Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
File: 2wy7NfYw1Aytd1B_2r03_e3BIQM.mft (raw, json)
Hash identifier: jF8my5RzkXCq58naV46DvI2mMNytHgIzlkbCrmOLJdA=
Subject key identifier: 94:F6:00:08:F5:65:4A:CC:26:01:16:A8:CD:C5:D7:CA:EF:64:33:E5
Authority key identifier: DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
Certificate issuer: /CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Certificate serial: 01A0D192C84AAF00AED9223855EDECD13EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
Manifest number: 0520
Signing time: Thu 24 Sep 2026 04:00:52 +0000
Manifest this update: Thu 24 Sep 2026 04:00:52 +0000
Manifest next update: Fri 25 Sep 2026 04:00:52 +0000
Files and hashes: 1: 2wy7NfYw1Aytd1B_2r03_e3BIQM.crl (hash: 4QLhD1HMqpJgTY5SXAAGlPSJPqz+m+TMxqGUWqEUiEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:c8:4a:af:00:ae:d9:22:38:55:ed:ec:d1:3e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Validity
Not Before: Sep 24 04:00:52 2026 GMT
Not After : Sep 25 04:00:52 2026 GMT
Subject: CN=94f60008f5654acc260116a8cdc5d7caef6433e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:a6:dc:56:75:e5:bd:04:aa:e4:5a:d4:54:
fa:3f:7a:0f:3b:ab:83:97:b0:74:a4:f9:39:ab:97:
0b:d1:42:f8:a9:95:a5:7c:d5:03:f9:cb:fc:d0:1f:
45:74:2c:d0:8f:7a:6c:81:6e:c5:76:29:a1:9a:a7:
41:40:df:f5:7a:57:11:9d:73:72:4b:89:e0:97:0a:
20:c5:61:df:ac:79:1e:16:77:fc:e5:c7:cc:15:18:
ef:d9:2e:18:7b:5d:ee:08:f8:26:90:09:40:9c:d8:
69:a1:7b:23:da:0e:56:e5:38:ff:ea:fb:55:c0:bd:
6d:ab:89:ae:09:06:9d:ca:05:13:82:c9:83:34:32:
a6:c2:07:43:98:a5:78:21:28:01:2c:67:3d:5b:b7:
73:c3:ac:68:d6:96:b1:29:2b:1c:73:23:8b:8a:a0:
29:45:e2:4d:b2:9b:ca:9a:4a:d1:6f:8c:39:92:7d:
9b:98:2a:84:4e:a5:fc:d4:e0:1a:b0:5c:18:c4:ec:
74:d9:24:a6:d1:83:bf:88:72:c2:05:bf:28:79:43:
a5:ae:85:0c:e4:a7:8c:de:ea:94:22:85:c3:88:e1:
24:d1:bf:b9:89:45:58:2b:a4:6f:d6:d2:d6:09:c9:
52:af:8f:77:5d:79:93:f8:6d:0e:45:e6:01:ba:bc:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F6:00:08:F5:65:4A:CC:26:01:16:A8:CD:C5:D7:CA:EF:64:33:E5
X509v3 Authority Key Identifier:
keyid:DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b6:63:ca:f4:eb:cf:60:5c:26:46:f6:dc:72:87:36:08:18:
88:2f:10:d7:be:c4:31:5c:ec:4d:62:f2:f4:e6:f9:b8:6e:53:
a4:d7:6d:42:bd:31:0b:91:78:13:53:d3:0f:32:bc:4b:92:15:
25:2b:80:bf:04:df:2e:4f:ae:da:a8:17:7e:33:7a:30:85:94:
0a:6c:14:a4:5f:02:0a:d9:c7:4a:41:9a:31:9d:2e:4e:e5:c5:
4d:6b:80:8d:75:58:77:5f:63:01:dc:b7:68:00:11:49:32:25:
34:d5:2c:90:be:d8:1d:31:bd:94:53:c1:ee:35:a1:d5:f0:b5:
53:48:e8:60:01:74:f2:9a:2f:d2:99:51:65:46:19:a2:fa:25:
23:92:03:73:e6:d5:f1:47:48:08:19:f3:d1:bf:2a:c3:3b:72:
70:a3:dd:8e:c7:92:aa:56:df:23:f2:08:a8:1d:0d:a0:8b:e5:
fc:82:ce:7b:ce:c3:40:b0:0e:4e:36:ad:db:29:e7:33:37:aa:
a6:52:58:07:ff:e7:a1:ee:2d:7e:83:73:ee:54:00:13:d4:a4:
f5:ed:66:ec:49:f6:f1:ed:ba:30:10:f7:a2:1f:cf:ab:46:8c:
c6:2b:bc:8c:bd:a2:be:a1:f5:21:1a:79:6b:5c:cb:70:60:3b:
55:31:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:31:24 2026 by rpki-client