Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
File: 2bN6OM6IfTdjYEau84ehwjMVLkE.mft (raw, json)
Hash identifier: o2CmbwIoYBpOrp3BWNcL4hK7W3iPf6l2SQgzMe6Y++Y=
Subject key identifier: 9D:9C:CC:A2:93:C3:3E:BA:4C:70:3A:06:74:28:02:03:5A:DC:DA:2A
Authority key identifier: D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
Certificate issuer: /CN=d9b37a38ce887d37636046aef387a1c233152e41
Certificate serial: 01A00100F3713BDF52458702BB470FF00CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
Manifest number: 0A91
Signing time: Fri 14 Aug 2026 16:00:34 +0000
Manifest this update: Fri 14 Aug 2026 16:00:34 +0000
Manifest next update: Sat 15 Aug 2026 16:00:34 +0000
Files and hashes: 1: 2bN6OM6IfTdjYEau84ehwjMVLkE.crl (hash: xam0nyu1nhW4UobkMkL6BT/g0VoTHBnELTqtgzLK/XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f3:71:3b:df:52:45:87:02:bb:47:0f:f0:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9b37a38ce887d37636046aef387a1c233152e41
Validity
Not Before: Aug 14 16:00:34 2026 GMT
Not After : Aug 15 16:00:34 2026 GMT
Subject: CN=9d9ccca293c33eba4c703a06742802035adcda2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:f2:8f:aa:94:79:39:15:4a:6c:e1:7d:14:
4f:6b:e1:3e:8a:a0:68:22:b4:8a:64:47:62:f9:5b:
da:f5:1f:8f:0c:0b:ff:1c:64:96:66:1a:3f:51:89:
d3:d1:ee:db:b6:c8:a7:39:43:b8:15:60:68:77:da:
8b:d4:d7:56:d0:87:82:6c:74:48:4a:34:de:8d:c7:
39:75:b6:22:c4:03:ad:29:30:78:e8:45:cb:74:1c:
b1:cd:7b:9e:f1:17:9c:de:94:69:cb:4f:c3:89:14:
46:2a:9b:c1:a9:0e:3a:fe:0f:66:48:0c:73:e1:93:
f0:7d:c9:a8:66:82:27:0c:89:28:05:7f:31:b6:a2:
7b:cc:6f:2e:35:b8:3b:5d:eb:4e:c3:81:a2:f7:89:
6c:f1:0a:50:de:28:7b:86:d8:ba:09:30:27:b4:07:
53:f9:7f:6c:61:a6:b4:fb:9a:3e:85:9c:19:a0:09:
e5:49:39:9b:bb:a1:d1:99:0f:2d:b3:78:94:f1:2d:
8a:e9:97:95:54:79:5f:4f:74:75:e5:bb:fe:f5:f5:
2f:ef:80:ea:89:5e:42:7f:2a:3f:ce:0b:c2:49:63:
67:11:38:04:4d:d2:5d:ed:9c:ae:ff:20:52:20:18:
65:12:12:df:4d:8a:f8:4a:73:fa:e1:55:85:44:be:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:CC:A2:93:C3:3E:BA:4C:70:3A:06:74:28:02:03:5A:DC:DA:2A
X509v3 Authority Key Identifier:
keyid:D9:B3:7A:38:CE:88:7D:37:63:60:46:AE:F3:87:A1:C2:33:15:2E:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2bN6OM6IfTdjYEau84ehwjMVLkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9545f2-fb60-4878-ae58-d6aac613830b/1/2bN6OM6IfTdjYEau84ehwjMVLkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9b:26:ed:c1:bd:37:93:79:08:93:48:80:4a:cc:db:c5:ea:
86:15:ec:75:b9:a4:49:9d:22:aa:ee:fd:d4:32:80:99:21:da:
a5:07:58:f4:7e:82:d1:c6:10:b3:b3:1d:84:78:e5:d7:57:3c:
2a:b5:43:f5:76:9c:25:b5:b8:8d:b9:ad:a0:10:a7:9c:4c:24:
a0:d8:2c:ce:bd:e5:8f:2e:ab:7a:7d:fb:36:5f:48:99:e7:58:
00:03:9d:a5:e3:b4:30:95:8d:69:db:42:71:e2:06:b8:93:21:
a7:be:29:e8:b5:97:ae:74:43:24:fd:4a:cc:a4:40:3e:86:67:
0a:7d:4a:4f:83:00:d6:e4:15:04:0d:cc:44:0e:38:11:46:cc:
63:6b:81:b4:56:87:50:85:85:62:d4:be:a0:ef:1f:61:84:a4:
d9:b5:60:8c:5e:32:5e:b3:58:e7:c5:dd:e4:dc:56:16:a0:04:
2f:36:69:dd:d1:ae:59:bd:4c:96:18:42:6a:e3:e9:3f:61:9c:
08:c2:67:74:1c:5a:b8:61:4f:3f:00:5c:d1:a7:e2:1b:27:5c:
0d:e8:ce:0b:bc:34:d9:67:41:4a:c1:a0:5c:c0:24:93:b0:46:
7c:4c:4d:a5:d3:8c:18:a6:2a:ef:a5:30:a8:6b:b7:62:21:c0:
22:91:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:02 2026 by rpki-client