Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: 8pNa8NUwtCdO9Af8620nKO6oDUlr0kp+yOWTBgWGoTo=
Subject key identifier: 05:68:BF:62:E4:D2:50:5B:3D:19:B4:C3:87:CE:43:0C:91:A9:CF:D5
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 01A0CDB5D714A1C12B1D69F8303E5265E996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 19F7
Signing time: Wed 23 Sep 2026 10:00:41 +0000
Manifest this update: Wed 23 Sep 2026 10:00:41 +0000
Manifest next update: Thu 24 Sep 2026 10:00:41 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: U29CFqt6xwHxKDEQUokGvS0GYVOx24rS9Bxqm7/SglY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:d7:14:a1:c1:2b:1d:69:f8:30:3e:52:65:e9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Sep 23 10:00:41 2026 GMT
Not After : Sep 24 10:00:41 2026 GMT
Subject: CN=0568bf62e4d2505b3d19b4c387ce430c91a9cfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:6d:d8:d5:a7:f7:b7:c5:6b:e0:f6:e9:6a:
dd:c8:93:17:e1:1b:d5:9f:5f:95:8f:33:fc:ff:10:
55:ae:a2:23:a3:c9:fc:b2:72:5c:3b:fb:fb:a1:00:
a7:5b:ad:66:e7:10:be:9f:21:4b:6d:70:56:54:9f:
2f:7e:ed:2e:3e:ff:0b:fe:a4:73:ee:dc:13:08:45:
96:b5:95:6c:b6:cb:d8:28:01:a3:5c:8f:15:34:a2:
e0:c1:65:f0:fd:71:a3:1c:28:d5:c9:40:cd:05:3a:
a1:df:76:3c:c4:27:33:fd:72:06:f8:70:a0:90:e1:
8e:3c:d5:6d:04:68:51:bd:c6:45:34:c8:52:61:6f:
8e:2c:17:dd:84:65:ec:64:e2:b4:e8:d8:46:ef:a4:
57:4c:d6:9c:12:97:a4:40:66:3f:2e:1a:42:2c:c7:
2a:02:89:7f:b4:94:51:96:aa:a4:e1:d1:4d:e2:2a:
65:6d:d6:d2:b5:f7:2c:b0:99:98:3a:e1:9b:3a:53:
92:9a:a3:3a:37:5f:f6:b4:e8:ab:22:c0:84:b2:c2:
67:b7:9e:4e:e7:5d:13:31:78:b3:e9:be:fd:f7:5c:
d7:7e:bc:8d:50:12:be:81:65:45:da:ca:5f:4e:65:
10:ef:64:0e:84:f4:c6:0e:51:61:e8:97:c1:1e:9c:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:BF:62:E4:D2:50:5B:3D:19:B4:C3:87:CE:43:0C:91:A9:CF:D5
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ea:6a:3e:22:3a:56:92:77:af:6f:eb:96:21:86:bb:ee:8f:
77:0a:70:af:6f:e7:c9:e3:68:36:2c:ac:12:c4:46:2a:19:79:
0c:8d:91:cc:0f:b3:f1:6e:10:77:41:1e:ce:97:2e:9d:65:59:
63:0a:d0:cd:55:8a:66:43:e4:7a:dd:11:d1:4b:0f:d6:02:95:
7f:9e:c8:7a:55:f6:00:c6:4e:78:cf:8d:f6:58:2a:22:b3:f2:
20:84:60:9f:77:dd:f9:73:e7:c2:af:19:a0:20:83:db:f7:4b:
06:45:3f:82:3e:e9:16:b1:b6:c8:ab:49:36:bc:6a:5e:f0:48:
3f:4c:63:3a:3a:1a:d8:39:9c:a6:02:35:60:26:d5:e4:6c:23:
6f:a2:60:08:ad:cc:09:4b:81:78:ee:30:65:aa:43:bf:08:89:
e1:d4:fc:ae:92:c5:a6:f1:b0:81:d2:f7:a1:ab:6c:9f:aa:d0:
9b:93:cb:69:d3:de:89:96:15:06:fb:ad:91:52:02:7f:f5:fe:
5f:45:45:d9:66:f3:28:43:0f:38:61:ce:23:3c:dd:30:1f:77:
51:46:68:85:ad:a2:2a:16:7a:6c:23:a3:3b:a7:eb:2c:d9:39:
8a:23:f8:cc:db:b6:12:03:d3:31:70:69:ad:83:fc:cc:64:68:
47:9f:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:05 2026 by rpki-client