Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: EZhxTB7XpyVDNbFpX7XqqaywvGgpMhN0iVilmxaMq+w=
Subject key identifier: 3D:49:27:B2:9A:D7:4A:7E:F8:00:DC:92:2A:E8:44:A7:01:B2:FC:4B
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019F8F10E601514CA25BEEC2C368916535CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 13:01:16 +0000
Manifest this update: Thu 23 Jul 2026 13:01:16 +0000
Manifest next update: Fri 24 Jul 2026 13:01:16 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: DTQUgfZfTz6kHMXcpJ5NjIf60JgKS7NDWdEnxQviZw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:e6:01:51:4c:a2:5b:ee:c2:c3:68:91:65:35:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Jul 23 13:01:16 2026 GMT
Not After : Jul 24 13:01:16 2026 GMT
Subject: CN=3d4927b29ad74a7ef800dc922ae844a701b2fc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:c0:37:f6:1e:7c:93:97:47:6e:83:18:be:
9a:b2:61:27:52:2f:ad:50:db:11:d1:d1:00:f0:84:
1f:f1:58:82:6a:68:28:f1:d8:68:42:82:1f:91:83:
02:cd:44:fe:ae:3e:a5:51:1b:c4:3e:e2:12:07:ec:
c7:5c:f1:3e:57:2f:d9:be:2e:ca:70:61:13:64:18:
36:27:b7:7d:b6:9d:ac:16:77:8d:f5:f2:92:88:1d:
89:87:e6:17:af:c5:50:fe:b7:21:ba:de:4d:9e:0a:
bb:b9:3f:e6:a2:2d:81:2d:9f:d2:b9:f6:07:af:e1:
3b:0f:0c:f6:02:90:68:6b:b8:91:49:b5:8a:2a:e8:
ac:2f:ae:50:39:f3:a6:84:08:e7:28:e4:1e:e8:61:
df:46:78:ad:ad:c0:ea:1f:f3:b0:68:d4:fb:97:f8:
fc:27:49:73:fc:11:60:08:63:3f:9c:33:8f:93:13:
30:76:89:41:06:a5:a0:c0:dc:42:b2:60:bc:cd:d4:
80:83:89:a7:5d:1c:d5:80:ad:9e:93:5d:1b:19:58:
03:46:1a:ca:9c:bb:58:2c:ab:ef:9c:09:4d:b5:4c:
79:1d:97:bf:89:73:60:46:3c:1b:9c:d5:cd:ea:36:
85:b2:d6:04:35:c9:11:5d:dd:77:91:66:2c:80:38:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:49:27:B2:9A:D7:4A:7E:F8:00:DC:92:2A:E8:44:A7:01:B2:FC:4B
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0a:09:6f:6d:3c:2a:8f:36:1e:68:29:8e:28:62:25:54:a6:
2d:9b:65:5b:3f:53:2a:fe:ed:73:1c:07:40:3d:fc:15:72:85:
1b:41:3d:58:32:a5:41:fe:14:cf:74:15:37:e1:b2:ba:27:f0:
62:de:bc:d5:e9:f4:e7:73:49:73:e9:23:05:32:94:2e:e5:4a:
6b:e9:d4:87:60:53:27:8f:2f:b5:ef:b1:cb:9b:9a:da:d6:91:
25:7b:a2:7d:82:a0:45:35:15:8f:13:31:7e:b5:17:63:ae:5d:
a0:5c:6b:c2:c4:cb:eb:66:3a:61:d5:c7:48:e1:e1:0c:a1:8b:
0e:15:d8:c1:ad:39:cf:4c:f9:6f:2a:99:8a:b3:61:3c:8a:85:
d5:94:cb:a5:ea:bd:2a:65:c5:1c:65:ab:a6:58:8f:ca:55:67:
16:03:28:a7:14:6d:98:03:e4:d5:ff:98:17:72:77:3a:56:64:
f2:5b:aa:ef:be:c5:f4:b3:de:0b:15:e1:32:02:10:28:c2:a0:
f0:2c:b2:d6:e9:63:2b:3a:0a:d7:26:9e:1a:da:7e:bd:4f:49:
c4:58:d2:a5:23:89:2c:3f:2b:07:dd:3a:9d:fd:da:f8:1f:54:
ab:7c:8f:63:76:bb:af:2a:8d:d5:98:10:74:1c:47:9f:7f:ca:
44:75:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:00 2026 by rpki-client