Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: 06atfHuSmJlOtJpzEk6MOn/Cvuwg6IG7eaqPuucURfk=
Subject key identifier: 3D:08:FA:B6:7E:F4:F0:03:E2:76:2C:A2:6C:FB:D6:DF:30:AC:26:D3
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 01A03FE0811A3B4008948D71AF82D661697A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: 0494
Signing time: Wed 26 Aug 2026 21:01:12 +0000
Manifest this update: Wed 26 Aug 2026 21:01:12 +0000
Manifest next update: Thu 27 Aug 2026 21:01:12 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: 5x86N5xCt8FGUEQjVA/uaE46Byly55LoIKnm5l80Pt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:81:1a:3b:40:08:94:8d:71:af:82:d6:61:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Aug 26 21:01:12 2026 GMT
Not After : Aug 27 21:01:12 2026 GMT
Subject: CN=3d08fab67ef4f003e2762ca26cfbd6df30ac26d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b0:60:fe:ce:09:f9:a5:f2:d7:42:d3:30:af:
78:f5:e9:59:fd:7c:8e:23:4e:57:6d:c3:29:0b:83:
c3:72:fc:c2:07:c5:6d:45:62:25:96:03:52:15:a6:
6c:38:e1:96:a7:10:5f:25:a1:f5:9e:e5:5f:8a:34:
5e:c8:26:4a:4b:f1:d8:70:46:34:00:34:20:7d:c5:
38:e1:8e:93:fb:03:3c:3a:04:06:d2:6a:72:33:7a:
da:96:bd:88:8c:bc:23:c1:f3:6c:92:53:53:fe:cf:
86:be:ab:c6:e2:dc:13:4e:ed:38:95:43:78:93:32:
3b:93:d7:b1:52:e8:c9:3f:3e:8d:e5:3c:42:09:b9:
02:51:a7:7f:b6:e5:55:e7:d1:0f:db:64:1b:87:82:
4e:4d:fe:cf:f0:53:4a:9d:73:dc:6b:a8:a0:6f:65:
e4:2c:92:89:36:c9:3b:b9:f6:fa:03:ba:59:ca:95:
0c:fd:2a:36:41:3a:fc:76:f3:98:9e:d1:58:63:b8:
8f:34:e8:51:db:e8:7a:11:89:d3:ba:e6:a0:57:e7:
dd:51:90:30:9a:f2:80:37:f9:c8:31:5b:56:86:90:
21:8b:33:d9:ab:4d:40:e5:85:58:74:44:d7:96:16:
b1:6b:de:cb:a3:28:e5:ae:98:2e:95:11:2f:4c:dd:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:FA:B6:7E:F4:F0:03:E2:76:2C:A2:6C:FB:D6:DF:30:AC:26:D3
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:0e:f8:e7:94:0f:b6:c9:0c:10:2a:de:59:c1:94:93:5d:
0e:1f:ec:c6:4e:00:dd:c5:d5:1c:de:02:f2:7d:da:a2:bb:d7:
f1:73:c2:2f:77:1a:f1:29:79:8b:d9:55:3e:c9:f8:74:ee:f1:
37:dc:b7:6e:dc:82:a6:1b:d7:1f:14:17:a5:2a:5b:d2:79:f1:
2a:47:6b:24:0c:b7:a4:f8:84:70:20:22:a8:e8:a5:40:cd:a7:
63:92:22:03:ab:73:ca:ee:3f:1c:bc:0b:e6:d2:1e:a5:b3:b2:
ee:4c:5a:d7:46:fc:23:81:dc:d1:e7:bc:3a:6e:5f:fd:41:50:
b3:7d:5c:14:ce:26:98:01:ff:e9:48:fa:51:ec:59:9e:db:a1:
15:12:ff:3d:ce:7c:d0:02:94:01:0c:8e:41:a3:df:bb:a9:05:
9e:02:88:e2:ec:bd:90:ea:c4:9a:0e:11:da:06:85:d2:9d:9a:
5d:5d:fd:ec:88:28:ac:f9:c4:61:5c:71:e2:1b:09:6a:4d:3f:
e4:7e:75:c9:1b:5e:02:ef:4d:c8:ca:98:2b:e9:bb:28:3b:29:
fb:e9:d5:6e:b3:96:cb:20:0e:b0:e8:17:c5:a4:59:41:c5:d9:
1a:49:18:43:a2:3b:0b:9b:8d:ad:5c:88:2f:99:d8:3b:8a:f6:
c1:17:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:39 2026 by rpki-client