Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: 7860QqHNPX97dfpEeSMuibjlNmJXdeL1KaysD4zK/qA=
Subject key identifier: 0B:2D:C9:58:66:72:0D:4C:B8:F7:64:66:B8:50:20:30:42:0C:4D:F8
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 01A13E95032B0B99F15BF8C72F46B8DA6037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 08E6
Signing time: Thu 15 Oct 2026 08:01:55 +0000
Manifest this update: Thu 15 Oct 2026 08:01:55 +0000
Manifest next update: Fri 16 Oct 2026 08:01:55 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: V8X8UAKGCDYMWZWIIlmBAoVZRTvyX7zB6B9bfouuUoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:03:2b:0b:99:f1:5b:f8:c7:2f:46:b8:da:60:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Oct 15 08:01:55 2026 GMT
Not After : Oct 16 08:01:55 2026 GMT
Subject: CN=0b2dc95866720d4cb8f76466b8502030420c4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:33:48:89:6a:8a:ae:a3:3a:5a:2f:6d:ee:
54:34:98:a3:99:b9:2c:24:ca:98:0b:07:b6:01:3a:
24:78:c0:68:19:e4:59:f6:52:a1:ff:87:45:5f:77:
59:86:a3:37:79:87:c1:86:dc:a1:02:d3:34:06:01:
78:ec:e4:c3:b4:b2:38:b3:d7:c7:26:3e:64:3d:77:
a2:c3:f8:30:5b:c6:2f:09:a3:a9:b9:d8:c2:00:98:
bc:f6:2b:8b:81:70:bf:6b:73:52:a7:b9:c0:01:20:
5d:5e:59:27:19:5b:ce:cf:3a:83:57:c6:8f:c7:54:
5a:0b:1e:ed:1b:93:42:e0:a6:54:f6:a0:4f:de:45:
2c:fe:38:15:22:52:55:bf:0f:9b:f9:ce:77:02:4f:
97:f2:84:5e:86:01:6b:ed:d5:63:4e:d3:de:de:a0:
9c:8c:2b:66:36:41:24:61:31:1e:fb:83:04:ef:78:
fc:3b:77:dd:f9:23:96:36:01:88:29:14:9b:a8:f5:
b2:69:21:9a:5f:36:10:7f:73:b8:8d:c6:67:60:e4:
d0:65:af:cd:1e:75:29:a6:a1:0a:bc:1f:81:ad:18:
82:23:77:b0:63:1a:64:99:8a:8a:83:80:25:aa:12:
86:18:d3:9f:2c:95:23:d4:ed:32:2b:a3:25:43:01:
74:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2D:C9:58:66:72:0D:4C:B8:F7:64:66:B8:50:20:30:42:0C:4D:F8
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:93:0a:5c:39:a6:ac:04:2b:69:1d:71:80:e6:fa:06:0c:f3:
48:a5:f7:80:e2:c0:fb:b2:91:40:89:14:97:a1:71:99:62:d8:
6c:2d:d1:c5:fd:10:59:87:f8:9f:6a:6a:65:87:87:c0:c8:ee:
50:cf:5c:86:f3:0d:96:79:e3:02:37:a0:86:b8:cf:6f:19:f5:
9f:2c:9e:e4:55:bf:0c:e0:e7:8d:5a:40:5d:12:4a:0d:95:64:
29:1e:b6:ac:b2:f5:99:ed:70:4e:ff:c9:36:1a:a0:0f:fb:74:
ad:34:9f:fd:54:04:1b:d0:4a:96:7f:2a:5b:03:62:b2:c8:cc:
6b:9d:97:81:f1:01:7a:5c:c5:9a:f3:d8:d2:69:3f:50:2e:2b:
80:5b:f8:d4:9f:86:d5:c7:aa:41:99:80:32:52:13:f2:c6:61:
79:04:5f:77:f0:fa:eb:56:67:f5:3d:43:4b:0d:73:52:04:07:
85:24:a8:ac:3e:c6:92:05:fc:3a:92:45:de:0d:40:8f:95:99:
73:89:05:22:22:09:71:e1:66:d6:44:bb:41:c9:25:1b:54:d6:
0b:45:38:c5:41:35:a3:0e:aa:42:1b:e6:20:98:28:7e:e7:e8:
e5:22:25:5a:d0:7e:0d:8d:5b:6e:6e:9d:e2:5a:78:c7:26:42:
3f:a7:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:29 2026 by rpki-client