Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: 5zh6OR4bJHBeEOHsPv5GFX9ESBaKlwKOJvno9cnXLHU=
Subject key identifier: 49:10:7C:75:30:E2:11:58:EC:19:93:68:7B:0F:6B:13:EC:70:C9:EF
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019F8F7EF43B0EB408C8824437F68113C07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0C2F
Signing time: Thu 23 Jul 2026 15:01:29 +0000
Manifest this update: Thu 23 Jul 2026 15:01:29 +0000
Manifest next update: Fri 24 Jul 2026 15:01:29 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: zmQtR3+ox6XzkR3ZCiePcVzG8JPKi32NEhjl7nIq370=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:f4:3b:0e:b4:08:c8:82:44:37:f6:81:13:c0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Jul 23 15:01:29 2026 GMT
Not After : Jul 24 15:01:29 2026 GMT
Subject: CN=49107c7530e21158ec1993687b0f6b13ec70c9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:0d:6c:1f:5e:b0:07:6b:07:75:cc:3f:76:
26:85:9c:80:bf:eb:50:46:4f:4a:5f:77:4b:89:51:
e2:de:cd:99:3e:d1:0d:9f:31:e2:86:19:85:5e:ee:
89:a7:65:ac:8e:c3:c6:99:a2:6f:4e:48:46:85:c2:
5a:4c:72:81:39:01:87:a6:4a:25:af:af:10:3f:63:
ec:15:ba:fc:8b:c7:50:66:1a:55:68:97:b6:6f:ec:
c5:18:27:bd:21:3f:b9:d1:28:b7:ff:d9:7e:12:f0:
47:6b:6e:88:20:70:a6:d9:ba:83:e8:6b:45:fe:bc:
3d:25:11:2a:0a:1d:0e:e6:63:e9:60:88:95:14:66:
6e:c5:0e:0e:65:78:e9:8d:c0:31:91:ce:7d:e4:9d:
cf:4d:43:7a:40:48:7c:fa:89:b1:e3:d7:66:af:a5:
03:29:97:ed:9e:f4:c1:24:08:6d:70:fc:b9:70:29:
47:01:92:46:2d:d1:44:80:76:67:e7:e1:cd:8a:de:
a6:7d:fb:5f:25:74:54:97:1b:d6:25:d4:6f:25:98:
4d:92:6d:30:93:a7:00:e0:58:98:90:c0:af:ad:b6:
98:f0:32:13:d7:28:87:34:8f:53:e4:2f:a8:55:f8:
1e:77:3f:cc:23:f9:ee:5c:58:08:17:3b:cf:1a:80:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:10:7C:75:30:E2:11:58:EC:19:93:68:7B:0F:6B:13:EC:70:C9:EF
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:22:9b:12:8a:79:6b:c3:b5:bc:6f:be:2b:fc:98:fc:68:5c:
2f:73:41:43:33:71:28:7f:8f:f5:64:73:49:a1:c0:44:87:bc:
83:7c:37:9e:53:0f:03:23:e2:63:07:7c:43:bc:2b:87:89:71:
a0:84:d4:1f:a7:3d:a0:95:88:1b:5e:6d:7e:1f:89:c8:46:40:
a3:95:a0:63:8f:a7:af:ba:88:4d:eb:3a:46:89:bb:83:ce:19:
44:c6:69:44:90:d4:85:5f:26:cd:d5:c1:5e:8e:bd:ed:98:88:
80:fd:26:20:80:98:64:3c:9b:25:f7:e5:2c:e6:e6:bb:34:53:
83:be:e1:57:57:6c:00:3e:fc:64:9c:44:04:7c:ca:93:99:da:
d9:ab:60:f9:e8:26:9e:de:b7:5d:16:9d:00:5d:07:7e:b6:a4:
5c:0b:9b:77:a8:75:83:6e:6f:f2:bd:25:d7:37:2e:f6:77:89:
9f:b6:f4:c6:fb:a5:89:df:a6:7c:17:6a:36:75:3a:a0:ad:c6:
60:1c:09:37:dd:95:61:ad:0d:10:c0:b3:ac:be:ce:3c:81:d9:
2a:a8:39:1b:f6:53:84:05:28:ea:35:eb:e9:28:43:84:f5:a4:
47:da:0f:cd:ca:09:43:98:4a:eb:4d:e3:c9:a5:04:c4:a3:9c:
ba:6a:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:31 2026 by rpki-client