Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
File: 2Bytep8KCbPVTabNzedDEvrMbXc.mft (raw, json)
Hash identifier: 1qv4PkapirqX9PV7j9jsdBXZ/+0cC+sWvcapkgPx4ic=
Subject key identifier: 8F:0A:E5:8E:1D:93:99:15:49:E1:A0:8E:1C:2D:87:D4:16:44:F2:C5
Authority key identifier: D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
Certificate issuer: /CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Certificate serial: 019D38D367A14D03B7F91AD3C499ADC92336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
Manifest number: 0AF9
Signing time: Sun 29 Mar 2026 09:01:11 +0000
Manifest this update: Sun 29 Mar 2026 09:01:11 +0000
Manifest next update: Mon 30 Mar 2026 09:01:11 +0000
Files and hashes: 1: 2Bytep8KCbPVTabNzedDEvrMbXc.crl (hash: AjqLIQDwlBwuwwZnGc/jwWEw+5KNckBrkH/UWUQPmHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:67:a1:4d:03:b7:f9:1a:d3:c4:99:ad:c9:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81cad7a9f0a09b3d54da6cdcde74312facc6d77
Validity
Not Before: Mar 29 09:01:11 2026 GMT
Not After : Mar 30 09:01:11 2026 GMT
Subject: CN=8f0ae58e1d93991549e1a08e1c2d87d41644f2c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:95:0c:c2:76:05:a4:18:8c:0a:17:93:63:
6d:9d:3a:b0:9e:ae:2a:4f:a0:ad:0c:ec:08:14:93:
dd:94:8b:3c:ee:10:f9:c9:1a:0a:e2:3b:f7:07:fa:
79:cb:b8:6e:9a:64:c1:5d:2b:86:4e:8e:5c:7a:6c:
28:2d:3c:23:d2:ef:65:96:ab:37:47:3c:35:32:df:
95:e9:52:63:82:38:49:b9:5c:5e:fb:92:cc:8f:39:
3d:4a:c9:02:3a:36:ad:04:eb:3d:12:84:cf:4b:24:
a7:ad:ee:8c:90:a4:9b:15:39:c0:d6:c1:52:6c:3b:
00:e8:64:e4:96:8e:37:50:6f:e7:45:52:5c:ec:9d:
c7:3b:f2:03:79:07:df:f5:66:9d:71:88:61:9e:51:
bf:e5:c2:6a:98:4c:93:02:03:2a:ed:a7:ea:ef:5d:
ab:aa:0a:9f:13:c7:34:ed:9f:94:70:52:73:65:ed:
b7:bf:6f:a4:23:8c:86:98:9e:d3:91:6a:9a:30:98:
37:d1:f0:a2:ee:56:7b:53:0b:58:cb:fc:28:df:87:
5b:d2:d6:1f:6b:b8:c1:01:da:bc:08:aa:f4:1b:86:
72:61:37:b9:e8:9c:2d:c5:e0:e8:2c:5d:78:6a:50:
04:55:01:9d:bb:d9:d2:ae:5b:42:93:c4:15:ec:e8:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0A:E5:8E:1D:93:99:15:49:E1:A0:8E:1C:2D:87:D4:16:44:F2:C5
X509v3 Authority Key Identifier:
keyid:D8:1C:AD:7A:9F:0A:09:B3:D5:4D:A6:CD:CD:E7:43:12:FA:CC:6D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bytep8KCbPVTabNzedDEvrMbXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6fef2f-a748-4796-96a0-d3ea707c8f18/1/2Bytep8KCbPVTabNzedDEvrMbXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:cd:60:41:56:d2:51:75:42:b9:ca:e9:a7:50:a0:3c:00:
08:47:fb:67:d7:4c:c0:dc:4c:04:f5:4d:ca:71:19:6e:19:b4:
95:e9:78:ab:d4:b4:a1:0a:8e:67:36:76:f8:50:43:d5:e9:af:
71:5d:64:18:48:ab:19:1f:58:2c:01:9d:4c:98:7d:fe:2a:ed:
d9:ef:fd:40:0b:cc:01:12:c3:0f:ce:16:42:2e:b8:c6:c4:c8:
ef:0d:c7:56:aa:cd:3a:45:e8:4e:52:5f:16:0d:76:4d:12:91:
87:90:21:38:2c:e2:ca:58:cb:ed:fb:2b:0b:18:b1:74:c2:ae:
30:c9:2f:20:e0:95:43:74:52:40:1a:56:5b:9d:62:3a:a3:f0:
e8:8d:65:a8:f1:34:ea:56:8a:0f:ce:d7:0b:64:c0:4a:cd:7e:
83:11:1c:ff:61:55:36:a2:ec:bd:2a:e6:00:7d:79:3a:0d:b7:
b5:d6:a5:e2:13:0c:23:dd:b9:c5:c8:38:be:d4:8e:89:35:6d:
df:0c:4f:3e:55:72:e1:ef:a7:4d:4e:2a:9d:f7:4d:88:b9:c7:
07:01:01:b4:ab:03:ef:8c:2d:e7:8f:d4:3a:eb:48:e3:55:e6:
71:bc:8e:6a:97:2b:97:77:bf:ab:be:24:a3:78:27:9e:49:e0:
fa:3e:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:33 2026 by rpki-client