Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: APir6JjaS6Ttg34nugbU6nh0Ntkb8aSS+hSdj7NUVy8=
Subject key identifier: 08:FE:4B:94:16:E9:84:A5:1F:09:89:5A:3A:61:1C:C4:5A:F4:A5:D1
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 019D27049C4F700FD7958D6968FE11D05E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 1813
Signing time: Wed 25 Mar 2026 22:01:46 +0000
Manifest this update: Wed 25 Mar 2026 22:01:46 +0000
Manifest next update: Thu 26 Mar 2026 22:01:46 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: GDKJDNbPrGWB2XBBCIVDxLYSEW74ZoThtCk6zPY3JgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:9c:4f:70:0f:d7:95:8d:69:68:fe:11:d0:5e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Mar 25 22:01:46 2026 GMT
Not After : Mar 26 22:01:46 2026 GMT
Subject: CN=08fe4b9416e984a51f09895a3a611cc45af4a5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:71:e0:7e:39:ec:a8:96:3f:32:c4:95:c0:
30:0d:07:b0:51:ac:15:da:15:c9:42:2a:91:40:c0:
f5:da:a7:6c:ab:7c:bd:b6:5b:8a:c6:05:c1:58:d7:
c4:f5:9b:1c:d4:80:77:03:10:ef:c2:cf:f9:40:b1:
1e:1d:73:04:ad:ae:fe:7a:31:a4:27:71:de:63:2c:
f0:e4:3f:70:fd:fe:c1:1a:fa:76:e1:04:70:b5:99:
7e:ac:cb:12:12:76:dd:44:6a:ff:04:9b:87:72:45:
99:0e:da:b7:bf:ff:3a:1a:ca:3b:9d:45:24:b7:3f:
83:53:ea:ea:2f:12:46:d7:d2:96:7b:47:25:0f:0b:
84:c1:ff:c7:50:6d:e9:c7:a4:da:c2:94:9b:67:44:
81:b0:8f:a7:86:60:06:2b:ad:70:e7:2e:21:3c:5b:
6d:a3:d3:4f:fa:35:e0:40:2d:b9:d2:b6:c6:35:b2:
1b:10:0d:9b:19:46:1b:95:b7:c4:1b:0f:22:9d:ff:
c4:2f:77:38:0b:f5:0e:13:87:41:38:1f:38:94:a4:
03:4b:6f:57:23:51:da:5b:ce:22:eb:5b:13:6c:f3:
4c:84:76:54:bd:52:ed:28:e7:1b:0b:45:b9:51:5c:
48:71:de:6b:b8:c9:7a:bc:ed:0a:b0:2d:81:99:27:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FE:4B:94:16:E9:84:A5:1F:09:89:5A:3A:61:1C:C4:5A:F4:A5:D1
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2f:2a:eb:40:ba:df:7c:05:e1:91:b8:01:6f:db:ff:8f:87:
c5:f9:57:85:99:09:03:46:e3:01:36:bc:3c:52:e0:47:80:b2:
3c:0c:17:34:da:4a:51:78:04:9b:99:69:dd:6f:7e:6e:90:25:
83:39:6d:37:d4:62:d3:3d:ae:aa:eb:a2:dc:da:ef:be:4f:2a:
2a:3e:2a:90:e2:8b:f2:0b:80:85:41:96:95:55:b7:86:7e:c7:
c8:64:79:47:2c:80:3c:84:d5:b5:08:f8:40:46:79:23:6c:7a:
e3:f2:ce:e6:ed:57:26:16:46:e5:a4:0e:a3:30:69:dc:0b:a9:
21:f1:bb:64:1e:87:06:c4:ca:44:1f:a9:62:3f:a5:58:a6:d0:
bb:a9:2b:78:6b:21:08:56:18:49:6c:9d:d2:86:ba:c8:1f:d4:
cd:8a:19:33:ca:b8:8b:e2:62:f8:15:6c:77:b7:92:e9:24:b7:
a2:11:b4:f3:b1:31:6d:4d:68:8c:93:23:e3:21:3d:0d:00:10:
1c:5d:b7:a9:b7:5e:72:bd:e6:82:fe:5a:f6:11:7e:2d:1b:01:
de:56:81:c4:da:e6:90:63:ea:a1:50:ca:8e:28:80:d4:66:0c:
54:bd:f8:2b:da:5a:94:8d:96:f9:a7:46:96:75:ed:e7:44:5a:
12:17:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:43 2026 by rpki-client