Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
File: 2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft (raw, json)
Hash identifier: ddlDHS9fl7XmDbOGU0Bj6ECqwH42t0lCYteupvOqJV4=
Subject key identifier: AF:92:5F:62:6B:FD:54:6B:48:05:27:2B:10:E5:17:2C:78:7D:24:3A
Authority key identifier: D8:D9:9E:A0:17:67:D4:AA:DC:42:F3:3E:D8:DC:3B:68:89:35:23:4B
Certificate issuer: /CN=d8d99ea01767d4aadc42f33ed8dc3b688935234b
Certificate serial: 01A0404E67CA204BAC6D7B534D7900C132B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:15 +0000
Manifest this update: Wed 26 Aug 2026 23:01:15 +0000
Manifest next update: Thu 27 Aug 2026 23:01:15 +0000
Files and hashes: 1: 2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl (hash: IUQMfCyCQGAez2v5pQGtT/QQDQ5nsy8NjDntxxbRjHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:67:ca:20:4b:ac:6d:7b:53:4d:79:00:c1:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d99ea01767d4aadc42f33ed8dc3b688935234b
Validity
Not Before: Aug 26 23:01:15 2026 GMT
Not After : Aug 27 23:01:15 2026 GMT
Subject: CN=af925f626bfd546b4805272b10e5172c787d243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:25:97:74:e7:01:f2:e1:31:91:78:e9:84:3f:
98:67:48:d6:3b:4d:03:21:fa:08:01:b2:2d:b8:7a:
85:de:09:b5:12:4e:0e:51:0b:ed:c8:01:6e:08:fe:
c5:82:b0:48:32:5d:9f:85:d0:22:0e:b6:27:f0:fd:
4f:ff:88:cf:60:53:92:79:89:7b:d4:a1:70:ee:e1:
d0:d3:35:d2:88:97:f0:5e:a2:36:c1:a1:d7:73:e6:
73:7f:08:6e:91:9d:81:bc:e8:b9:a4:df:96:d9:a5:
62:25:d9:03:19:7d:77:3f:d7:08:fe:13:72:af:c7:
f0:e6:08:ab:6e:90:28:b7:ed:97:8c:59:d1:e1:58:
cd:c7:01:83:48:31:f0:f5:01:18:24:89:75:cc:c3:
3c:fa:be:51:58:d4:8a:57:65:1c:48:cd:f6:b8:50:
3a:e9:e3:21:5d:92:43:77:28:dc:34:e2:bd:18:3c:
8e:13:8d:3e:84:80:71:55:42:4e:7f:ee:16:66:b5:
6a:94:d0:46:26:09:c2:8d:ae:5b:d2:c9:25:28:8d:
2c:72:3f:42:20:a8:45:11:cb:e0:3f:f4:04:66:b6:
7f:b5:62:56:80:ce:98:5b:47:de:93:ef:a6:6e:e1:
74:75:00:eb:f4:74:da:5f:44:97:e8:50:75:de:81:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:5F:62:6B:FD:54:6B:48:05:27:2B:10:E5:17:2C:78:7D:24:3A
X509v3 Authority Key Identifier:
keyid:D8:D9:9E:A0:17:67:D4:AA:DC:42:F3:3E:D8:DC:3B:68:89:35:23:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f0:06:85:aa:69:74:96:85:3d:27:df:b8:c5:8b:b9:e8:b0:
dc:52:44:a7:a2:08:9d:2f:45:96:4a:29:44:28:05:ec:62:99:
a1:15:40:8b:1a:d7:43:97:82:5c:16:66:38:28:22:1a:5c:03:
73:fa:77:f5:a9:00:12:a8:6f:cb:3a:0f:b2:57:87:c3:fc:5c:
a1:cb:a9:01:ab:3a:84:6f:82:7e:4c:6e:3d:5e:22:39:0e:ae:
0b:85:d6:34:45:db:53:21:17:bb:59:f1:9b:92:43:46:4d:45:
2f:d6:77:36:e0:60:1b:6f:a7:4b:f6:bf:bb:67:bb:02:a1:be:
39:a8:9e:e6:81:19:01:b5:30:b3:ba:da:00:90:a2:9e:80:18:
41:e0:66:66:45:33:75:1b:58:6e:17:34:8b:a6:3a:e2:51:21:
ee:d7:45:8f:63:bb:6a:42:61:cc:94:54:2b:27:e4:9e:9a:d1:
36:ea:c2:e1:52:94:cd:8f:3e:a9:9c:43:a8:51:7d:7d:bd:c8:
58:69:3d:ca:c2:e4:47:81:0b:e8:da:2a:7b:ea:ff:dd:d8:b8:
59:90:f6:ea:4d:36:46:69:5d:d9:d5:59:2f:75:05:e9:2a:74:
f2:76:7b:7f:5d:7a:2e:29:74:f3:c7:44:cf:a6:ad:c4:9f:1c:
a9:b1:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:48:16 2026 by rpki-client