Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
File: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft (raw, json)
Hash identifier: cRI3RENLeBz2Luwi5erfH3niNFhwCYYS1Du31sXc+IA=
Subject key identifier: 8E:9F:E3:85:06:30:20:2D:68:BF:2A:A8:E0:BC:21:3F:F9:FB:B1:32
Authority key identifier: D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
Certificate issuer: /CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Certificate serial: 01A0010192C8FDB47C42F67D8D51FD646DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
Manifest number: 10E1
Signing time: Fri 14 Aug 2026 16:01:15 +0000
Manifest this update: Fri 14 Aug 2026 16:01:15 +0000
Manifest next update: Sat 15 Aug 2026 16:01:15 +0000
Files and hashes: 1: 2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl (hash: tjf6IreA0IvTxyvqAJLDB4v3Xlv8MjAdKwzEyfmrOAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 16:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:92:c8:fd:b4:7c:42:f6:7d:8d:51:fd:64:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9936635d12d6ce232e1129c8f18cedb836ecdd7
Validity
Not Before: Aug 14 16:01:15 2026 GMT
Not After : Aug 15 16:01:15 2026 GMT
Subject: CN=8e9fe3850630202d68bf2aa8e0bc213ff9fbb132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:ca:a0:d6:ea:4c:0b:d8:f5:fc:59:92:ad:
25:a3:c5:2f:50:2c:c6:12:5b:00:aa:37:72:c5:83:
fa:cc:00:29:a8:8d:af:4b:c5:68:a0:5e:18:eb:e8:
4a:92:0a:7a:29:8f:1b:4a:6a:35:c4:5a:19:43:6d:
3c:fb:48:d0:3c:56:52:e9:37:51:e2:b5:b5:b9:07:
c8:a4:9d:84:df:1b:35:a8:fc:4e:7c:2e:70:e1:0a:
44:aa:b8:e8:35:d5:13:6c:66:b6:a3:e1:11:51:42:
a9:be:38:92:98:3b:cc:0a:58:7a:05:f7:8c:00:6e:
38:f1:8e:d8:21:c7:d7:1d:f5:ce:f5:90:b9:50:67:
0f:df:a7:58:70:b7:b6:14:2f:d7:ab:71:ee:ad:e8:
43:49:49:de:fb:27:9e:9d:2d:ec:23:26:bd:e8:3c:
e6:4c:21:79:21:c5:3d:41:de:18:23:5e:67:4b:c7:
dd:a3:4c:f6:f8:85:95:ee:47:59:db:d8:3a:7a:a5:
72:51:d1:5f:17:8e:1c:0f:f6:ec:cd:a2:59:87:52:
af:b4:44:94:0a:12:e4:47:d0:07:b5:b9:ef:5d:9d:
06:01:62:f5:f1:78:e6:fb:64:09:5c:dd:c6:ce:02:
61:4f:7f:55:d7:95:0c:b9:03:96:4b:19:74:44:76:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9F:E3:85:06:30:20:2D:68:BF:2A:A8:E0:BC:21:3F:F9:FB:B1:32
X509v3 Authority Key Identifier:
keyid:D9:93:66:35:D1:2D:6C:E2:32:E1:12:9C:8F:18:CE:DB:83:6E:CD:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/50b5eb-6dd1-4078-a55f-488ec23dc804/1/2ZNmNdEtbOIy4RKcjxjO24Nuzdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:f2:ac:84:8f:e7:6f:75:e5:4b:db:cc:b2:95:5e:6f:c5:
d1:3f:5c:28:23:71:d2:bb:fc:37:13:df:13:d3:c7:67:82:d8:
5f:a2:50:4f:95:f6:ee:c1:11:f9:d4:72:41:f7:12:b0:5b:77:
66:0f:17:c4:b2:f2:a5:38:e9:f4:b0:8f:05:82:cb:6b:24:e1:
20:2c:af:fd:e6:36:48:9b:c3:da:62:5c:ac:a2:8e:53:2a:05:
a7:0a:97:33:a4:cb:fc:81:0b:62:b9:57:83:f7:49:9f:76:91:
61:cd:2c:5d:1c:21:e4:70:f8:5c:1c:86:af:23:04:39:ad:19:
ad:ce:14:a9:da:7f:89:f2:4e:67:7f:5b:96:14:b5:f7:a3:eb:
da:b1:3a:ac:91:1f:b6:eb:87:94:01:ea:da:50:cf:47:70:02:
27:ff:94:97:fd:ef:2d:63:fd:8b:3d:11:88:02:9f:39:07:d7:
1f:37:0a:ef:b4:23:ff:5e:f8:d9:de:3b:9d:89:dc:12:e5:e7:
da:81:3e:0e:53:b0:a6:27:04:66:a1:40:b2:26:15:8d:5c:9c:
b4:cf:73:6c:58:0b:b1:f7:72:6c:25:01:37:85:5a:39:36:a4:
d6:db:3d:53:eb:2f:f9:af:f3:3f:f6:14:f1:a7:a6:3b:5f:03:
6e:56:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:08:17 2026 by rpki-client