Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: Eqlfhe65Z8LNYz8/KM5EzHZW1nVYjZ7/HZg7D3QwXvY=
Subject key identifier: 9E:D9:89:AF:07:CD:36:C7:A9:71:80:51:89:0A:79:8D:5B:E1:E2:B1
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 019D2961414258373B56BD5B6E6BC2A3BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:02:12 +0000
Manifest this update: Thu 26 Mar 2026 09:02:12 +0000
Manifest next update: Fri 27 Mar 2026 09:02:12 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: ES/tYwfzIsOJezoA811oMT4E5njk0n6iMliGXnkHslE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:41:42:58:37:3b:56:bd:5b:6e:6b:c2:a3:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Mar 26 09:02:12 2026 GMT
Not After : Mar 27 09:02:12 2026 GMT
Subject: CN=9ed989af07cd36c7a9718051890a798d5be1e2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:53:0b:e9:bc:22:b7:1f:ff:26:73:d1:e1:
37:83:d6:85:49:3c:9d:f4:a2:f7:5f:ce:b7:05:15:
c1:e0:b0:27:18:81:f1:52:31:15:8a:19:bb:1d:6b:
e4:93:7a:ac:b6:a4:45:17:32:18:37:10:4b:b2:67:
bf:3f:fb:2e:f2:41:f0:1e:2f:ee:1b:56:12:e7:e1:
aa:d1:b9:82:e5:71:dd:41:af:a3:7e:3d:fa:e8:30:
d6:82:d6:19:41:36:d2:fa:17:80:d8:b6:63:d6:82:
b1:6e:6e:08:9f:eb:8f:6e:dd:c7:a7:67:b4:18:59:
e0:60:33:4a:54:29:e3:2d:60:78:db:c2:27:a4:b6:
23:43:95:85:23:60:9e:b9:75:c9:88:04:e5:e5:68:
2b:47:6e:17:04:ba:ec:39:f1:9f:f2:cf:d0:dc:ed:
e4:99:bc:23:a8:e5:7c:bb:f7:ac:02:ac:89:37:41:
bd:b2:98:da:45:8b:7d:3d:ca:61:e1:f8:a9:3c:ef:
6a:1e:f4:be:94:41:ea:81:31:d8:f9:29:dd:16:da:
1d:0c:d9:81:82:1d:de:f3:05:34:66:9c:02:c9:2f:
c2:24:25:14:39:04:8a:0e:de:4f:67:fe:73:c0:5e:
2a:59:72:bd:22:fe:f9:86:fe:c6:bc:ef:4d:ba:48:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:89:AF:07:CD:36:C7:A9:71:80:51:89:0A:79:8D:5B:E1:E2:B1
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:80:b6:f0:54:d6:bf:8a:ba:e3:0c:06:77:ca:31:13:7d:f7:
b1:72:8b:3b:7b:ac:22:ce:9e:ee:8b:44:53:38:b0:e3:23:cf:
81:af:b6:ac:a1:04:03:46:7a:97:a1:19:03:6f:36:8c:02:c9:
43:5a:9b:bc:fc:b3:df:a3:15:ff:6d:ec:37:f2:a5:b4:f3:3e:
c1:e2:ba:89:ca:e8:31:d9:01:6b:dd:8e:5c:07:16:96:c8:2d:
95:f9:ea:66:82:93:cb:b3:6a:99:b1:ad:ac:96:0d:92:cb:40:
66:9c:0d:92:3e:4e:56:c0:aa:80:d7:b8:74:d1:e2:2f:76:5c:
15:4c:9d:5a:4f:2c:ab:78:5a:cd:86:87:e7:ce:59:f8:6e:68:
28:a9:de:57:48:4e:e1:bf:5d:e5:fb:65:69:d1:e6:8c:2f:a1:
c9:5a:27:5b:07:7b:16:ef:2d:9b:d7:19:57:2f:82:f8:e7:e1:
4b:4d:c2:68:a1:93:13:b9:94:17:c3:50:ce:8d:0d:a9:13:d7:
4c:38:c3:c1:49:c1:be:19:f8:29:e7:ed:95:6f:68:03:0e:bb:
12:e3:eb:23:29:e4:58:1c:5b:4f:65:74:f3:74:93:45:21:ef:
56:ac:07:1c:03:76:ce:83:0a:8a:20:d1:c4:f3:72:61:64:f8:
a7:65:bb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:34 2026 by rpki-client