Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
File: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft (raw, json)
Hash identifier: VOc0ddBnsPaxMwYz2y654GDyPZ0h4p8T6JStmcUXydc=
Subject key identifier: CF:51:6A:55:66:61:0F:08:37:33:C7:C9:02:5B:94:36:B1:12:64:CD
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 01A0D804171EEFA537BBAB3CC18F3E01FC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
Manifest number: 1A87
Signing time: Fri 25 Sep 2026 10:02:21 +0000
Manifest this update: Fri 25 Sep 2026 10:02:21 +0000
Manifest next update: Sat 26 Sep 2026 10:02:21 +0000
Files and hashes: 1: 2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl (hash: eKnNYmiuq8A/HBkYlEjvIdxtmwjYgz5Sh46RyQNmWac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:17:1e:ef:a5:37:bb:ab:3c:c1:8f:3e:01:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Sep 25 10:02:21 2026 GMT
Not After : Sep 26 10:02:21 2026 GMT
Subject: CN=cf516a5566610f083733c7c9025b9436b11264cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:dc:93:b0:67:22:5e:93:08:96:e5:eb:a5:
03:50:a5:09:70:48:98:d6:0d:51:c9:1e:3c:7e:45:
3a:16:68:7e:c0:91:23:51:18:80:b1:76:96:6e:fc:
02:f4:61:11:ee:01:ba:29:c0:52:06:35:39:68:27:
4b:2e:50:2a:00:9d:28:08:1e:49:18:fc:4a:5a:1b:
df:0a:80:f1:6e:62:35:8e:ad:0b:66:62:0e:b0:e6:
3f:e6:74:7d:c7:f2:a4:4f:3e:52:e8:16:68:d8:08:
7f:6e:44:c8:d6:b5:91:83:2c:1d:7c:de:51:44:a4:
23:c9:d0:55:2e:63:d3:d9:67:ec:e1:bb:c9:08:cf:
d3:f4:98:1e:44:63:1f:27:96:11:6c:86:bb:70:82:
4f:cc:6e:65:94:af:9e:77:45:19:fa:f0:0a:15:4a:
91:2d:11:c1:a4:8d:b9:85:b7:2f:c3:bf:d4:4c:3f:
c9:f4:0f:7a:2e:a7:b1:6c:de:6b:e9:0c:9c:91:6d:
e0:d3:57:a5:6b:be:2b:40:de:f1:dc:21:7a:a8:a2:
41:1f:6a:62:2f:5a:f6:0b:70:7d:4e:6b:52:e3:1e:
5e:f3:64:2c:86:71:d4:64:d3:4d:33:f5:d6:bb:80:
9f:16:05:2f:ae:90:1b:0c:fb:e4:6b:bb:be:60:c2:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:51:6A:55:66:61:0F:08:37:33:C7:C9:02:5B:94:36:B1:12:64:CD
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:8c:88:67:f4:8c:70:44:68:18:a7:90:bd:b8:e4:32:a2:
60:a8:a1:b9:e2:05:c8:29:a8:9c:ce:b7:48:28:1f:97:28:30:
75:8e:ff:78:e5:36:e7:1c:35:fe:ba:7e:36:54:ce:e1:e6:73:
12:22:e3:be:3f:9c:70:de:b9:81:af:db:15:2c:59:e1:5e:83:
35:a8:41:fc:3e:71:89:03:e6:b1:c3:15:45:2d:1d:3b:29:8b:
0a:8c:c8:f8:c7:44:ee:b0:6f:e0:a3:8c:a9:03:97:79:28:c5:
bb:fd:ee:b6:a8:71:57:2c:1e:af:ad:96:50:ce:34:32:f0:45:
3c:2d:3f:85:af:73:36:73:cd:e0:2e:d7:eb:e2:16:f5:3d:db:
17:d1:62:eb:e9:61:65:ff:6c:68:1f:db:f1:7e:3b:9e:9c:b0:
f2:ff:a2:76:41:20:43:6c:5a:ed:5b:16:13:db:c6:81:49:63:
8c:c8:28:e7:d7:f0:c1:48:b0:be:32:12:03:a5:1f:08:f0:6c:
e7:0e:ae:ad:cb:99:89:4a:c7:51:5f:db:01:a9:a5:91:c9:a9:
b9:ea:72:66:5d:9f:7c:7e:2a:78:a5:e6:1d:8d:12:3f:d1:e1:
24:a9:2f:4d:98:82:ea:ff:ba:3c:d4:87:03:80:13:29:8e:59:
97:b3:a6:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYBBce76U3u6s8wY8+AfyEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDY2MmRjYzZmZTNiODFlZjNkZTJmY2EzY2ZjZWRjMTFl
YmFhNDMwHhcNMjYwOTI1MTAwMjIxWhcNMjYwOTI2MTAwMjIxWjAzMTEwLwYDVQQD
EyhjZjUxNmE1NTY2NjEwZjA4MzczM2M3YzkwMjViOTQzNmIxMTI2NGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfvck7BnIl6TCJbl66UDUKUJcEiY
1g1RyR48fkU6Fmh+wJEjURiAsXaWbvwC9GER7gG6KcBSBjU5aCdLLlAqAJ0oCB5J
GPxKWhvfCoDxbmI1jq0LZmIOsOY/5nR9x/KkTz5S6BZo2Ah/bkTI1rWRgywdfN5R
RKQjydBVLmPT2Wfs4bvJCM/T9JgeRGMfJ5YRbIa7cIJPzG5llK+ed0UZ+vAKFUqR
LRHBpI25hbcvw7/UTD/J9A96LqexbN5r6QyckW3g01ela74rQN7x3CF6qKJBH2pi
L1r2C3B9TmtS4x5e82QshnHUZNNNM/XWu4CfFgUvrpAbDPvka7u+YMKUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9RalVmYQ8INzPHyQJblDaxEmTNMB8GA1UdIwQY
MBaAFNjWYtzG/juB7z3i/KPPztwR66pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1Yjct
Nzg1ZTU4ODM2NDRkLzEvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1YjctNzg1ZTU4ODM2NDRk
LzEvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXk2MiGf0
jHBEaBinkL245DKiYKihueIFyCmonM63SCgflygwdY7/eOU25xw1/rp+NlTO4eZz
EiLjvj+ccN65ga/bFSxZ4V6DNahB/D5xiQPmscMVRS0dOymLCozI+MdE7rBv4KOM
qQOXeSjFu/3utqhxVywer62WUM40MvBFPC0/ha9zNnPN4C7X6+IW9T3bF9Fi6+lh
Zf9saB/b8X47npyw8v+idkEgQ2xa7VsWE9vGgUljjMgo59fwwUiwvjISA6UfCPBs
5w6urcuZiUrHUV/bAamlkcmpuepyZl2ffH4qeKXmHY0SP9HhJKkvTZiC6v+6PNSH
A4ATKY5Zl7Om3g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:43:49 2026 by rpki-client