:0b:8b:0c:3a:29:e8:c3:7d:fb:ea:65:9e:
b0:85:33:b6:db:fa:61:93:a0:51:99:cd:c3:c5:07:a2:5f:b5:
3a:c8:d7:3e:ca:03:52:8e:cc:a8:9d:4b:c1:f7:19:b0:1d:c1:
4e:97:e7:34:ad:49:90:e3:b4:05:38:54:7c:0a:6d:a4:eb:21:
f6:ef:f9:a6:7d:d7:3d:9d:40:6f:b0:38:4a:01:5e:7d:e0:99:
d3:72:4b:76:72:83:48:57:66:67:6c:ad:d6:9d:b1:ff:dc:8f:
a2:20:7d:02:bc:c3:bf:41:c1:3f:99:71:be:6c:cf:5e:7a:fe:
b6:6d:37:a6:18:f7:10:a8:fb:9c:79:46:28:f8:a9:a8:df:f5:
69:38:4c:c2:31:0a:46:44:5f:65:27:eb:10:fa:67:eb:72:70:
cb:f3:d7:61:76:47:82:a2:ca:32:f8:64:01:38:3b:1f:07:f5:
4a:7c:04:01:e8:6c:ad:f9:65:bc:11:41:b1:99:ee:3c:d4:d5:
4c:ce:2d:e4:dd:8b:e8:d9:b4:fe:96:59:08:28:f3:30:38:70:
0d:72:12:84:29:b1:d5:ce:67:44:24:55:1a:73:8c:b6:76:76:
2c:8f:11:a3:02:24:e4:3a:85:47:c5:4f:81:25:be:1e:6b:15:
88:09:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:12:36 2026 by rpki-client