Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
File: 2J9hzEBpw2NiRF2BiJEDQLble6U.mft (raw, json)
Hash identifier: rdALwPA9ICtNybf7vi5HkbxDxZWGtQhGb3V8MQgqUfA=
Subject key identifier: 93:15:0A:8F:2F:71:78:7B:11:33:28:DB:F5:EE:25:7E:1E:9A:69:1B
Authority key identifier: D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
Certificate issuer: /CN=d89f61cc4069c36362445d8188910340b6e57ba5
Certificate serial: 019D2704A53D9AEC5FA1BA5C8BD5CDC90886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
Manifest number: 0E35
Signing time: Wed 25 Mar 2026 22:01:49 +0000
Manifest this update: Wed 25 Mar 2026 22:01:49 +0000
Manifest next update: Thu 26 Mar 2026 22:01:49 +0000
Files and hashes: 1: 2J9hzEBpw2NiRF2BiJEDQLble6U.crl (hash: ogxX3ZGel/uuNDaijyiXpRvwryVTEgxS8GURPofEYJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a5:3d:9a:ec:5f:a1:ba:5c:8b:d5:cd:c9:08:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89f61cc4069c36362445d8188910340b6e57ba5
Validity
Not Before: Mar 25 22:01:49 2026 GMT
Not After : Mar 26 22:01:49 2026 GMT
Subject: CN=93150a8f2f71787b113328dbf5ee257e1e9a691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:25:68:0e:49:f7:6b:d5:31:6b:5d:2b:10:
1a:7b:d9:fd:11:ff:d5:b5:24:de:db:0f:1e:52:d9:
72:4d:9f:61:a6:ae:e4:34:60:46:b9:09:1a:07:41:
68:5b:24:98:12:a7:04:48:fc:d1:11:40:db:2c:8b:
4e:c3:b0:dd:98:fa:2b:41:56:bf:e6:be:7b:93:81:
76:ed:18:19:08:5b:f1:72:83:ca:c0:c5:2a:e3:fc:
6d:fc:f7:8d:25:88:bd:f7:c6:a6:c3:6b:a1:82:bb:
0c:a0:b1:23:e4:87:c7:d7:e8:00:87:de:52:c7:a3:
ae:99:75:84:46:02:0c:05:3b:fe:e7:70:b0:4e:53:
59:5a:75:fe:9e:11:d6:4d:0f:6b:2b:ea:11:ad:de:
d8:d9:81:28:aa:17:c2:b4:8c:4a:cb:d0:9e:c2:86:
5a:a9:1e:c3:47:39:76:64:99:05:19:44:6e:57:c9:
b0:48:34:99:dc:f5:cc:f6:86:14:52:fc:75:3e:36:
7b:3b:ea:f2:13:78:d2:cc:91:aa:3d:45:17:6e:8b:
24:95:3b:8f:2d:3d:ad:6d:cc:da:3f:44:5c:20:89:
59:a0:f7:1b:c5:1e:ce:77:d4:95:2b:64:c6:2b:3a:
a6:83:a5:91:0e:73:de:74:8a:3e:f6:93:5a:ad:7a:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:0A:8F:2F:71:78:7B:11:33:28:DB:F5:EE:25:7E:1E:9A:69:1B
X509v3 Authority Key Identifier:
keyid:D8:9F:61:CC:40:69:C3:63:62:44:5D:81:88:91:03:40:B6:E5:7B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2J9hzEBpw2NiRF2BiJEDQLble6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/394f0e-d67f-4566-b769-ea32c28d387c/1/2J9hzEBpw2NiRF2BiJEDQLble6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:08:76:51:f9:ea:cc:6f:ba:6a:ee:2d:dc:2d:8b:58:0f:86:
6e:86:b8:31:5f:05:b2:4b:90:b1:eb:af:a5:13:71:35:c0:32:
ce:51:85:72:db:15:de:16:9b:0c:d6:b7:d1:6a:72:21:bf:d3:
a2:c6:7b:ff:12:80:d5:c8:6c:7d:07:5d:35:6c:94:e6:fd:21:
ed:0a:a2:31:ad:25:93:28:d7:19:b6:74:6b:a7:13:2c:6b:73:
5f:2f:97:4b:62:e5:ea:2e:ff:8c:a1:b1:ac:fb:90:75:df:b9:
70:4b:1d:f9:34:8c:9b:50:8d:19:2e:d3:15:cc:06:3d:fe:97:
a8:87:51:f0:b3:95:d5:16:2d:77:f9:10:4e:d9:23:9c:9c:b1:
1a:fb:99:bd:2d:1f:8f:6d:46:dc:1f:05:37:47:37:db:88:65:
ff:03:aa:af:07:f4:a3:25:78:45:ae:25:6a:48:ce:83:40:73:
80:90:6f:dc:1a:36:d7:fe:0a:dc:8d:2a:34:64:c7:75:b2:40:
14:d5:26:c8:51:ab:ac:23:b2:6f:00:10:02:64:a4:b5:aa:94:
70:47:8f:fb:36:a0:4d:26:7a:5a:41:04:df:0e:0c:fd:3d:04:
82:69:55:42:77:64:67:68:63:5d:55:ec:c8:81:fb:2a:a1:5b:
7e:63:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:21:08 2026 by rpki-client