Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: bObaSoT/wjaBCUk21FLZNJeHmpCqmClLyJal84fCO6I=
Subject key identifier: 23:9E:26:2E:76:54:B7:C0:F3:56:F4:D0:5D:C4:F0:43:BB:BF:2D:A4
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 01A1419570D90041B338F576B72BB4ACF088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0B37
Signing time: Thu 15 Oct 2026 22:01:15 +0000
Manifest this update: Thu 15 Oct 2026 22:01:15 +0000
Manifest next update: Fri 16 Oct 2026 22:01:15 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: 5lmVOCGMt1cxYaq+QPOuxQ96Iu8jQ5XU7gWRWQ6K9PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:70:d9:00:41:b3:38:f5:76:b7:2b:b4:ac:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Oct 15 22:01:15 2026 GMT
Not After : Oct 16 22:01:15 2026 GMT
Subject: CN=239e262e7654b7c0f356f4d05dc4f043bbbf2da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0d:8e:4f:2f:2e:6e:6b:12:a2:bb:a5:51:83:
95:23:57:79:d7:bb:00:83:6c:7a:11:bc:7e:10:53:
59:98:c4:5c:48:d3:b1:3e:7d:83:34:45:fe:a9:56:
ee:cc:db:60:2f:ee:ee:b2:e0:3d:b0:4c:d0:1e:91:
0c:05:be:a9:0c:91:63:f1:c6:2d:e9:03:72:ad:ec:
bf:d7:65:d6:1b:97:02:b2:79:f5:7f:4a:4d:52:b5:
14:8e:c3:af:97:91:95:40:6e:1b:87:14:64:ec:c6:
a5:74:7a:56:76:05:f4:29:76:01:32:1d:a0:3f:2e:
35:90:45:9b:17:65:10:1d:7b:ac:59:13:b9:f3:00:
48:7c:97:85:a4:5e:5f:fe:44:72:74:08:ab:84:b4:
31:d0:1d:c1:45:88:74:65:1a:8c:40:8a:3d:e9:4b:
85:33:4a:67:de:af:75:fc:16:a2:af:0c:59:e6:45:
55:21:75:90:42:c7:b0:58:d3:32:51:68:95:00:00:
d2:9d:ca:94:c1:f2:f0:e7:ed:ac:25:c9:b6:dc:53:
ab:1a:60:fb:30:9f:f6:44:03:19:97:ad:f3:ab:3b:
5b:12:47:eb:69:e3:2c:bd:14:c5:1e:3e:ec:72:db:
4c:fb:14:f9:ad:91:f7:1c:38:8e:b0:3f:e0:d0:28:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:26:2E:76:54:B7:C0:F3:56:F4:D0:5D:C4:F0:43:BB:BF:2D:A4
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ce:54:56:39:d5:bd:5f:8e:34:44:be:1e:a7:57:62:40:d8:
28:90:be:b7:70:5f:74:99:ca:3c:71:f0:f8:fb:aa:f8:11:f8:
8f:58:af:d4:64:91:64:05:af:45:02:f0:f0:0d:d7:24:0d:ad:
46:91:40:f6:31:dd:64:26:b9:f4:91:51:a0:be:f9:6a:e0:23:
9a:30:a6:19:76:a2:c1:8c:58:cd:df:34:fc:39:44:9a:6f:64:
df:8f:e5:0c:55:94:fc:82:d7:7f:42:c9:99:ba:64:ab:92:3c:
ce:b8:37:05:19:e2:3b:0c:2f:ad:2a:c4:67:9b:45:8c:dc:35:
d8:52:4b:02:77:5b:fa:93:16:f0:37:27:6f:20:fa:d7:da:d6:
49:6c:be:6c:e4:ca:e0:5e:05:95:57:a4:3e:26:52:44:a6:e3:
81:41:49:a6:46:3f:d7:e1:7b:07:e5:57:ee:99:c1:84:04:9a:
91:9f:08:13:f1:dd:6a:08:69:9c:a8:3c:2e:72:5f:ab:e7:1c:
12:77:83:9b:26:6e:88:e2:f1:32:2d:81:5e:45:98:f2:ec:3a:
a4:9c:30:7b:02:44:4d:6a:9b:0f:7b:e7:3f:b7:92:b1:90:80:
f1:6b:60:51:06:21:ca:bc:57:f1:e1:52:2b:02:f3:c5:36:c3:
9a:e6:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:07:37 2026 by rpki-client