Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
File: 2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft (raw, json)
Hash identifier: 5SXa9PA+3YtYKcO1gGFraODpOJBaj1/IqpHx43ss6KI=
Subject key identifier: B6:2C:AA:72:36:9B:CD:D9:8D:CA:3D:FB:1A:88:A6:61:4E:69:0C:DD
Authority key identifier: DA:0B:3B:7A:7F:85:60:41:22:FF:D6:32:E2:97:53:65:70:31:C4:2B
Certificate issuer: /CN=da0b3b7a7f85604122ffd632e29753657031c42b
Certificate serial: 01A0401773B245B799A0AB5F48F43FE596EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 22:01:13 +0000
Manifest this update: Wed 26 Aug 2026 22:01:13 +0000
Manifest next update: Thu 27 Aug 2026 22:01:13 +0000
Files and hashes: 1: 2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl (hash: IQ3esKQ4utjCXp+SOdStVyriiVP0/4Tp99vIPlZ7AB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:73:b2:45:b7:99:a0:ab:5f:48:f4:3f:e5:96:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0b3b7a7f85604122ffd632e29753657031c42b
Validity
Not Before: Aug 26 22:01:13 2026 GMT
Not After : Aug 27 22:01:13 2026 GMT
Subject: CN=b62caa72369bcdd98dca3dfb1a88a6614e690cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fb:51:6e:b5:68:d1:2a:71:b1:aa:85:f7:c7:
e2:65:e3:02:2c:84:62:1f:ec:98:e3:53:83:0a:20:
3b:dd:ac:1a:75:60:56:94:51:1d:96:b7:60:75:2d:
2d:6c:1c:71:35:c1:2a:e4:ff:cb:54:e9:60:0a:0e:
34:b3:63:bd:58:cd:1b:79:21:b0:5a:e8:97:01:d5:
22:57:4d:7b:e5:80:26:4b:d8:30:39:df:d1:78:cc:
52:3b:69:cb:1f:4a:b0:42:2d:6f:7e:41:f6:33:96:
bd:82:65:b1:5e:ec:f1:14:21:ec:20:ca:fa:80:7a:
d5:40:cf:e7:d5:c7:f9:d6:02:98:5c:31:02:39:1d:
e4:c4:a5:c9:a0:32:0b:ce:71:9c:36:86:eb:d6:a6:
15:8d:dd:b7:a0:6a:eb:81:35:18:bb:9a:1a:12:1f:
f6:c6:76:99:48:7b:7c:12:5b:92:ea:a1:04:78:c5:
32:52:fc:53:ac:cf:63:8e:28:df:a1:c0:cb:16:0d:
9b:9b:29:60:f0:3d:11:cf:4d:ea:83:8a:ff:e9:53:
18:31:b2:45:da:bc:e1:01:91:41:5d:3d:06:af:56:
6c:62:f6:9f:25:27:bd:b7:88:ee:0c:6c:52:af:33:
06:ff:ab:67:14:85:aa:c3:6a:5a:e0:2c:ab:19:66:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:AA:72:36:9B:CD:D9:8D:CA:3D:FB:1A:88:A6:61:4E:69:0C:DD
X509v3 Authority Key Identifier:
keyid:DA:0B:3B:7A:7F:85:60:41:22:FF:D6:32:E2:97:53:65:70:31:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gs7en-FYEEi_9Yy4pdTZXAxxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/083f23-26ec-4031-853c-82f151b664c5/1/2gs7en-FYEEi_9Yy4pdTZXAxxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a2:37:63:f7:65:42:14:4a:e4:bd:d2:1e:0b:d3:b4:6f:1e:
28:b0:b5:c7:a5:93:7a:ab:30:b9:97:c4:08:22:d1:a2:43:43:
8e:fd:57:a9:09:a6:53:6e:78:88:8e:bf:65:63:a4:6b:ca:2e:
74:59:09:55:1b:5c:d0:e9:04:3d:a9:3d:11:b2:30:f4:0a:47:
a7:77:6b:8a:f3:ac:ba:fd:3a:56:c2:8a:27:d1:ec:b6:8b:15:
a7:40:6e:fc:dc:7b:fc:e3:f8:86:7e:ea:f4:81:fb:0e:f1:f3:
75:4e:57:96:ed:bf:a6:ae:fa:e3:83:e2:6d:5f:25:4e:01:e5:
89:01:cd:64:16:bb:a9:ce:70:7b:c4:6c:72:ee:88:98:dd:bb:
fb:62:3b:56:03:e9:a0:e1:0c:a2:22:7d:a0:bb:6c:5a:74:4b:
02:37:62:09:f5:9a:a2:cf:2a:18:46:69:bd:17:e7:30:1c:3c:
1e:89:d5:ab:a1:c7:c0:c4:5e:7e:45:3b:cf:66:c7:0f:7b:be:
a1:35:12:42:3a:58:c4:f4:3a:08:de:5c:1a:ee:20:84:67:2d:
4a:9f:26:e3:e0:ee:db:e5:88:c6:1b:00:2d:66:d8:d7:31:09:
37:62:d0:28:11:70:63:bf:f3:be:99:12:04:ea:d2:83:7d:4f:
7e:9f:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:55:15 2026 by rpki-client