Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: K117ibdf/r+RoKYPzUKGbCh4TK1R61blldalYZGKUnk=
Subject key identifier: 44:D2:FD:04:C8:0F:DB:3C:28:01:EC:4E:98:95:9C:11:7C:FB:A3:E9
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 01A0CFA41AE09027B926558B30C5AB023ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 101A
Signing time: Wed 23 Sep 2026 19:00:33 +0000
Manifest this update: Wed 23 Sep 2026 19:00:33 +0000
Manifest next update: Thu 24 Sep 2026 19:00:33 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: MwTCCPZj0A2qopItgWZqmPBx6rUwDqY3+4dMN9/V52k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:1a:e0:90:27:b9:26:55:8b:30:c5:ab:02:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Sep 23 19:00:33 2026 GMT
Not After : Sep 24 19:00:33 2026 GMT
Subject: CN=44d2fd04c80fdb3c2801ec4e98959c117cfba3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:6f:17:06:fb:a7:c7:09:50:aa:72:ec:d7:
0e:8b:9f:eb:2e:54:0a:76:19:88:f4:11:fd:18:00:
04:af:ab:7c:eb:b3:5c:8f:b5:ac:87:c6:3b:9c:a2:
93:aa:e3:cf:68:1b:fb:7c:f3:b3:6c:4c:4c:17:1e:
49:e2:4d:fc:83:79:35:9d:d5:49:8a:2e:8e:35:ea:
87:2c:dd:08:a9:fd:e5:7a:f0:47:8c:09:e1:6d:67:
56:f7:3e:bf:55:8e:f2:18:de:bc:26:ed:45:c6:f3:
58:fc:72:8f:77:bf:b7:51:e0:cd:42:1c:88:54:64:
bd:39:a0:f4:8c:80:47:44:6e:ab:78:f4:83:c8:d7:
92:36:9c:65:f1:26:d4:ed:3c:89:79:c9:69:f3:5f:
d9:50:a3:b3:8e:78:cb:9a:8f:87:fb:79:20:84:90:
7d:a6:9c:88:70:8a:19:b9:0a:ee:63:30:d6:86:19:
9c:28:e3:92:39:07:04:dc:27:b7:33:9b:79:0f:1d:
a6:78:9e:8b:17:2e:d1:69:82:13:2d:c5:d4:b4:d8:
9c:e5:46:4f:a2:1d:e7:df:8b:f5:4d:09:1b:8a:7f:
b6:b8:c8:5c:c2:65:f0:a3:00:d0:d1:00:e2:5e:49:
5d:df:49:33:ad:4e:36:02:77:ed:8e:99:52:77:61:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:FD:04:C8:0F:DB:3C:28:01:EC:4E:98:95:9C:11:7C:FB:A3:E9
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:54:51:d8:d5:4c:69:41:16:7e:cb:be:3c:e6:69:4f:36:f7:
52:ec:49:93:1f:7f:e5:89:80:d8:92:c7:eb:88:36:29:8a:8d:
ad:d9:33:6a:29:66:58:97:c5:69:12:76:fd:9d:ce:cc:85:74:
b3:42:17:98:73:69:4f:c9:88:36:20:17:8d:83:11:10:a5:d9:
fc:11:e2:b3:33:64:89:a8:77:59:62:cf:28:d2:ad:b6:92:2c:
07:c4:87:6b:fb:9d:84:ea:e2:09:a9:18:50:db:fe:7b:70:eb:
27:d2:be:bc:d4:bb:20:c2:a4:78:a2:3b:3a:5e:8e:fb:b8:3e:
fd:c0:e8:51:e9:40:d1:3c:ab:e0:c9:e3:42:ff:73:db:90:6a:
79:4a:89:96:5a:c0:65:e3:e5:e0:be:df:f0:b2:68:76:7b:e2:
92:c4:de:2c:58:29:3f:82:00:84:c4:d5:a3:21:03:f9:be:d8:
18:fe:07:2e:26:25:d7:98:76:a5:b0:2c:d3:5f:df:c8:47:5b:
53:40:ee:77:82:b5:9b:46:f2:c9:61:98:7f:46:35:62:f9:18:
a5:5e:4a:8e:a0:60:25:10:59:1d:91:1b:8a:b9:a9:50:58:c8:
6b:a4:d7:98:99:c8:4b:ea:d4:7c:da:c8:98:71:0c:47:ab:e5:
f2:25:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:28:22 2026 by rpki-client