Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: x3OtFAgjL0PqDPXMrjxanspRSe20aiEOG80Nzv3Ik/Y=
Subject key identifier: 7D:D2:AF:A2:8F:04:C9:1A:71:0D:F9:3B:AC:38:FC:57:39:84:97:C0
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019F17C33AFAB1864703B8549FD14AE28F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0BF1
Signing time: Tue 30 Jun 2026 09:01:38 +0000
Manifest this update: Tue 30 Jun 2026 09:01:38 +0000
Manifest next update: Wed 01 Jul 2026 09:01:38 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: p9NI5twdgSNc5lWF+fvHU4W4gvAVKqx9XJvh7CdSzcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:3a:fa:b1:86:47:03:b8:54:9f:d1:4a:e2:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Jun 30 09:01:38 2026 GMT
Not After : Jul 1 09:01:38 2026 GMT
Subject: CN=7dd2afa28f04c91a710df93bac38fc57398497c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:93:bd:77:98:d3:c7:81:94:8d:7b:aa:04:f4:
f2:67:58:05:69:9c:5b:8b:a3:4c:a5:e1:2d:d4:fe:
8b:43:b0:dc:2f:80:e5:74:e2:11:a9:23:f2:8a:23:
12:73:e4:a8:90:27:bd:4a:68:c2:2d:c8:89:62:f9:
5c:82:9c:77:9a:1d:f9:d3:7d:3f:f0:10:43:69:52:
0d:ec:69:90:b1:2c:66:4f:e9:26:60:18:83:78:eb:
9b:41:04:e2:82:07:72:2b:e0:c6:35:1d:c0:f0:b7:
a4:e8:ec:8e:9b:f4:f4:94:64:3e:91:3c:2e:9e:cb:
3a:8c:54:29:13:d2:41:72:dd:26:59:14:2f:1c:8a:
e0:85:6c:fd:d7:99:31:7e:f5:92:f2:16:39:62:b6:
41:43:7b:27:0f:2a:92:d0:0b:61:e0:00:4a:63:08:
4c:f2:c7:8c:c9:5f:90:a0:d0:57:32:6a:72:c3:11:
e8:a7:9a:5c:2a:7b:54:13:59:71:18:37:2c:25:41:
65:9b:3a:fb:6e:eb:13:bf:9c:55:c2:6b:33:77:27:
bb:0f:47:25:b5:3c:44:16:56:91:3d:27:55:28:cc:
ec:9f:f9:1d:62:91:9a:ca:de:1b:f4:b4:8f:8a:79:
67:6d:3d:2d:fa:4d:af:a6:c4:fc:9c:0f:dd:43:6a:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:AF:A2:8F:04:C9:1A:71:0D:F9:3B:AC:38:FC:57:39:84:97:C0
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:a3:08:e0:7e:e8:c7:2f:6a:8b:63:7e:13:ff:ca:a5:48:
c3:58:0e:dc:ce:d1:87:e9:ed:b0:7c:fe:cb:d4:34:58:0f:90:
59:c8:97:0f:da:22:d3:7a:d8:bd:27:5d:b7:27:fa:49:e9:59:
35:8f:f1:03:ec:a2:53:a8:e6:39:f5:d7:7c:9c:53:02:28:02:
05:72:42:c5:af:cd:64:65:8f:8d:85:14:8b:0b:d4:4a:14:24:
55:26:9b:1b:23:3b:36:2a:e7:96:91:02:97:36:aa:08:68:12:
8f:db:1f:12:38:35:15:e0:9c:d7:e7:a0:b5:26:0e:ad:1e:8f:
de:3b:90:b7:7a:f9:b0:f4:67:1d:ae:b4:59:54:c7:8c:ce:75:
63:63:f6:f1:47:9f:18:47:c3:b0:1d:11:42:28:73:c2:56:0c:
62:3a:eb:99:e2:b5:f1:c6:cf:44:eb:b5:9d:27:57:0e:d1:8c:
9b:6b:26:91:8d:78:1e:44:fa:62:5d:2b:14:40:6c:15:ac:83:
54:6c:a9:00:12:cd:85:27:41:18:26:5b:16:d0:af:89:f5:02:
07:50:45:a8:d0:69:3e:b9:6c:2b:ff:ed:46:aa:71:73:8f:4f:
5e:1e:58:3c:df:ba:7c:da:c9:35:2c:9c:6f:d5:77:75:37:05:
8a:ab:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:33 2026 by rpki-client