Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: oIpwjbYMxZQkFZ9lbb1EdfR1n3HqgljQEj6C4k5b+5g=
Subject key identifier: 27:79:2B:7D:79:A6:82:7B:4C:87:55:C0:01:96:6C:1D:71:2F:62:FC
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 01A00101E7ED678E43D26A723C28205FF667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0CE1
Signing time: Fri 14 Aug 2026 16:01:37 +0000
Manifest this update: Fri 14 Aug 2026 16:01:37 +0000
Manifest next update: Sat 15 Aug 2026 16:01:37 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: o1n/WcXNZqLfX+03TftACMHQUw2AO2xT3OcWpamoOwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:e7:ed:67:8e:43:d2:6a:72:3c:28:20:5f:f6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Aug 14 16:01:37 2026 GMT
Not After : Aug 15 16:01:37 2026 GMT
Subject: CN=27792b7d79a6827b4c8755c001966c1d712f62fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:e6:4c:d4:2e:eb:a2:1c:b1:41:18:0d:a9:
46:06:d7:ab:ed:d3:ef:6c:e7:b2:31:e2:8a:3d:18:
73:4e:46:d5:a6:f6:ac:41:d2:fe:d8:ea:ee:1d:8b:
34:c0:4c:5e:a3:f3:dd:bb:b5:b3:f0:43:bc:71:87:
e0:d1:0e:66:cb:e6:5b:bb:31:0c:c2:69:50:b7:4d:
c8:88:96:81:91:0a:0a:a2:97:93:42:5d:3f:a4:44:
89:15:cc:e2:60:59:80:8c:3b:ab:96:91:65:08:b8:
b3:2a:2e:b1:a4:31:f4:39:ff:dc:28:bc:3e:cd:61:
28:5a:10:71:3f:ec:78:35:3f:23:b8:69:20:3c:46:
b6:b3:3c:75:c0:b7:c2:d7:a0:78:f5:b0:dc:18:13:
23:b1:0e:23:63:1f:9f:b4:02:02:fc:50:4a:4b:fa:
7a:5c:52:6e:9a:3f:6f:05:6c:e4:bd:e8:f4:01:d1:
5e:2b:c3:fe:6f:bc:da:3a:12:6a:f2:b1:56:b0:00:
cd:28:1c:5a:73:ca:4c:28:39:61:29:60:f7:a1:c1:
fd:1b:84:db:95:06:ef:40:3d:c8:fd:90:15:8c:9c:
59:61:bd:bc:b0:8a:8e:ff:6c:58:0b:40:0b:37:2e:
0e:7a:4c:3d:21:fe:e3:f1:e7:4e:52:7b:28:cc:7a:
bf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:79:2B:7D:79:A6:82:7B:4C:87:55:C0:01:96:6C:1D:71:2F:62:FC
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:33:74:f6:d2:3a:ff:76:2b:f6:b0:2b:56:0e:83:27:cf:41:
9a:4e:f3:b4:3f:59:29:1c:22:0a:09:3c:e7:e7:2e:8c:ef:24:
3b:4b:8a:ff:cd:9a:a8:4a:1d:f4:25:6f:bd:72:0c:fd:10:b9:
e8:47:56:8e:f1:1b:f1:85:f3:e7:d7:e3:e8:3d:3c:af:c0:42:
6b:3a:c4:6a:c4:9e:4f:a9:66:62:cb:ed:88:8d:14:4b:1c:82:
b8:46:ee:d4:2b:99:84:5b:db:b2:40:b3:85:f9:b7:00:61:7f:
21:bd:2a:b4:b4:37:19:53:57:dd:82:ef:8b:f5:2d:5d:bf:fe:
9f:4d:89:18:7e:6a:45:72:f6:53:c3:d9:89:e0:a2:89:ac:57:
1c:ff:40:f9:cb:20:da:b8:dd:69:68:50:b4:df:a5:e3:7c:39:
cd:8c:37:17:9d:13:2c:2e:4d:76:09:e2:85:76:62:ec:45:27:
1e:2c:15:f6:11:12:ec:78:0e:ad:4c:7e:8c:85:10:e1:45:1d:
3c:92:ce:e2:47:44:26:07:c3:9e:b5:22:9f:7d:ac:95:d0:f1:
11:95:c8:da:7e:14:d4:00:7b:0e:11:79:86:5e:b6:a5:4c:db:
06:1b:22:b6:5b:53:ce:32:38:63:99:d6:9e:0b:68:24:ec:49:
69:26:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:34 2026 by rpki-client