Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: l0+s2sB1MjuEMhwsc16wqdI/U3J7TJ6DthpDv9E2sog=
Subject key identifier: 43:F5:46:6A:94:F8:8A:B8:A2:05:2A:18:B1:61:0A:7D:62:50:04:D4
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 01A1DFF0E1AD578C7AE1BCB1EF42BB731748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0B89
Signing time: Sun 15 Nov 2026 16:01:07 +0000
Manifest this update: Sun 15 Nov 2026 16:01:07 +0000
Manifest next update: Mon 16 Nov 2026 16:01:07 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: SwE12j2qMuYBnDey0uYVi8ZP4x8fQVAe5Si/vW8FGcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:e1:ad:57:8c:7a:e1:bc:b1:ef:42:bb:73:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Nov 15 16:01:07 2026 GMT
Not After : Nov 16 16:01:07 2026 GMT
Subject: CN=43f5466a94f88ab8a2052a18b1610a7d625004d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:91:3e:84:16:1e:e2:66:7c:df:87:8f:87:
70:5f:36:6b:d1:91:4a:15:9e:58:59:c4:ab:51:3e:
c1:9a:4a:c1:7c:48:d8:84:76:09:19:95:54:02:ee:
1d:5e:aa:4e:3e:a1:89:ca:cd:a1:9c:3f:8b:81:7a:
2b:3c:e2:48:3f:39:5f:26:15:c7:c1:59:c2:2e:72:
03:3e:84:4b:fe:53:8d:9f:8f:79:a3:8c:d5:66:85:
1c:6e:02:23:3d:4c:df:76:16:1d:32:53:3a:d6:3c:
19:92:83:79:fb:bc:24:10:52:a3:cf:a2:bc:1d:cb:
f1:b6:24:01:d5:1d:1b:10:52:14:41:08:35:87:3e:
f2:ab:15:41:81:c8:36:53:b2:c3:66:e7:e0:97:71:
34:2b:fb:43:d1:14:be:4c:ae:10:cd:28:f6:15:87:
90:1d:a9:2c:e5:ff:31:54:53:7e:6a:d0:9a:5e:fa:
d2:26:e6:24:44:fa:0a:9d:f4:ac:60:fd:28:39:ac:
53:2b:fe:e1:83:f7:8b:ee:4c:6b:d9:b4:94:84:52:
d0:77:e7:ff:49:52:15:55:16:71:26:96:b7:33:04:
fa:75:f5:3d:7d:cd:3f:f5:0e:d0:79:23:91:79:d7:
59:80:d2:3f:0b:fa:a5:c5:90:d5:25:dc:14:7c:da:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F5:46:6A:94:F8:8A:B8:A2:05:2A:18:B1:61:0A:7D:62:50:04:D4
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a9:e2:9d:ad:56:df:40:76:49:ca:ea:c2:74:2b:a3:c8:77:
10:48:83:6b:dc:5e:23:01:06:19:c5:81:18:be:0f:e4:02:0e:
af:cb:9e:e9:89:57:1b:29:c5:9f:3c:b8:75:6e:8c:38:67:31:
a3:f9:21:5d:a5:aa:94:3d:05:83:75:48:99:06:02:c3:44:89:
cf:fa:85:6a:6e:0f:a1:21:a8:14:be:88:0f:15:78:1b:83:9b:
6b:a1:04:85:c5:d3:d5:43:85:d4:de:3d:d7:06:bd:ef:36:44:
2f:c3:61:d2:54:e5:d4:56:5f:19:a7:06:a2:49:8a:9f:90:15:
c5:0b:c3:bf:7f:90:55:7e:70:1e:4e:ec:44:2d:07:87:49:c2:
1f:36:d2:fe:db:f5:e7:c2:ac:05:96:1e:c7:92:97:bc:ca:bd:
23:38:05:d9:31:d5:be:51:bb:5f:d3:db:ab:df:c3:61:09:04:
f9:fc:1e:f0:39:a8:46:d1:44:6f:ba:47:ce:cc:56:c0:50:73:
68:a8:50:c8:f7:32:0e:7e:a4:a8:ab:6a:54:4b:79:43:d8:6f:
7f:37:13:15:0a:ff:92:95:55:ce:2d:f1:28:f3:68:7b:58:dc:
38:80:6a:54:ff:64:f0:3a:34:8d:0c:98:cf:aa:88:af:97:7e:
5d:15:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:52:32 2026 by rpki-client