Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: CGTop4Y5fKc2KcG6zeFE7vjxYdlbX9wnekvGQwjs43A=
Subject key identifier: D6:7C:EC:B1:5B:F0:9D:B7:5F:47:EE:AD:93:F4:25:A6:7E:EA:5C:3D
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 01A0C9D8BDE38D5BDB915BFF887A4A5DF65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 16:00:19 +0000
Manifest this update: Tue 22 Sep 2026 16:00:19 +0000
Manifest next update: Wed 23 Sep 2026 16:00:19 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: vMMF7KlKUIcxgXtD5T73WUdaXEo6paI2WM2qMKAbztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:bd:e3:8d:5b:db:91:5b:ff:88:7a:4a:5d:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Sep 22 16:00:19 2026 GMT
Not After : Sep 23 16:00:19 2026 GMT
Subject: CN=d67cecb15bf09db75f47eead93f425a67eea5c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:47:14:89:a1:c1:14:94:84:ec:b0:cc:31:
25:86:c6:f2:80:9a:b3:e5:25:b1:b3:12:8b:b3:b6:
89:c0:c6:af:ff:f5:71:b3:14:ec:fd:00:85:29:33:
97:33:68:37:39:5c:88:e5:18:5b:c7:f3:be:08:24:
a1:2f:dc:b1:14:3f:d5:9f:38:4c:14:93:42:0f:91:
d1:65:9c:38:0f:19:71:1a:f6:b7:6e:0a:20:5f:5b:
5e:6c:08:91:35:64:26:ad:50:5b:49:31:5a:68:88:
89:1e:2e:40:e8:a9:53:55:8b:e9:7f:ee:3f:91:f7:
39:9a:8b:43:bb:ee:9f:5f:b0:e6:85:01:46:51:f9:
ad:8e:a5:b8:17:f4:cd:32:d2:39:b3:c6:95:e4:18:
56:49:12:df:2f:32:22:cc:26:3c:64:7b:91:47:6c:
3e:4d:ea:8a:7d:4d:8f:04:ec:44:31:ee:d8:74:f0:
da:d2:cf:7e:7f:52:42:a0:62:98:f3:9c:63:c3:71:
7b:c0:a8:04:ed:45:74:1f:8b:8f:be:30:25:61:6f:
e7:1c:72:63:92:06:96:4f:22:60:fd:ac:34:0d:3e:
de:78:4a:2f:d2:cc:7c:2e:4d:e4:15:3b:1e:e2:68:
01:a5:e7:6c:3c:90:ba:bf:55:d4:83:63:53:1a:e1:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:EC:B1:5B:F0:9D:B7:5F:47:EE:AD:93:F4:25:A6:7E:EA:5C:3D
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d9:a2:8d:c1:88:bd:92:3a:40:6f:0f:c3:9f:1d:c8:31:2f:
59:18:1f:c9:77:34:09:d8:ab:09:a2:49:20:d8:b1:10:ed:2b:
0b:b5:cb:17:f5:60:7b:0f:c0:d1:e8:45:82:e4:c4:d8:36:46:
cb:77:88:7d:bf:d5:10:29:49:3c:70:8a:ba:11:a2:57:a7:80:
06:50:15:01:c1:1a:cb:7a:70:b3:fe:98:9b:9b:a7:a9:22:39:
e3:10:18:4a:24:c8:e1:4d:cd:eb:46:c4:2f:cf:b9:eb:fe:59:
8c:79:22:63:dc:eb:e7:d3:4d:1b:ca:e8:f9:f4:f2:27:97:f9:
f7:fa:b6:b9:25:7a:65:87:84:05:37:ea:93:4d:45:8f:67:f5:
bf:f4:c0:2f:53:aa:16:20:99:80:32:ea:14:96:87:01:4a:29:
63:e7:74:61:96:07:e2:c5:5a:44:67:cf:a3:ca:aa:12:bc:4f:
33:e5:53:5f:df:70:17:ef:6d:6f:ea:4c:d3:19:62:b5:12:61:
04:30:0a:57:fd:d0:88:cf:5a:66:76:38:8a:33:75:82:eb:62:
72:48:c0:98:3b:82:85:cc:3c:20:34:fb:05:d6:bb:0f:36:22:
86:71:cd:19:ac:61:ef:0e:46:89:02:31:64:21:4b:22:8d:a9:
35:7a:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:40:57 2026 by rpki-client