Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: jIrPDC1e9aGGgZBqmDqG/r/oqtGktiRkSuwyidV7KN4=
Subject key identifier: 2C:65:10:23:45:77:C0:5E:B9:3A:11:62:86:26:8D:FF:5B:C0:AC:60
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 01A0DE05F466C8A3AE0E068D0816EC10A896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 0698
Signing time: Sat 26 Sep 2026 14:02:07 +0000
Manifest this update: Sat 26 Sep 2026 14:02:07 +0000
Manifest next update: Sun 27 Sep 2026 14:02:07 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: 9sOZh4jtzJweJLQ/zzLT9UrnrWayD4tvT4zjFziiw+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:f4:66:c8:a3:ae:0e:06:8d:08:16:ec:10:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Sep 26 14:02:07 2026 GMT
Not After : Sep 27 14:02:07 2026 GMT
Subject: CN=2c6510234577c05eb93a116286268dff5bc0ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:76:f9:ef:1d:b5:34:56:48:25:ce:72:ae:
97:11:cc:f3:41:a5:ab:9f:28:88:0a:1d:67:3f:7d:
0e:c8:3d:9a:31:fb:f8:37:38:5c:4c:49:40:c8:1f:
85:91:d8:3e:01:b0:5e:1f:64:eb:58:ae:14:6f:1a:
cf:60:3e:d7:1d:e9:98:12:26:34:1e:d3:b9:b5:b6:
5d:25:5e:3c:12:af:6b:11:7e:7f:74:a6:69:69:e7:
08:7a:07:bd:38:82:ea:46:53:36:28:59:5a:2b:72:
bf:4e:b1:b8:60:c7:ea:b5:2d:2f:69:76:5b:b5:90:
a0:b6:65:a4:5f:69:52:5f:b1:82:87:50:d2:ef:f2:
e7:79:00:54:ab:88:06:9e:f8:7b:f5:60:8f:b0:70:
1c:77:ec:79:1d:07:2a:98:84:bc:89:96:94:19:03:
02:53:9e:52:9b:65:fb:80:51:62:28:b0:89:3d:fb:
d1:ae:08:ab:49:58:65:89:52:a3:ae:1f:d7:82:45:
c2:cf:57:05:06:34:b9:53:0f:8e:b9:53:65:1b:11:
50:51:cc:97:a6:5f:35:56:f3:28:41:5f:6c:9e:41:
19:d7:95:ff:09:95:9c:67:57:78:3e:58:e4:84:f6:
c7:96:7f:9f:42:94:7d:68:a0:97:21:0d:b5:6b:e2:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:65:10:23:45:77:C0:5E:B9:3A:11:62:86:26:8D:FF:5B:C0:AC:60
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:70:1e:fc:04:fe:4e:e8:d1:a8:6e:8b:4e:7d:27:5a:0f:92:
d4:ec:55:b2:0b:42:87:3a:12:37:44:dc:9b:aa:0a:ca:eb:5c:
f5:44:ba:6a:df:e1:42:b3:68:94:c9:57:5c:58:e7:e9:a1:29:
67:56:a3:7a:b2:d9:8e:00:6b:1b:98:94:20:b5:fd:07:5a:04:
a0:4e:49:84:c0:bb:bf:eb:de:a1:2f:18:1a:0b:7a:88:57:5d:
5c:2f:bc:c2:1c:5c:da:7f:d4:40:6e:4b:2e:69:a3:34:b5:dc:
09:16:8b:37:91:84:ea:ad:44:13:e2:c2:63:40:ef:d4:76:95:
c6:06:05:88:6c:b8:ab:f4:b7:08:e9:08:98:bd:03:e0:4d:d8:
0b:fc:7d:6d:9d:26:01:0f:3e:5b:68:cf:93:b7:47:24:72:66:
db:5b:42:fa:95:3e:93:80:2e:07:90:7c:a4:f3:ac:82:b6:68:
71:f8:81:56:46:31:2e:cc:b3:03:dc:53:4f:1c:bd:1c:cd:2c:
00:1c:46:e1:43:9e:21:5b:6a:a6:d5:29:35:7c:66:c9:e9:64:
f6:e5:72:5a:f1:5e:f4:95:b2:bf:1a:a5:f4:ee:84:1a:5f:ac:
73:2e:5a:ff:3c:8b:07:a5:fa:51:65:2a:dd:fd:ee:de:29:45:
51:d8:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:46:22 2026 by rpki-client