Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
File: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft (raw, json)
Hash identifier: MYnLFr70RzTWxxTcqK0L1jmBC1jhVGHfPdSL41YqThA=
Subject key identifier: 13:7C:8B:9E:64:33:B9:81:20:2B:62:E1:10:DE:5B:A3:50:A4:E6:07
Authority key identifier: DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
Certificate issuer: /CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Certificate serial: 01A13FA78318BE5AD54857AAA4DF25C2E79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
Manifest number: 0D86
Signing time: Thu 15 Oct 2026 13:01:44 +0000
Manifest this update: Thu 15 Oct 2026 13:01:44 +0000
Manifest next update: Fri 16 Oct 2026 13:01:44 +0000
Files and hashes: 1: 2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl (hash: q5kvPktfK5/O7dyV/8HCdn9lHJ8X3svFmvnX2nWspbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:83:18:be:5a:d5:48:57:aa:a4:df:25:c2:e7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbfef0d0e3f3a11343bb917fcb7933f4e9dae4ad
Validity
Not Before: Oct 15 13:01:44 2026 GMT
Not After : Oct 16 13:01:44 2026 GMT
Subject: CN=137c8b9e6433b981202b62e110de5ba350a4e607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:49:57:74:05:55:da:c0:a4:9b:3d:28:75:
34:f6:6f:9e:49:ff:07:14:7c:b7:b4:11:ac:a7:6f:
dd:8f:f8:dd:9f:c6:86:ae:ee:3b:23:cf:11:9c:a5:
da:1a:e1:89:4f:30:c5:84:64:0d:7e:aa:75:91:f5:
7a:45:76:50:b3:5a:52:96:d4:bf:ad:ac:9e:ee:e9:
6e:29:ad:f3:31:9a:de:8d:e4:b9:d0:0b:8e:b0:13:
42:88:91:ca:27:0e:3d:d7:0d:98:73:00:0f:3e:1a:
fa:56:51:dc:70:2b:d0:11:2e:52:98:51:1c:ad:1e:
94:b7:e4:9a:d4:b7:d7:7c:3b:b9:b9:30:d8:c4:c3:
92:02:5a:9f:66:a2:3f:a3:37:7f:2c:52:30:0b:d4:
65:22:66:e7:d4:45:ca:3d:97:ef:b3:8f:56:47:bc:
db:a7:27:62:16:c3:16:e8:65:5b:e0:a3:d7:41:69:
3d:17:ac:f7:de:c3:52:dc:ec:35:fb:5e:ad:0a:fc:
fb:78:c9:d4:11:3e:e2:d3:2e:de:1e:6b:9d:b2:73:
28:45:a2:1e:c8:fc:40:a7:52:ed:05:6f:48:eb:bf:
8c:01:f6:a3:47:bc:f6:ba:66:f2:f4:95:a9:8e:eb:
e9:07:35:b3:67:74:8c:34:56:15:63:b8:45:f0:62:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7C:8B:9E:64:33:B9:81:20:2B:62:E1:10:DE:5B:A3:50:A4:E6:07
X509v3 Authority Key Identifier:
keyid:DB:FE:F0:D0:E3:F3:A1:13:43:BB:91:7F:CB:79:33:F4:E9:DA:E4:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_7w0OPzoRNDu5F_y3kz9Ona5K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a8e23-b631-4444-9629-e64c4ec3c919/1/2_7w0OPzoRNDu5F_y3kz9Ona5K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:ed:d7:13:02:5b:5b:d0:15:a1:1f:f4:80:9b:be:e1:a2:
20:96:1d:03:09:64:ad:ed:f9:a2:6e:5f:79:51:9f:cd:b7:bb:
4d:31:b6:ae:5d:7f:ea:3c:11:06:6e:99:67:5e:d9:d9:ce:86:
4e:3e:93:d6:f3:c7:68:4f:45:43:53:9a:6d:be:be:9c:47:90:
7a:46:c7:a2:84:1f:32:60:8b:5a:d6:fa:38:1a:ce:4b:55:b4:
b8:bf:74:5b:20:28:a6:b1:93:a6:bf:89:f6:0e:4e:7d:f4:64:
46:ad:bf:6d:47:64:6f:e0:0f:52:36:14:78:08:84:d6:b2:bf:
f1:94:59:bb:65:f8:7b:3b:d7:28:3b:fe:54:be:e7:e6:c4:58:
1d:5f:c8:67:f9:c9:71:e9:d2:ab:22:66:12:a8:0a:c4:20:6d:
0c:65:4a:61:88:e3:0f:95:87:ad:11:66:f1:26:e2:0f:c5:5a:
08:fb:8d:93:b9:b0:d2:35:54:a6:0c:48:01:4d:41:89:54:76:
f7:b5:9a:f5:cd:71:c4:71:da:91:99:53:66:de:69:d1:fb:b6:
58:5c:a5:d4:bd:6f:bd:85:69:ca:d4:2e:fa:82:b9:e3:54:50:
4e:51:a2:ff:8f:11:12:69:cd:c9:c2:5a:53:0c:d3:4d:a9:65:
e8:7e:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:09 2026 by rpki-client