Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
File: 2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft (raw, json)
Hash identifier: qDkmw4Aqd3makthwXlMnTfs1pSliTyygvjvXyrh/I54=
Subject key identifier: 80:F2:86:5B:35:73:C6:0C:D6:08:B0:7E:87:DD:D7:66:C6:81:FA:E4
Authority key identifier: DA:0B:3B:7A:7F:85:60:41:22:FF:D6:32:E2:97:53:65:70:31:C4:2B
Certificate issuer: /CN=da0b3b7a7f85604122ffd632e29753657031c42b
Certificate serial: 01A0C933FC0AA9A728FB9DAA67A7EED5AB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 13:00:22 +0000
Manifest this update: Tue 22 Sep 2026 13:00:22 +0000
Manifest next update: Wed 23 Sep 2026 13:00:22 +0000
Files and hashes: 1: 2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl (hash: Nxyj113KVMPZfVx+F/4ISAaoOnt3FQOp1rfXgzxB47Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:fc:0a:a9:a7:28:fb:9d:aa:67:a7:ee:d5:ab:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b3b7a7f85604122ffd632e29753657031c42b
Validity
Not Before: Sep 22 13:00:22 2026 GMT
Not After : Sep 23 13:00:22 2026 GMT
Subject: CN=80f2865b3573c60cd608b07e87ddd766c681fae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:39:cd:cf:ae:32:ce:8c:03:cc:8c:fe:35:2d:
7e:d0:83:1f:21:9a:dd:80:74:50:4a:82:63:c6:48:
73:9a:06:4a:6b:14:29:fc:33:46:40:6e:52:25:d1:
66:4a:27:65:a4:d6:b2:4c:14:bc:d0:59:62:b6:5e:
ca:fc:6e:64:86:00:91:6a:f4:cc:bb:84:71:fd:eb:
b1:7f:d0:a2:47:cf:a7:cd:10:a5:a2:88:5f:d7:fd:
cd:1d:fd:25:dd:28:a8:37:1c:67:7f:c8:50:fe:d7:
02:e5:c6:82:33:90:00:4a:7d:24:c0:6e:09:df:fa:
59:9b:10:f6:50:a1:b9:f5:52:31:44:91:95:f0:ed:
e5:ab:40:68:27:c7:ea:07:1b:a0:4e:01:bc:18:f7:
70:b7:a2:b8:c3:a8:0b:03:9a:76:4e:bf:80:e2:e5:
cc:e9:ea:47:37:ef:ea:1c:39:82:4b:e4:d7:2f:19:
2b:0d:64:a3:62:78:42:b6:9d:80:8c:a5:4e:ea:42:
1f:60:64:46:80:84:50:a6:1c:5b:ba:7d:53:d4:89:
52:b7:82:42:71:c3:14:f8:0c:60:67:02:10:c1:e4:
d1:32:4b:eb:d9:68:fa:da:50:b8:c5:c8:39:dd:9b:
7f:2c:39:c3:70:18:02:d1:4f:17:1f:6b:1d:41:1f:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:86:5B:35:73:C6:0C:D6:08:B0:7E:87:DD:D7:66:C6:81:FA:E4
X509v3 Authority Key Identifier:
keyid:DA:0B:3B:7A:7F:85:60:41:22:FF:D6:32:E2:97:53:65:70:31:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b5:42:62:b0:f5:ae:3f:7a:5e:38:2e:fa:d7:89:2c:19:91:
5b:88:58:fc:29:be:4d:b4:6b:0a:7f:6e:81:0e:0a:1b:65:df:
c1:ee:22:84:0a:2c:0f:a6:27:cf:1e:d2:5e:f2:43:b4:a2:1c:
8f:3a:c9:af:b3:e6:1c:75:66:1a:2c:6c:a0:14:1b:f1:76:39:
5b:78:0c:11:1b:8b:5a:4f:f3:bf:cd:f9:f5:d2:d3:0a:8d:c2:
90:f6:b5:42:fe:0d:5f:7e:5a:16:64:d6:59:37:ed:24:61:09:
f8:85:c8:9f:1a:1b:77:af:01:fe:33:98:cc:7e:a9:23:65:09:
74:10:c9:37:65:48:88:48:4f:b0:cd:6d:bc:7f:2e:e7:3c:a0:
d1:02:89:84:75:ed:6b:f2:22:db:2a:09:bb:65:36:8a:ad:c7:
9e:bf:8b:20:01:3d:be:58:ea:f0:37:cb:0d:86:34:84:ba:b0:
fd:10:2f:7f:30:39:ae:20:06:c5:24:b2:14:84:48:dd:25:7d:
c9:5f:b7:a5:cf:df:72:bd:9c:d4:c3:a3:ad:a9:aa:b1:8a:f1:
df:1d:d4:8c:40:68:54:54:b2:d0:6d:6c:bf:18:e9:00:6b:72:
42:3d:0d:ec:14:de:65:e7:b9:65:b0:58:10:10:ce:f6:79:19:
26:92:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:37:30 2026 by rpki-client