Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
File: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft (raw, json)
Hash identifier: Rpb0Wpq5aqYahoxFlM+uWhvSKux5uUFVz0kb4h8Xh20=
Subject key identifier: 60:11:DA:52:EB:11:F8:1E:28:21:1A:4C:B9:43:B5:B1:3C:C1:DF:4B
Authority key identifier: DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
Certificate issuer: /CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Certificate serial: 01A00101E8D2EC72E68DA915794244EB5638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
Manifest number: 198D
Signing time: Fri 14 Aug 2026 16:01:37 +0000
Manifest this update: Fri 14 Aug 2026 16:01:37 +0000
Manifest next update: Sat 15 Aug 2026 16:01:37 +0000
Files and hashes: 1: 2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl (hash: veOugpNFTM/Krc4Ob3SCZZFsdX/YyhkFzjxwemXoFmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e8:d2:ec:72:e6:8d:a9:15:79:42:44:eb:56:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7042eb0c48ecb3719e5c0ee2e19c74e2880f3b
Validity
Not Before: Aug 14 16:01:37 2026 GMT
Not After : Aug 15 16:01:37 2026 GMT
Subject: CN=6011da52eb11f81e28211a4cb943b5b13cc1df4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:92:a7:e7:ba:64:77:13:a8:c8:44:ff:f3:
09:65:59:f7:74:73:84:80:89:bc:0b:4b:4b:f1:6c:
09:80:38:d9:4e:21:cf:58:9d:89:d0:0b:63:6e:21:
e5:53:0a:b7:b9:48:0f:a3:90:72:0b:27:3b:d1:23:
ef:ba:6d:de:85:15:79:6d:40:d3:f4:ce:43:d8:9c:
a5:fd:d9:4d:f2:87:4d:ed:96:cb:ee:73:ce:ac:2f:
56:fa:f0:d2:32:38:65:71:e5:9c:a5:f2:04:cc:74:
f7:b7:84:3f:49:76:7e:6f:c0:af:f7:0a:f5:48:78:
6e:cb:e9:89:47:51:4b:8f:93:60:ba:3f:8e:71:15:
a1:2a:02:bb:c4:d3:54:bd:2d:e6:2e:29:71:a4:18:
7c:a2:06:a1:77:23:97:6d:d9:3a:72:f8:3f:c0:be:
75:b7:ff:8b:30:2c:b8:3e:6e:82:27:a7:30:7b:6c:
36:fe:9d:7e:3b:f3:e3:6e:f0:b1:c5:ae:da:1b:11:
3a:51:e3:53:4f:e9:44:96:9a:33:ac:d0:a9:40:98:
dc:00:ba:bc:48:91:90:27:e4:16:3e:24:85:2f:c4:
5e:3d:23:f7:bf:a2:83:77:57:0e:5a:7a:8c:2c:20:
9c:20:36:62:9d:62:d3:cd:ab:23:51:23:82:0f:16:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:DA:52:EB:11:F8:1E:28:21:1A:4C:B9:43:B5:B1:3C:C1:DF:4B
X509v3 Authority Key Identifier:
keyid:DA:70:42:EB:0C:48:EC:B3:71:9E:5C:0E:E2:E1:9C:74:E2:88:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nBC6wxI7LNxnlwO4uGcdOKIDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/eca7e6-d277-4cd4-acf3-501f77b42e9a/1/2nBC6wxI7LNxnlwO4uGcdOKIDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:02:2a:28:f7:15:78:82:e7:ed:f9:4f:72:75:c4:91:55:a2:
d6:2e:d1:ed:c0:ff:11:0f:9a:9c:fc:db:c9:a4:00:30:b0:de:
e9:1a:74:33:95:a5:fd:d3:d7:01:8d:e8:70:f0:66:9f:d3:24:
83:e7:8a:6a:66:9c:44:6d:db:10:26:fc:7a:bf:6c:73:ea:a8:
29:fc:0c:bc:70:6d:b3:2a:fe:8e:c8:40:ce:31:c7:93:12:73:
63:d0:38:c9:41:7d:ce:8a:87:5b:22:4f:a4:74:bc:69:8e:dc:
c5:dc:ed:09:78:33:9f:54:d4:f8:4c:05:7f:e1:4c:59:92:a0:
51:df:49:ef:33:ad:8c:5f:0c:eb:0c:21:41:6a:87:e3:b3:e8:
04:a0:6e:2e:3b:75:c0:a7:db:07:82:ec:a3:62:2e:cf:8b:d6:
80:4c:9a:55:3d:a7:3c:2c:66:83:f5:02:3e:09:3a:ef:31:f6:
9b:3c:17:91:34:59:79:fa:99:40:23:e1:ff:b5:54:0d:7f:c3:
49:4c:b8:b7:9d:b9:84:27:89:73:4f:d9:37:c3:bb:b1:12:91:
08:bf:62:0c:58:15:7e:e7:c1:27:c9:96:44:ac:eb:74:f2:04:
09:91:37:ae:86:99:17:81:39:6f:d8:32:03:9b:69:28:28:6b:
72:1a:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:33 2026 by rpki-client