Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: AiiKUyQHM2hZlJE8hR0vtXdaK0Lbl1f5W3blccgTCl8=
Subject key identifier: E8:03:84:41:A1:FA:DD:AA:CD:79:50:5B:AA:25:56:D0:E5:C8:65:13
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 019F9090DDA2B58DA03C10A431531F1F109B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: 0389
Signing time: Thu 23 Jul 2026 20:00:40 +0000
Manifest this update: Thu 23 Jul 2026 20:00:40 +0000
Manifest next update: Fri 24 Jul 2026 20:00:40 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: GhceBiCJ6wce2yX+uaErqBZOallCYYzMpvpTaH9r/8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:dd:a2:b5:8d:a0:3c:10:a4:31:53:1f:1f:10:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: Jul 23 20:00:40 2026 GMT
Not After : Jul 24 20:00:40 2026 GMT
Subject: CN=e8038441a1faddaacd79505baa2556d0e5c86513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:76:8c:07:ec:a8:03:86:a4:3f:08:19:58:
e9:3c:66:d6:36:43:1c:d1:f8:d5:cf:a1:d9:ae:99:
ab:27:26:a0:23:f9:31:96:4a:43:10:33:19:76:88:
5c:7d:f9:52:c4:43:cc:84:09:45:f3:e0:76:d9:b0:
08:55:18:89:da:15:80:95:0f:5b:7d:89:56:bd:ce:
04:04:e4:44:3a:88:a8:6b:0b:6e:80:ab:34:95:5a:
32:c4:e9:9c:26:39:cb:ff:b7:f2:de:e2:41:ef:98:
e1:39:10:10:f2:7f:33:cb:d4:f4:b8:4c:90:a8:06:
93:b3:e5:53:3c:67:03:3d:db:40:33:f1:45:08:fe:
58:05:b4:94:ac:cc:63:36:6f:68:01:28:9f:bd:bb:
71:4b:b0:fa:0a:29:67:f0:67:dc:2c:a4:98:6f:fc:
39:3c:38:a9:f1:e8:10:1e:33:bb:c3:62:90:bc:e1:
87:be:e3:f6:42:90:f7:26:b9:6f:7a:9e:d4:42:71:
9d:da:03:91:90:a6:25:7b:fe:5d:11:21:a6:1b:93:
62:c3:2f:61:56:ab:6c:d9:80:b7:03:77:da:90:29:
27:de:1c:c5:5c:8c:69:20:8c:92:ca:c6:cc:f0:38:
9f:2a:f2:60:fd:15:88:be:6d:9b:d7:a4:32:8c:1f:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:03:84:41:A1:FA:DD:AA:CD:79:50:5B:AA:25:56:D0:E5:C8:65:13
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c1:72:97:4d:df:bb:3a:13:23:e3:e5:f1:58:2c:6b:13:ae:
f1:ca:98:d1:b0:61:d2:ac:4d:6a:27:95:c6:6a:c1:25:18:ed:
b6:7a:e9:d9:55:b4:db:44:8e:fb:ee:98:71:42:31:fd:06:f5:
48:a6:77:e0:ac:e9:e7:fc:5a:6e:40:23:65:e3:99:32:b9:d1:
d2:dc:d8:31:af:40:9d:79:c8:1b:11:f4:c1:e4:83:66:19:3b:
26:58:07:a9:45:b8:eb:41:19:ce:87:78:5e:41:e1:8f:87:47:
13:d9:24:9f:9a:21:49:b5:38:ac:e3:d4:eb:a9:90:11:17:9f:
dd:88:20:a2:48:99:ee:89:9b:7f:9e:94:cf:9e:c3:96:f2:95:
d5:31:2d:e0:aa:fc:46:07:c0:05:fa:44:4e:c8:e8:92:cc:58:
20:e4:52:e5:56:d9:79:ef:36:18:45:cd:9c:40:25:3c:85:af:
f6:93:41:e2:c6:7e:0f:9e:b8:ab:d5:f4:0b:f9:2b:42:85:8e:
ab:59:55:16:9f:e3:8a:aa:64:19:93:33:2f:8a:e4:cf:3b:61:
79:19:1b:e2:a0:f8:54:4e:56:49:67:98:b0:1a:69:c9:a9:ba:
e6:93:58:cc:c4:19:53:d9:c7:82:6f:3a:a7:33:2e:47:6e:ea:
8f:33:9b:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkN2itY2gPBCkMVMfHxCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmJmZjM2YmY5NTdhOTE2N2VlM2YwZmE0YTY0ZDg3MjUx
NmU3MmQwHhcNMjYwNzIzMjAwMDQwWhcNMjYwNzI0MjAwMDQwWjAzMTEwLwYDVQQD
EyhlODAzODQ0MWExZmFkZGFhY2Q3OTUwNWJhYTI1NTZkMGU1Yzg2NTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr52jAfsqAOGpD8IGVjpPGbWNkMc
0fjVz6HZrpmrJyagI/kxlkpDEDMZdohcfflSxEPMhAlF8+B22bAIVRiJ2hWAlQ9b
fYlWvc4EBOREOoioawtugKs0lVoyxOmcJjnL/7fy3uJB75jhORAQ8n8zy9T0uEyQ
qAaTs+VTPGcDPdtAM/FFCP5YBbSUrMxjNm9oASifvbtxS7D6Ciln8GfcLKSYb/w5
PDip8egQHjO7w2KQvOGHvuP2QpD3Jrlvep7UQnGd2gORkKYle/5dESGmG5Niwy9h
Vqts2YC3A3fakCkn3hzFXIxpIIySysbM8DifKvJg/RWIvm2b16QyjB8idQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgDhEGh+t2qzXlQW6olVtDlyGUTMB8GA1UdIwQY
MBaAFNkr/za/lXqRZ+4/D6SmTYclFuctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjct
NWRmZWI5NzgyY2ZiLzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjctNWRmZWI5NzgyY2Zi
LzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMFyl03f
uzoTI+Pl8VgsaxOu8cqY0bBh0qxNaieVxmrBJRjttnrp2VW020SO++6YcUIx/Qb1
SKZ34Kzp5/xabkAjZeOZMrnR0tzYMa9AnXnIGxH0weSDZhk7JlgHqUW460EZzod4
XkHhj4dHE9kkn5ohSbU4rOPU66mQERef3YggokiZ7ombf56Uz57DlvKV1TEt4Kr8
RgfABfpETsjoksxYIORS5VbZee82GEXNnEAlPIWv9pNB4sZ+D564q9X0C/krQoWO
q1lVFp/jiqpkGZMzL4rkzztheRkb4qD4VE5WSWeYsBppyam65pNYzMQZU9nHgm86
pzMuR27qjzObnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:42 2026 by rpki-client