Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: csMhvlovB/rjCmHxPswW2nFMbDaY7rU6iGqSduKSL40=
Subject key identifier: 0B:6F:52:58:B8:99:F4:FB:B1:9F:79:C1:E2:AC:AA:FD:D2:FA:9E:0B
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 019E1DC7A7DAC88229E8142E9931619FEB75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: 02C9
Signing time: Tue 12 May 2026 20:01:24 +0000
Manifest this update: Tue 12 May 2026 20:01:24 +0000
Manifest next update: Wed 13 May 2026 20:01:24 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: 9gNAtk4driK5c95tXJLWGb15UNLcjUkZx1s1dYmzLlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a7:da:c8:82:29:e8:14:2e:99:31:61:9f:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: May 12 20:01:24 2026 GMT
Not After : May 13 20:01:24 2026 GMT
Subject: CN=0b6f5258b899f4fbb19f79c1e2acaafdd2fa9e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9f:8e:2c:d9:2d:cf:8c:5f:0b:eb:ef:5f:ac:
97:f7:f7:a8:64:12:98:37:43:96:21:4d:70:c1:e3:
c2:82:81:f1:90:11:3b:27:27:c6:69:3b:b8:2e:d3:
4b:37:64:43:37:58:d0:6f:37:00:90:07:a9:04:a8:
b5:cc:8a:b3:00:38:6b:b7:a6:73:e7:05:3b:9e:08:
70:6f:35:d5:77:55:38:cd:8b:40:39:28:5f:6f:3c:
d7:ad:8d:f8:cc:b9:6f:a5:ee:37:b1:40:17:02:40:
48:78:37:70:b7:89:99:2b:61:b1:e2:78:36:20:d4:
c1:46:be:70:ae:3b:d0:7d:1d:d4:83:1d:76:58:22:
6b:e6:83:65:a4:33:71:16:4b:41:87:c4:c7:9b:d7:
6a:e6:d0:14:46:9a:cf:5b:c5:df:a3:47:ea:c7:75:
2c:d7:db:2c:92:0c:70:50:da:41:40:44:d9:84:7f:
99:09:53:38:8b:12:b4:72:2b:a9:75:84:05:3c:ed:
e3:59:80:c8:6a:4d:1a:59:f8:68:6d:74:c3:02:66:
70:b2:92:62:96:89:c1:2a:5b:a2:ab:7d:3c:d2:80:
51:bf:3d:81:99:14:01:81:65:52:9b:c6:9c:74:ef:
7c:be:7e:d4:76:25:87:e5:4c:2d:ba:be:28:68:11:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:52:58:B8:99:F4:FB:B1:9F:79:C1:E2:AC:AA:FD:D2:FA:9E:0B
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3e:c3:fd:18:b0:77:c8:57:ba:fe:e0:0a:b7:ef:0e:73:a5:
9a:f9:fb:f8:f7:9d:18:cf:a6:8d:40:fb:73:b4:71:82:1c:d1:
e9:7e:75:66:09:fc:8b:44:6a:5c:a1:ef:31:b0:39:93:30:dd:
a3:8d:3d:c5:86:da:a6:62:06:23:b2:04:3d:b7:d5:a5:eb:33:
8f:ed:ee:55:ca:09:3f:14:53:56:1b:60:88:17:a0:2b:39:7f:
b8:2d:c1:b9:19:7e:1c:2a:ba:9f:f6:18:8b:7a:b4:e6:94:86:
a6:7b:91:5b:bd:05:0c:57:2e:f2:cf:b6:a0:8a:31:4e:97:5b:
5e:ab:cf:d7:c3:c0:5a:f3:b5:4c:83:83:f0:6c:45:6d:28:42:
65:b3:1b:4a:23:81:e6:5c:96:f2:18:97:d7:34:ee:92:e3:8e:
a4:a6:16:5e:5f:1b:7b:b8:f3:2d:cc:52:c5:a5:72:d9:9a:34:
64:db:bd:f2:3f:f4:4d:fb:55:db:57:4c:6e:b6:fb:ee:e4:40:
e0:7d:f7:c2:bc:c1:6d:d9:90:ef:a8:43:ae:aa:a0:f6:ee:1d:
b9:e7:89:dc:01:db:f9:c8:f1:4a:8a:c9:85:ee:fc:b5:91:7a:
89:ba:e4:4c:04:77:dd:24:3b:cc:21:b9:2d:74:bf:1a:60:8d:
1c:56:30:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:59 2026 by rpki-client