Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
File: 2_9h1cWObqbsXPfubPNTpmOxs6g.mft (raw, json)
Hash identifier: We5P7/2lhwgbGenhHBgkQMExFmo7J6XcohznIHZOaQY=
Subject key identifier: 00:A4:98:A9:3F:1A:58:1B:30:FD:E9:1E:6E:2C:5F:F6:C7:F6:58:AE
Authority key identifier: DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
Certificate issuer: /CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Certificate serial: 019F1831098A4CFFAB886FED110CD50F62DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
Manifest number: 05AD
Signing time: Tue 30 Jun 2026 11:01:34 +0000
Manifest this update: Tue 30 Jun 2026 11:01:34 +0000
Manifest next update: Wed 01 Jul 2026 11:01:34 +0000
Files and hashes: 1: 2_9h1cWObqbsXPfubPNTpmOxs6g.crl (hash: 4drQOpyQ/otzoyaMWM2L5M5+Txvsj9/VcXeUxMx73GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:09:8a:4c:ff:ab:88:6f:ed:11:0c:d5:0f:62:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbff61d5c58e6ea6ec5cf7ee6cf353a663b1b3a8
Validity
Not Before: Jun 30 11:01:34 2026 GMT
Not After : Jul 1 11:01:34 2026 GMT
Subject: CN=00a498a93f1a581b30fde91e6e2c5ff6c7f658ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:db:42:29:24:e3:80:00:35:63:be:9c:bb:
f7:eb:f9:6e:e9:7d:44:dd:d7:fb:57:63:cf:6e:36:
f4:37:cb:00:c0:51:95:44:ca:77:c4:3b:0e:f8:0c:
2e:9f:6a:cb:ef:2c:56:e0:dc:a1:f9:b6:3b:e5:94:
2a:76:e6:66:51:6f:b3:36:b1:57:a9:90:55:ca:38:
ff:38:eb:10:ff:3f:af:fd:ce:42:43:e4:02:94:f5:
eb:a6:2f:34:6c:e1:0f:e0:71:7f:3e:cc:2b:49:10:
34:89:f1:f4:de:3e:c8:0d:22:16:4d:b6:34:eb:40:
d1:f3:69:c0:e8:56:a3:95:cf:09:63:f1:a7:ef:cd:
9b:31:4c:83:1a:9d:34:ef:47:79:ae:21:64:c9:96:
87:83:5d:b1:e3:37:2a:30:ad:d6:01:24:16:80:1e:
95:ed:8b:00:d8:76:b6:d8:9c:14:17:f6:4a:d5:c3:
39:42:9a:60:96:1d:73:93:52:23:de:1b:01:a6:23:
32:d2:40:9e:d0:2f:e0:cb:6b:ae:d4:ec:ae:99:33:
c6:33:4c:cd:fe:1c:21:2a:1d:20:4d:66:e4:e9:9b:
69:db:a0:e6:3a:43:71:cd:26:3f:0e:4d:ce:b3:d5:
32:ca:1e:21:ed:6a:43:97:1f:b0:fc:1c:23:08:4e:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A4:98:A9:3F:1A:58:1B:30:FD:E9:1E:6E:2C:5F:F6:C7:F6:58:AE
X509v3 Authority Key Identifier:
keyid:DB:FF:61:D5:C5:8E:6E:A6:EC:5C:F7:EE:6C:F3:53:A6:63:B1:B3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_9h1cWObqbsXPfubPNTpmOxs6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eed1d6-6a72-4826-839c-b8b36f8956b7/1/2_9h1cWObqbsXPfubPNTpmOxs6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:96:61:03:be:9e:fb:40:13:d6:04:30:40:b1:c7:1f:ba:
7b:0f:d1:88:10:74:83:83:18:a7:e2:06:21:77:18:b4:4e:a8:
0a:ed:26:b1:b2:00:5d:9a:59:ef:84:ca:10:2c:0d:98:ff:65:
69:67:fa:99:31:62:75:69:23:1f:92:d0:5e:6a:81:4e:2b:f5:
5e:b1:1b:21:98:96:31:8b:2e:66:67:f6:94:4e:6e:b2:71:4b:
60:3f:b8:77:c7:5b:28:5c:32:24:2e:73:a0:83:00:09:25:57:
9a:93:a9:a2:45:22:c3:cf:f8:c3:c5:6e:ee:43:05:f1:97:d8:
ad:a8:61:97:e8:b8:fb:3d:16:3a:23:e9:76:eb:51:f6:a9:42:
61:95:5c:14:2b:2f:db:3c:33:2f:d4:fd:eb:c2:8e:8d:c5:6b:
91:18:48:1e:39:44:b4:b8:5a:1e:75:b0:ce:dc:ee:21:44:31:
80:fa:0c:3f:f8:31:fd:0a:65:27:72:09:41:2a:73:fb:9a:06:
fb:b3:76:6d:ce:84:b1:f7:26:58:42:80:23:80:1d:e5:79:21:
3f:c4:68:ef:32:b6:9a:13:b1:33:a7:6c:f2:19:09:ca:12:09:
ff:3d:8b:d1:f4:52:1a:16:8d:0c:2f:4e:e3:29:c8:5a:f9:94:
4f:91:2a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:29 2026 by rpki-client