Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: RTFilUQiKZS+J46SPq3NK1U+lbsOf9I6ai1PnsLyYKQ=
Subject key identifier: E8:AB:93:7C:D3:A3:CF:B9:84:8B:34:C4:06:FF:5E:E1:06:E9:E7:E4
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019E1E3555706F09993CB353FF4ED7265BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 1893
Signing time: Tue 12 May 2026 22:01:11 +0000
Manifest this update: Tue 12 May 2026 22:01:11 +0000
Manifest next update: Wed 13 May 2026 22:01:11 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: MFhf77LUKZH6Q0ShlFgyyRbbZYX6afLfnxSB23S3WOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:55:70:6f:09:99:3c:b3:53:ff:4e:d7:26:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: May 12 22:01:11 2026 GMT
Not After : May 13 22:01:11 2026 GMT
Subject: CN=e8ab937cd3a3cfb9848b34c406ff5ee106e9e7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:55:45:bb:9e:f6:56:5e:34:ae:0d:fe:67:
42:c6:7c:f6:03:d9:54:c0:df:65:56:fb:93:6b:64:
c3:6f:24:cf:3f:7d:b5:d6:3b:48:35:0e:0a:42:3e:
5b:72:b2:c5:78:b6:f7:30:7f:d2:75:db:b5:8d:7e:
ef:b4:86:8d:6b:16:e2:78:23:cd:93:e3:71:66:24:
33:eb:08:5c:fb:1d:37:38:f2:33:fb:2c:01:b1:31:
db:f3:56:90:54:05:a7:26:40:23:8c:15:a4:d7:6d:
8c:77:12:94:0b:0c:be:df:0b:59:7c:d9:cd:bd:54:
b3:11:97:e4:7c:4f:4d:96:2d:ff:10:1d:19:f1:8c:
73:a6:0f:25:95:c9:44:df:7b:af:e2:89:f8:d4:c5:
0e:9b:55:b6:de:a6:45:85:bb:d5:52:bf:e0:95:4f:
03:f2:4e:63:35:d6:62:29:b5:df:59:6f:36:46:cf:
75:ef:66:8f:bb:30:df:7a:0e:8e:e2:96:52:f9:22:
28:11:7f:95:32:0d:77:bf:f4:a6:2c:a7:4f:15:22:
4b:88:fb:1d:ce:dd:37:07:3b:76:19:20:24:8e:19:
4a:68:f0:ee:1e:26:6e:e5:28:66:26:2a:ef:71:e0:
29:c4:c4:91:97:de:23:c9:0d:b8:41:22:a4:0a:d9:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:93:7C:D3:A3:CF:B9:84:8B:34:C4:06:FF:5E:E1:06:E9:E7:E4
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:39:20:f9:49:ea:4e:39:e3:dd:cb:39:d0:b3:50:9e:15:1b:
f7:56:d4:68:19:9d:02:da:4e:b3:27:d0:5b:fb:32:89:b6:fc:
c4:59:f7:ba:98:70:99:bb:ec:3f:e4:73:27:b3:10:bd:60:7c:
1c:bf:f7:56:0b:94:86:2a:d5:dc:a4:97:e9:91:65:e5:6b:30:
a0:db:dd:5d:5a:c6:d4:cc:f9:e6:a2:55:b3:91:1b:d4:02:74:
b4:25:f6:71:80:47:34:53:58:f8:15:02:4d:c5:4f:51:4b:70:
29:5d:b3:79:72:bb:1a:fa:cf:e1:8b:9f:c6:02:f4:fc:34:1c:
89:4a:07:4e:6e:61:d5:2a:7b:d2:dd:1d:8f:d8:0b:ab:04:9d:
1b:a4:10:01:75:04:e8:62:72:50:81:53:96:2d:0b:7a:41:6a:
f6:a2:ef:1f:6b:5f:a2:8f:42:cf:cc:d4:d3:84:30:6e:1a:ea:
fa:29:9a:03:94:52:1e:8f:ce:83:22:b7:e0:6b:b7:11:34:92:
a0:cf:12:5a:4e:07:24:b4:36:3e:3e:8c:29:ea:33:f2:ab:05:
8f:fb:1a:4c:d9:09:19:a3:b1:71:d9:7d:4d:77:6e:4c:d7:dc:
69:7c:87:b7:ea:bd:ab:73:3f:1e:54:71:18:cc:ca:7b:3c:a5:
74:ea:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:14 2026 by rpki-client