
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: TT1keTGTpNTONqOq7p6+CRG5R/231vLXZ98/b+SD6lQ=
Subject key identifier: AE:80:FC:03:C4:3B:1D:27:02:9B:B7:62:A8:B5:F1:4E:C8:37:35:75
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 01A0CC360ED615B97B9620DF8D0712961027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1A65
Signing time: Wed 23 Sep 2026 03:01:29 +0000
Manifest this update: Wed 23 Sep 2026 03:01:29 +0000
Manifest next update: Thu 24 Sep 2026 03:01:29 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: 0CurjPPwFKDjjw57l59u4srOtv2aYpDtY9Am3XiytCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:0e:d6:15:b9:7b:96:20:df:8d:07:12:96:10:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Sep 23 03:01:29 2026 GMT
Not After : Sep 24 03:01:29 2026 GMT
Subject: CN=ae80fc03c43b1d27029bb762a8b5f14ec8373575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:fd:4c:7a:aa:1b:36:5f:ef:0b:4a:78:e4:
e4:03:31:ac:05:e3:bc:40:3e:8b:42:6a:03:de:d1:
2e:71:31:bd:13:fb:39:a5:b0:fa:1d:9a:30:b8:3e:
87:f6:1d:f3:d6:bd:9c:23:c3:0e:19:4d:23:29:06:
07:27:e6:d0:72:d5:a7:cb:01:46:86:9f:21:f6:f1:
e8:7a:b9:c1:6e:23:39:4a:d1:e8:48:24:2c:ba:5b:
82:35:96:99:f5:fb:c5:97:02:68:d3:ac:99:91:5b:
ca:e0:4d:3d:de:79:d9:e8:68:c0:ba:a7:39:5c:69:
47:89:02:69:cb:0d:ec:62:66:96:f0:fb:67:ce:e1:
8f:3d:88:2e:6a:99:c3:60:f9:d5:68:44:9c:c6:3f:
42:b6:cb:f6:5a:35:9a:63:17:2f:de:4a:17:43:20:
d8:57:27:02:7a:aa:0d:0d:87:25:70:9c:3b:21:26:
4d:86:f8:5f:56:8e:82:93:af:8d:48:19:fb:4b:98:
c1:1f:98:21:55:13:19:db:34:fc:3f:59:41:25:b1:
37:ec:55:ed:17:84:db:a8:27:95:2e:f3:af:e0:87:
b5:e2:05:08:84:30:8a:f6:55:26:94:ce:1c:87:c5:
3b:06:d5:93:6f:77:c8:6e:39:fa:e5:4f:0e:86:46:
14:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:80:FC:03:C4:3B:1D:27:02:9B:B7:62:A8:B5:F1:4E:C8:37:35:75
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:85:21:76:29:ae:f3:17:2e:c2:52:76:f5:5a:99:01:32:17:
be:dc:13:95:e8:fe:8f:bb:d4:50:28:79:11:d3:2c:4f:57:1a:
2b:3c:c3:88:44:01:b3:3d:43:c2:42:c0:fc:6e:43:13:b7:a7:
b3:ec:ff:4c:e5:ad:78:1c:a2:22:e2:55:5b:16:c2:9a:fb:66:
90:4b:53:b9:6b:ec:36:18:d1:d4:2c:6a:73:9f:15:f5:8b:23:
af:91:df:b6:6e:c3:4a:3f:06:7f:9d:a6:b3:c0:a5:55:28:19:
4c:e0:4b:08:39:13:17:58:33:89:a7:dc:b7:42:4f:0a:5b:e8:
b7:a2:26:96:55:09:1d:21:e4:27:65:c4:ee:22:38:53:0d:f2:
12:32:4e:61:8c:5d:b9:3c:72:75:d9:4c:42:88:c0:25:72:87:
8f:09:72:22:39:3a:d3:27:34:5b:9c:63:3f:3e:94:2d:23:24:
64:37:68:7a:29:65:df:88:f3:9c:3a:a3:41:48:aa:35:e8:6c:
a7:30:61:94:6b:c7:8a:66:b8:83:bf:74:e3:7c:c6:54:73:66:
de:e3:c1:50:51:3f:5f:87:54:58:25:c1:2e:3c:60:c3:d6:f9:
cd:11:2b:dc:13:4e:82:61:1b:ad:51:f3:98:3c:c8:44:f9:22:
21:d1:1f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:39:12 2026 by rpki-client