Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: 866ZVFoJMALMAC8JVPC8XISi2CgSFOOiqQStZ99jS+A=
Subject key identifier: 07:2A:17:0D:F8:45:29:F3:1D:2B:34:2B:2B:01:3A:0A:64:A4:DF:69
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 01A0CA47CAF894B5FF6AA364572E7A7923FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0CD2
Signing time: Tue 22 Sep 2026 18:01:37 +0000
Manifest this update: Tue 22 Sep 2026 18:01:37 +0000
Manifest next update: Wed 23 Sep 2026 18:01:37 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: doraeUaS3PEq22U8ZNV6C6B7TH0G8qFmhp7+UB4ljDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ca:f8:94:b5:ff:6a:a3:64:57:2e:7a:79:23:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Sep 22 18:01:37 2026 GMT
Not After : Sep 23 18:01:37 2026 GMT
Subject: CN=072a170df84529f31d2b342b2b013a0a64a4df69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0e:53:5d:ed:bc:76:ff:51:10:19:05:07:2a:
2d:be:0b:27:64:42:8b:ac:5e:d4:c6:b7:43:13:ca:
c4:ec:01:fb:5c:b7:47:a2:59:25:e0:ed:43:bb:ce:
be:9d:ce:1b:1d:1f:7e:04:dc:49:9b:b7:c9:15:32:
c6:99:f9:7c:34:6f:f1:5b:00:10:7e:aa:79:98:c8:
95:10:d4:52:08:91:05:04:01:6a:fb:7d:0e:57:28:
bd:e8:e0:51:45:c5:c0:5f:e2:56:b2:75:bf:02:b8:
ed:db:8f:75:41:1f:27:21:7d:59:3a:1f:29:77:a6:
2f:c7:2c:14:f9:66:df:2b:ab:7d:bb:dc:36:e2:7b:
6c:87:f8:02:39:57:bf:1a:c1:36:87:ed:24:5e:3e:
dc:14:cc:d6:0d:7c:5c:e0:41:d5:1a:74:5e:c5:38:
ab:17:69:af:c5:6b:bd:63:a0:c9:9e:4f:2f:d2:ad:
66:83:ec:bc:1f:f9:22:51:f9:cb:75:db:53:8d:a1:
3f:db:29:6a:a2:68:49:ae:d5:b6:d8:fe:ff:f0:08:
c2:56:ff:c9:44:ec:02:07:e3:d0:c6:4e:93:a4:52:
00:eb:4e:fa:a3:7a:d8:5a:b7:76:28:82:90:7f:20:
d8:3a:96:75:a3:39:fd:26:4e:76:f3:0d:fe:ea:1d:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2A:17:0D:F8:45:29:F3:1D:2B:34:2B:2B:01:3A:0A:64:A4:DF:69
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6d:f0:59:f3:66:9f:80:c7:2d:cf:8b:e3:0e:7d:6e:a1:c5:
00:c2:f4:d7:40:9a:5c:aa:40:fb:ef:b0:9f:36:21:1b:a1:f6:
fd:ef:22:4d:d3:25:7f:ac:19:86:da:8a:52:a9:b0:2f:0a:c0:
cf:59:48:1a:0a:52:70:fc:f8:b4:82:ff:37:8c:14:74:6c:de:
d0:3e:81:fe:94:6e:08:bf:7c:00:12:d2:c8:f5:a3:d4:be:46:
6c:f7:a0:fa:f1:c7:72:4f:21:09:c4:75:3a:df:61:ad:f9:87:
74:98:8a:45:87:c6:c3:8c:9d:01:06:6d:c9:40:02:93:fc:c9:
06:0b:35:39:9a:23:52:bd:ce:33:aa:a9:8c:70:97:35:f7:cf:
fa:97:e2:dd:38:4d:ad:c7:64:c7:ec:2f:8d:77:49:f6:e5:ad:
d2:8b:ca:7b:11:b2:b8:dc:48:0b:51:13:39:e1:e3:3e:cc:06:
ef:da:32:70:65:91:b1:ea:e3:26:a9:04:aa:4a:bc:9a:b4:7b:
d9:ff:92:66:e9:b3:90:14:45:83:c9:73:6e:b4:e9:59:c3:57:
6f:d4:49:63:54:dc:28:83:9f:8b:36:d6:61:8b:27:78:6b:8c:
4b:d9:63:3c:73:3e:94:bd:69:4d:e5:f9:cc:4c:f7:c9:a3:6b:
f8:e5:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:30 2026 by rpki-client