Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: azQkcejc7y72/5mbC+P21Qi/BK5vysHnadRD/30Y8Fc=
Subject key identifier: 8B:E6:2F:D3:CB:A7:AC:C0:D8:99:DF:9E:1D:AC:4F:C4:76:C9:75:1B
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 01A13E2606D571848EAE6ED6F23E19D2BE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0D0E
Signing time: Thu 15 Oct 2026 06:00:41 +0000
Manifest this update: Thu 15 Oct 2026 06:00:41 +0000
Manifest next update: Fri 16 Oct 2026 06:00:41 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: PefZnYZXMcFjRyLk9uMW0pv0ZT/VpBMEN1xI07PbQKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:06:d5:71:84:8e:ae:6e:d6:f2:3e:19:d2:be:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Oct 15 06:00:41 2026 GMT
Not After : Oct 16 06:00:41 2026 GMT
Subject: CN=8be62fd3cba7acc0d899df9e1dac4fc476c9751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:75:2f:69:2c:f5:fd:90:4e:2f:71:eb:fd:
99:c4:8c:6c:24:21:8e:14:b6:54:71:39:23:2e:ed:
65:f7:11:40:c9:95:68:21:2d:bd:e5:98:76:2e:f8:
e5:2c:c5:b9:a0:7f:10:fa:e7:3c:0f:3d:90:86:56:
bb:34:dd:27:49:78:cf:dc:e2:b1:aa:4f:a2:a9:26:
b1:cf:93:87:6a:a2:92:88:10:48:89:99:75:50:db:
84:17:9a:15:98:cc:e4:d7:47:b7:40:e4:50:ae:c1:
e0:ba:bc:e2:07:0f:17:fa:de:93:6d:2b:b6:ef:39:
a3:88:00:05:af:fb:5c:69:76:3b:df:0f:28:aa:2e:
c3:3c:23:2e:e2:b7:1e:43:f6:93:b1:18:4e:1b:db:
2c:8e:03:a1:ff:c1:42:bb:f8:a6:5d:03:f3:ed:27:
33:1c:57:16:f8:d1:b8:b3:73:af:0a:e0:05:ab:a9:
f3:a1:00:d2:bb:b3:f4:da:11:2f:ea:7e:7d:a7:45:
62:0d:e3:9e:32:40:05:24:6b:c3:c2:3c:fe:72:bf:
7a:7c:f1:e8:93:8f:a8:3a:36:a0:6f:95:52:84:85:
1f:3d:fe:b0:50:f8:12:f1:e1:5c:51:f3:6c:ae:c1:
35:40:a4:d1:75:58:b9:c2:a3:f5:ab:19:b0:80:97:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:2F:D3:CB:A7:AC:C0:D8:99:DF:9E:1D:AC:4F:C4:76:C9:75:1B
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4f:a2:ed:16:61:31:0e:22:13:e5:79:4a:89:1b:e8:cb:29:
35:f8:15:2a:b7:a7:9a:cc:f5:94:5b:2f:37:13:1b:a4:7d:4e:
8a:18:ba:64:67:a1:e0:15:ef:10:8f:ec:49:ac:a6:94:f6:a9:
df:2d:7c:0f:a4:ea:c5:fb:0a:9e:f5:59:68:11:ff:09:90:e4:
38:da:f9:01:7a:88:5b:d3:20:ee:9c:88:0b:3e:11:e2:22:68:
b7:7c:3b:4d:90:b8:48:de:b6:25:7b:ac:54:94:fa:10:85:a9:
f7:15:dd:9e:f9:b5:23:9d:5d:44:a5:c6:2f:5c:39:b0:1e:b1:
06:9d:bd:01:6c:6b:97:28:60:8e:11:a4:03:5f:ad:4a:5b:08:
e3:b8:9a:d3:57:70:16:44:4e:d8:c0:b4:9c:2a:4b:0c:2c:fb:
08:23:51:32:26:d0:36:f0:a7:a1:f9:8e:e7:ee:32:b7:a1:c8:
16:ce:9d:27:a9:de:0d:f1:28:de:4a:8b:e6:86:a5:e9:ad:66:
c0:d0:0e:e6:63:4b:f6:20:7c:0a:17:d7:ea:39:9e:45:3a:3e:
d3:7c:9a:2f:1a:7e:6e:71:49:74:85:d0:6e:dd:3c:59:ea:4b:
1a:36:b0:20:5c:01:7b:a8:4b:44:60:13:0e:2a:95:40:df:e4:
0f:13:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:04 2026 by rpki-client