Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: gDB4RyjSLAJtnGAStB2l/IdgSqhlE4ImVdaR5b2rk7c=
Subject key identifier: 4D:38:81:D2:93:5F:1F:EA:65:74:E9:D3:69:C2:8C:57:62:FC:70:5F
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 01A13E952FF6AD29C07F0B7723BAE6AD5DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 06CA
Signing time: Thu 15 Oct 2026 08:02:06 +0000
Manifest this update: Thu 15 Oct 2026 08:02:06 +0000
Manifest next update: Fri 16 Oct 2026 08:02:06 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: gK9uAPEAVczpjcVwzIsYeC/3CEuZE1aBSwOZYnTtLJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:2f:f6:ad:29:c0:7f:0b:77:23:ba:e6:ad:5d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Oct 15 08:02:06 2026 GMT
Not After : Oct 16 08:02:06 2026 GMT
Subject: CN=4d3881d2935f1fea6574e9d369c28c5762fc705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:49:de:4e:f4:e1:e1:7c:d0:da:0b:ad:e1:
cf:e6:f9:1e:14:6a:bb:97:48:62:b7:76:12:a4:75:
8a:cf:0f:2a:7c:13:74:d1:a4:9f:44:a9:df:9c:98:
52:50:ac:1d:1f:cb:21:23:71:74:ff:fa:db:59:3b:
ed:c1:0f:e2:b3:6a:87:2b:e7:28:87:9f:b0:45:99:
16:ce:2e:f6:ed:fa:b8:7c:89:13:90:69:eb:2d:1a:
66:de:e4:7b:60:b9:68:f7:25:0f:14:41:e7:55:2d:
f3:b7:5e:8e:d4:ae:04:44:10:b1:81:ec:a1:47:42:
a4:7e:25:17:62:9a:40:ee:7b:2a:2d:b4:8c:af:c8:
1b:a4:68:db:2b:c6:a9:1d:ce:a6:a4:88:16:1d:b3:
7d:f8:91:66:3d:cd:cf:b6:cd:6a:82:1a:23:59:bb:
67:73:51:4a:7e:0b:56:f6:22:06:a5:ef:49:1c:bf:
d2:d3:60:88:0c:fb:6b:a2:98:b8:6f:8f:f3:e7:c7:
9c:88:6d:5f:57:a8:43:27:2f:16:d5:ce:b1:72:1a:
8a:f5:99:b0:aa:8a:b6:4b:7b:c1:69:e4:be:26:91:
06:e3:34:f5:44:f3:ef:53:e5:77:78:fa:41:7c:bb:
2d:44:32:6b:ea:8f:22:c0:d1:c6:3d:91:c6:a3:fb:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:38:81:D2:93:5F:1F:EA:65:74:E9:D3:69:C2:8C:57:62:FC:70:5F
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:04:c1:3e:f6:4b:2a:47:60:fb:af:83:de:4e:d3:50:c6:c8:
2d:98:37:e7:ae:58:77:1d:34:b4:e5:25:1a:b7:2e:57:8e:09:
62:f3:cd:7e:d5:14:d4:72:f1:e4:d3:90:8b:31:ff:ba:05:38:
07:45:44:27:9b:08:8c:34:b8:9e:89:65:0c:d0:12:44:3b:56:
ed:43:81:3b:b6:a6:10:bb:7c:ec:e9:58:02:ac:07:10:90:27:
b7:af:c3:00:39:c8:e6:a2:25:3e:b0:e9:86:9a:f5:88:75:f3:
6a:9b:0d:28:63:b8:9b:b1:15:3d:7e:8a:3d:17:bb:19:6f:9e:
85:21:44:75:af:5f:fc:8b:9e:1d:10:97:15:c1:7d:a9:67:ea:
3c:6d:f9:a4:db:c8:88:34:d1:22:63:e8:8d:e8:6b:0f:20:59:
ce:4c:69:89:7c:39:2b:d5:96:8f:5e:5f:c7:34:c1:4b:58:da:
82:8e:54:df:23:bf:5f:4d:d5:a0:8e:fc:0b:20:6a:ab:e0:de:
80:67:d6:db:77:f1:1d:92:0a:be:23:62:81:22:35:8c:1e:be:
52:09:16:5d:54:77:9c:08:db:5d:6a:13:d0:3a:dd:d6:11:aa:
42:d2:4c:30:b4:89:d3:96:93:e9:e1:71:a7:e7:ac:9b:5b:a3:
fd:a2:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:15 2026 by rpki-client