Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: tB9UhtFJXHNG2/MjKYa4OeB9HkBj+w/UveXLvZG2jF8=
Subject key identifier: D7:26:35:47:47:BC:46:C3:54:57:43:34:2A:75:7D:A9:36:8A:82:81
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 01A160E96AA6D715386AD8475E6AB94CB89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 1AB2
Signing time: Thu 22 Oct 2026 00:01:12 +0000
Manifest this update: Thu 22 Oct 2026 00:01:12 +0000
Manifest next update: Fri 23 Oct 2026 00:01:12 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: haJGopaVgcphubPS1b5QvZsZsoauJqL7dHQyTSgU1es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:6a:a6:d7:15:38:6a:d8:47:5e:6a:b9:4c:b8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Oct 22 00:01:12 2026 GMT
Not After : Oct 23 00:01:12 2026 GMT
Subject: CN=d726354747bc46c3545743342a757da9368a8281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:f9:d4:84:96:b8:8b:00:f0:07:0e:9c:47:
57:43:46:dd:21:26:66:ff:f6:c7:03:eb:42:98:f3:
51:57:96:bc:05:99:1a:1e:f7:6d:60:43:33:77:45:
5f:71:5e:aa:44:5e:82:8f:eb:c4:58:5a:e6:88:0a:
39:01:b8:1d:f7:46:4e:5d:6c:bc:88:32:31:72:7c:
51:ae:f5:7a:23:7b:54:7f:e1:30:02:e2:8f:4c:e9:
09:12:8d:f4:ce:dc:26:5a:a0:4a:ca:a3:be:8b:51:
6c:d2:e5:20:2a:48:ea:64:28:3a:5f:52:5a:55:82:
d9:a6:d5:62:45:dd:62:33:99:cc:c3:f4:49:e5:c1:
12:6f:3a:9a:f0:e5:9c:ee:dd:bc:d4:6b:e3:4a:77:
86:d8:14:b5:d9:26:a1:9c:09:df:97:91:a7:db:c5:
d8:1d:fd:fd:53:cf:0b:1a:a4:c4:69:63:51:34:86:
51:63:c3:26:fd:73:a3:b3:b8:41:c6:ea:32:9b:86:
2e:80:ff:33:df:0f:d0:cf:b9:4b:ae:89:7b:00:b8:
fb:a8:f4:66:1c:43:13:ce:87:dd:cf:8b:01:dc:d3:
bd:84:d2:8d:79:ca:6e:78:56:c3:62:4e:36:e5:82:
b6:4f:15:cc:fc:a5:aa:61:28:60:c3:d7:37:5a:cc:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:35:47:47:BC:46:C3:54:57:43:34:2A:75:7D:A9:36:8A:82:81
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9a:6b:1f:86:ca:d9:d0:33:20:6c:05:f1:dc:f2:36:86:0f:
33:d8:97:64:34:fa:74:ef:fc:ed:38:b0:b0:41:cd:f8:1d:c1:
27:99:30:2e:51:1e:cd:56:1f:89:5a:6d:05:af:36:33:cb:63:
d4:c4:01:95:38:0f:eb:12:c3:7b:93:3a:7c:6d:57:e6:cf:87:
e0:9b:43:1b:f4:d0:9c:6d:5a:7e:a2:78:c2:6b:0f:d3:90:e3:
fe:7a:a2:cf:ce:7c:9c:0b:4b:0e:c8:fc:ed:5d:6c:d6:72:40:
c5:b7:36:b4:09:c7:5c:47:a6:08:61:2f:e6:ff:68:07:e7:21:
83:ea:31:2f:2d:75:a4:2b:67:6b:1b:c9:4a:1f:d1:d8:4b:0a:
dd:21:26:99:b0:06:64:1c:c7:99:bd:a1:bd:b6:7e:66:6e:6a:
62:7b:5c:47:fd:9a:06:b1:9e:17:1a:04:75:e3:eb:34:61:97:
6d:a0:a9:4a:45:11:58:51:b3:99:bf:c7:1f:bb:d1:82:46:21:
19:da:84:ce:13:70:28:ab:0f:6d:df:d1:3a:a5:ab:cf:56:01:
9e:81:0a:8e:6a:e4:ae:26:81:f0:4a:56:7d:60:26:de:ad:36:
e6:bd:17:37:34:82:47:53:13:50:c6:d0:19:b8:9d:1c:c4:2e:
96:a7:86:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:55:30 2026 by rpki-client