Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
File: 2g_9vJMxeNehu_mWCOOpXU3uiuY.mft (raw, json)
Hash identifier: waIGzAsIXq2LZkVNkFqNBr4QMYwImA+hlCpTnOSEzj0=
Subject key identifier: 97:BF:79:89:93:97:5C:A0:FF:02:A9:E1:7C:17:88:9E:48:70:A0:EF
Authority key identifier: DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
Certificate issuer: /CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Certificate serial: 01A13C38363B50C03C7635E870D404C4F141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
Manifest number: 0CA9
Signing time: Wed 14 Oct 2026 21:01:19 +0000
Manifest this update: Wed 14 Oct 2026 21:01:19 +0000
Manifest next update: Thu 15 Oct 2026 21:01:19 +0000
Files and hashes: 1: 2g_9vJMxeNehu_mWCOOpXU3uiuY.crl (hash: eiHKU2Ojvx0D5EtR98YRyYaJwThsETkaouq7VRDcycI=)
2: ThOvdREQc5Dq7nLy40rE03SGSUk.roa (hash: mxho8agLJ4KhkMlElJuYDwOZPCukgtCw4yY9P1+N/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:36:3b:50:c0:3c:76:35:e8:70:d4:04:c4:f1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0ffdbc933178d7a1bbf99608e3a95d4dee8ae6
Validity
Not Before: Oct 14 21:01:19 2026 GMT
Not After : Oct 15 21:01:19 2026 GMT
Subject: CN=97bf798993975ca0ff02a9e17c17889e4870a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:c4:56:9e:ea:b2:ac:bc:56:6b:77:90:6a:
97:86:85:00:5c:04:f6:5b:3c:5f:1d:41:e7:0f:2c:
e4:78:10:d0:6f:3c:be:f4:29:09:dd:df:83:be:4d:
d3:67:20:f2:70:d3:dd:fd:75:b1:67:fa:f2:ad:50:
e7:37:c8:df:3c:70:58:cd:d0:69:db:c1:02:9a:8e:
a1:dd:1b:5b:91:3d:09:e4:b1:1c:ac:dc:f2:1c:ea:
90:62:af:2f:ca:c8:e6:3b:8e:a4:63:87:a4:ac:3b:
d5:e9:48:28:43:01:4f:0e:9f:0e:7e:05:e6:eb:3d:
99:98:53:cc:ca:55:44:a9:bd:c7:6f:70:11:db:12:
bd:d3:18:5b:97:d7:a1:4f:8a:34:35:b8:19:f4:2a:
51:05:b7:9c:d7:17:25:7d:2a:e7:66:30:7c:a2:59:
b8:05:aa:d1:36:7d:8c:2e:ea:3f:4d:40:e9:30:20:
72:09:85:e4:ca:15:37:ac:04:13:f9:ba:4f:ae:97:
b1:0f:e7:cf:38:ba:40:fa:7c:07:03:5d:63:f3:99:
a5:ed:59:72:79:ff:60:72:4f:c3:cc:f9:64:d6:a6:
f4:ea:0a:ab:95:06:74:4b:01:d4:43:00:51:91:f5:
7d:af:9b:29:f0:56:17:88:ca:6a:b2:56:2c:48:4f:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:79:89:93:97:5C:A0:FF:02:A9:E1:7C:17:88:9E:48:70:A0:EF
X509v3 Authority Key Identifier:
keyid:DA:0F:FD:BC:93:31:78:D7:A1:BB:F9:96:08:E3:A9:5D:4D:EE:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2g_9vJMxeNehu_mWCOOpXU3uiuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/efbed8-9ff0-4455-a07e-3cad37067405/1/2g_9vJMxeNehu_mWCOOpXU3uiuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:44:cf:74:8d:e9:68:1d:a1:b9:d5:fd:db:42:d1:10:a5:
3b:f6:f5:f3:bd:d3:16:3d:48:0b:d0:64:9b:4e:48:04:25:e1:
f0:a3:81:1a:18:56:2b:95:38:f3:3a:64:8b:01:9d:30:b0:6d:
2b:6c:27:d7:3f:e3:69:6d:52:36:02:7c:0c:87:4d:41:b2:0f:
d7:ed:8d:2e:4d:f8:62:46:fe:2d:fa:e9:72:ee:55:0f:57:f9:
f8:23:cb:85:d5:c9:b2:df:c6:13:bc:7f:17:9c:8a:9f:66:53:
bb:52:25:75:6f:7a:e6:21:5c:73:f9:7f:f0:27:ef:bb:72:11:
35:de:34:26:04:18:f5:42:5a:e6:3f:3a:05:e7:b8:37:a0:c0:
8d:5e:8f:39:9c:95:5d:66:08:37:ca:b2:49:44:60:72:ce:21:
0f:1c:f7:74:2c:ad:ff:59:9e:37:54:08:66:f1:1a:65:7f:12:
a5:b1:74:15:d3:55:ef:d7:7b:d6:f3:5f:60:ce:df:b3:72:19:
d3:31:74:6e:84:28:60:db:c0:03:2d:3a:6d:ff:24:b3:d0:bd:
f7:90:5a:c4:49:96:23:7e:40:7d:8c:05:ef:b1:d6:be:55:60:
79:d1:25:7d:1b:2b:4e:dd:72:f7:d8:ab:3e:39:91:0d:0e:27:
f1:36:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:40 2026 by rpki-client