Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: xvthNz49tc1/KkFHCk6XcefVf8mSbajy2geQyKnV/K8=
Subject key identifier: E3:18:66:43:A8:E1:EC:7B:7D:D3:24:CD:99:6D:99:36:FB:FE:3E:C5
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 01A0CBC8042D4469243CC8E5212499D4FFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0D4A
Signing time: Wed 23 Sep 2026 01:01:18 +0000
Manifest this update: Wed 23 Sep 2026 01:01:18 +0000
Manifest next update: Thu 24 Sep 2026 01:01:18 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: gD2PsGBECnIAjhOTeaUufw/v4sPDPf82xfZtcgneE3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:04:2d:44:69:24:3c:c8:e5:21:24:99:d4:ff:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Sep 23 01:01:18 2026 GMT
Not After : Sep 24 01:01:18 2026 GMT
Subject: CN=e3186643a8e1ec7b7dd324cd996d9936fbfe3ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:43:f2:d3:fc:c0:70:32:21:e5:6d:ae:5b:
c1:c0:07:4c:fa:6d:2e:c4:eb:d3:bd:7a:57:a2:3c:
e4:8f:8e:19:f4:3b:5f:10:c2:1e:c8:3d:56:e2:0f:
da:62:58:c7:b9:2a:3a:8c:23:56:f9:ff:cf:2b:c6:
2f:1d:fd:e3:40:92:ed:1e:c2:3a:11:96:a5:34:ee:
2d:09:89:9f:d9:2b:2d:32:89:aa:e5:e9:e6:a9:fb:
39:ea:70:fa:8c:25:e2:8b:d9:ec:11:97:88:a0:23:
71:15:9b:5c:ee:ba:23:9f:96:a5:f4:00:15:1c:cc:
20:2c:9b:59:ac:91:70:3a:9c:58:87:fd:49:f0:91:
39:6a:d7:77:7a:23:fa:1e:0b:7e:61:e7:88:fb:62:
bc:01:72:1d:94:6c:06:aa:78:ce:e3:6a:64:3a:dd:
4f:af:8f:48:74:0c:f1:3f:30:4a:25:6f:3c:b2:33:
cf:6a:3b:8f:e6:7f:02:92:2d:1f:02:63:21:c5:52:
9e:7c:f2:44:13:94:b7:54:8c:9a:07:e8:34:cf:2a:
79:3f:ca:f9:a3:80:b9:5f:3c:5d:7c:4b:53:99:09:
b9:57:fd:57:18:39:64:b8:bb:ae:da:6d:e8:0a:66:
8a:d8:23:2e:e0:18:b8:9f:53:33:76:96:bb:c4:1f:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:66:43:A8:E1:EC:7B:7D:D3:24:CD:99:6D:99:36:FB:FE:3E:C5
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:05:37:c2:a2:30:52:0e:68:6b:dd:dc:9a:55:ea:92:fb:b9:
e9:26:46:f8:9e:80:15:1f:83:dd:43:d6:74:58:98:a3:36:60:
a5:f5:f7:7e:0c:e7:fb:18:c1:89:77:3b:f1:01:e7:8e:a9:bb:
9e:10:34:78:db:76:aa:72:19:6c:df:a4:3e:e9:65:0e:b3:01:
61:16:e1:11:e2:9a:ca:87:10:f5:52:82:7c:1c:90:ad:b8:5a:
fc:2a:b5:1b:48:96:87:26:a5:83:7e:eb:d8:88:62:c2:f3:cb:
25:c5:24:89:3e:06:3b:b1:a7:90:8f:61:d4:48:35:01:b8:9d:
c9:ff:4d:32:db:d3:51:67:8e:f8:b7:bb:b6:9f:f1:a1:20:fa:
c7:86:02:e9:c6:a8:39:45:62:0d:1d:16:d5:84:9b:56:7c:a5:
ac:d6:b2:2c:73:e5:46:a0:04:c5:86:d2:1b:ae:0e:36:7d:69:
97:e6:39:58:e8:8e:ad:38:da:9c:37:65:b6:7a:e6:61:3e:61:
8d:6a:e1:e5:73:b4:a5:5a:af:d7:07:c8:6d:11:b5:66:31:a5:
8f:1d:cf:d0:d8:1b:c2:f6:4c:1d:fa:55:b7:81:aa:85:c3:92:
55:0f:5e:f1:f0:6b:34:79:26:56:ef:78:d6:52:4a:6b:78:46:
bc:fe:94:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:17 2026 by rpki-client