Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
File: 2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft (raw, json)
Hash identifier: S0JOBwhzU4ci7MkmneDy1UX8CA0DRuEHHyIPqwx/+p0=
Subject key identifier: D8:9A:FE:7A:C2:F3:16:80:BF:6D:4A:16:B1:29:41:52:6C:28:E3:BB
Authority key identifier: D8:D9:9E:A0:17:67:D4:AA:DC:42:F3:3E:D8:DC:3B:68:89:35:23:4B
Certificate issuer: /CN=d8d99ea01767d4aadc42f33ed8dc3b688935234b
Certificate serial: 01A0C96B35707C3369BC6E467429E4876FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 14:00:41 +0000
Manifest this update: Tue 22 Sep 2026 14:00:41 +0000
Manifest next update: Wed 23 Sep 2026 14:00:41 +0000
Files and hashes: 1: 2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl (hash: 6v1ooNWOAzZHcncqej4PgJKN9cgg2n/QJC8SJLGB/KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:35:70:7c:33:69:bc:6e:46:74:29:e4:87:6f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d99ea01767d4aadc42f33ed8dc3b688935234b
Validity
Not Before: Sep 22 14:00:41 2026 GMT
Not After : Sep 23 14:00:41 2026 GMT
Subject: CN=d89afe7ac2f31680bf6d4a16b12941526c28e3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:4d:83:9b:32:46:87:f2:8d:ca:fc:e3:f8:
1e:88:25:d5:eb:0a:d4:88:84:f4:f9:80:3c:77:9c:
2e:f6:d2:37:7a:ca:7a:19:84:64:1a:e0:ae:76:91:
42:f7:99:a1:6b:73:65:ee:02:b1:63:2e:3e:42:55:
fb:6a:41:c0:20:90:d9:41:b7:c2:bd:c7:4c:84:93:
b7:41:f0:7a:89:c8:9c:77:8d:81:7f:8e:de:be:6b:
c1:28:82:08:93:8b:1a:d3:4a:5e:81:58:d9:13:22:
69:8c:cc:ac:25:5f:0c:95:d5:8c:8d:92:f7:04:f0:
72:37:e6:56:d1:0e:33:75:01:82:7f:cf:03:3e:4a:
2e:9f:8a:f9:2d:6e:b0:96:ea:73:15:1c:7a:18:1d:
fe:30:f0:0a:2c:66:08:01:70:ff:35:e6:dd:81:38:
d4:85:0e:ed:8c:48:6d:21:a4:6a:0c:ec:e2:ef:a4:
b6:04:cf:78:7d:fc:b1:d1:da:9a:31:c8:1c:31:ce:
45:be:81:f2:53:2c:46:39:2d:a7:28:61:53:82:1a:
05:8b:6c:b8:2f:a0:27:1e:4d:ba:72:e6:e4:ef:79:
34:94:aa:2a:e2:a1:ed:7b:b1:d3:0f:f2:66:f1:d7:
64:57:43:e7:04:9e:ad:e7:b0:75:d9:bb:dc:bc:91:
30:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:FE:7A:C2:F3:16:80:BF:6D:4A:16:B1:29:41:52:6C:28:E3:BB
X509v3 Authority Key Identifier:
keyid:D8:D9:9E:A0:17:67:D4:AA:DC:42:F3:3E:D8:DC:3B:68:89:35:23:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:75:3f:69:f8:a4:9d:bd:7c:d2:d9:ef:75:14:32:6b:f8:05:
6d:1a:b8:27:bf:1d:dd:65:a7:00:0e:2e:57:c4:b3:0a:76:78:
63:34:7e:e1:5c:e2:9a:eb:0f:73:c1:af:9c:fc:0c:c0:c7:76:
8b:08:12:10:90:2d:e1:cf:d4:20:46:ca:5e:50:f1:5a:3b:85:
bb:28:54:80:c0:0b:bc:af:ad:d2:59:c9:54:3d:55:f1:9f:b4:
4c:50:6a:d6:e1:b1:36:2b:c6:66:ca:99:3e:60:aa:d3:49:78:
01:09:38:50:a5:94:0f:09:17:3e:52:f6:99:a4:93:9b:6e:1e:
ec:c2:c2:31:5b:6d:23:ef:09:d2:23:f9:04:aa:46:20:51:50:
e4:ee:6e:70:4b:14:eb:11:eb:9b:d4:a9:8b:0d:a1:ad:c2:ae:
28:53:4e:a8:33:3d:7d:79:81:07:34:d5:47:e5:09:31:88:18:
04:d4:56:0e:73:04:c3:67:1b:0a:69:88:f9:41:4d:77:ff:93:
a1:3e:ea:1f:25:cc:1a:2c:3f:47:42:4e:07:10:e9:25:2c:1d:
26:ee:ef:75:27:3f:3f:35:48:34:8a:27:88:85:59:61:d4:ce:
e6:48:7c:6a:03:e6:67:34:5d:28:fd:bc:a2:d3:ab:ab:ad:47:
19:3b:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:47:53 2026 by rpki-client