Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
File: 2nVBcltyi1qJ87-vIPh2VWPC8_s.mft (raw, json)
Hash identifier: CDCThCZA4HSvr/+GiWD+poBUdE+HA+ANaOxhgr4fatk=
Subject key identifier: 35:7A:59:7E:D0:7B:67:41:87:6B:63:E3:45:5A:4A:F5:0B:DC:57:06
Authority key identifier: DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
Certificate issuer: /CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Certificate serial: 019D2AE070F442CEFFCD2C5A6C263D529A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:00:45 +0000
Manifest this update: Thu 26 Mar 2026 16:00:45 +0000
Manifest next update: Fri 27 Mar 2026 16:00:45 +0000
Files and hashes: 1: 2nVBcltyi1qJ87-vIPh2VWPC8_s.crl (hash: 0sgEZ9odDxhYCyttgxa/DbZjsS1EU5Pt6PdzyZgCtsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:70:f4:42:ce:ff:cd:2c:5a:6c:26:3d:52:9a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7541725b728b5a89f3bfaf20f8765563c2f3fb
Validity
Not Before: Mar 26 16:00:45 2026 GMT
Not After : Mar 27 16:00:45 2026 GMT
Subject: CN=357a597ed07b6741876b63e3455a4af50bdc5706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:e3:b4:e8:87:5f:9f:f6:16:e5:a5:61:ec:
13:56:04:e9:d3:24:95:ba:2f:b0:f8:a1:06:a6:74:
c8:7a:5c:d8:c7:b4:5a:28:79:1a:4d:1a:3f:57:99:
9e:11:ea:84:cf:91:29:0a:74:30:67:32:38:1e:91:
6c:0e:96:5b:f7:bd:f3:e9:6a:a6:e7:84:a0:a2:a1:
18:44:43:3e:fe:28:a2:a6:83:af:66:c9:8d:50:72:
0b:69:33:06:bc:d0:1a:b7:16:9f:10:f1:14:73:fd:
b1:58:e1:51:f6:03:7a:9d:43:e9:d1:6b:77:4c:b3:
79:0b:1c:b4:a2:ae:d8:a8:92:55:31:a7:93:41:ae:
5f:cb:f9:21:af:31:c2:fe:50:81:6c:96:42:05:b2:
d0:60:18:31:64:4c:46:a3:95:48:f2:17:b9:d8:0a:
e0:32:c0:24:8e:f9:fa:c5:0e:04:3b:0b:75:96:fc:
60:83:e3:86:ec:5f:38:64:e5:d7:89:2b:a0:24:6b:
df:66:10:8b:cc:28:ef:81:fe:82:b5:e3:b0:1b:99:
e0:2a:82:92:c7:2b:7b:4c:a6:cf:4b:1a:17:10:fc:
33:16:84:58:96:8c:fe:5c:82:fe:64:bb:36:52:a3:
29:08:eb:12:0b:a8:a7:76:ac:fa:f6:59:15:ad:ff:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:59:7E:D0:7B:67:41:87:6B:63:E3:45:5A:4A:F5:0B:DC:57:06
X509v3 Authority Key Identifier:
keyid:DA:75:41:72:5B:72:8B:5A:89:F3:BF:AF:20:F8:76:55:63:C2:F3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nVBcltyi1qJ87-vIPh2VWPC8_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4d39b1-fc9a-4476-a79c-db8fd507d1b6/1/2nVBcltyi1qJ87-vIPh2VWPC8_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ea:84:99:14:20:10:3f:86:ce:f5:3f:a8:1b:a5:c5:1a:5c:
de:6f:39:2c:3a:cc:7a:bc:18:5a:88:55:1f:c5:58:03:a8:b7:
a7:7e:69:18:e3:9c:a0:2d:97:e9:d1:81:ec:dd:b2:07:42:cf:
7b:66:ba:5a:50:4b:83:ac:46:14:32:60:78:72:b8:ae:d7:ef:
dd:14:61:db:a7:79:1e:e2:1b:03:b6:57:ab:77:be:34:4b:a3:
51:0f:b8:3e:1f:eb:16:6c:5f:e7:ba:73:43:0a:a7:6b:c4:6e:
3e:fd:84:7e:b2:78:35:a6:a7:e7:79:e3:c3:7c:61:14:7b:cf:
f3:42:a9:f9:06:ee:1b:06:3e:5d:44:c3:77:81:dc:0b:86:98:
cd:a3:ee:97:f1:b4:29:94:1f:96:3e:91:7f:1e:91:80:2d:ad:
f1:45:1e:a0:d7:5c:be:e6:8b:d8:11:49:30:04:a5:fe:3a:30:
c0:4c:7b:91:27:5f:1a:61:33:ef:7b:b2:cd:ec:be:76:fa:03:
5e:e6:5c:d4:a4:cf:f2:57:ca:92:59:91:de:88:e4:aa:5b:93:
0e:95:05:6e:fc:97:d2:94:75:ce:b5:0e:dd:a2:a5:22:6f:f9:
f5:03:04:bd:86:4a:c5:eb:07:ab:37:4e:e5:0c:d8:40:fa:e6:
f8:4c:f0:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4HD0Qs7/zSxabCY9UpodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzU0MTcyNWI3MjhiNWE4OWYzYmZhZjIwZjg3NjU1NjNj
MmYzZmIwHhcNMjYwMzI2MTYwMDQ1WhcNMjYwMzI3MTYwMDQ1WjAzMTEwLwYDVQQD
EygzNTdhNTk3ZWQwN2I2NzQxODc2YjYzZTM0NTVhNGFmNTBiZGM1NzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksfjtOiHX5/2FuWlYewTVgTp0ySV
ui+w+KEGpnTIelzYx7RaKHkaTRo/V5meEeqEz5EpCnQwZzI4HpFsDpZb973z6Wqm
54SgoqEYREM+/iiipoOvZsmNUHILaTMGvNAatxafEPEUc/2xWOFR9gN6nUPp0Wt3
TLN5Cxy0oq7YqJJVMaeTQa5fy/khrzHC/lCBbJZCBbLQYBgxZExGo5VI8he52Arg
MsAkjvn6xQ4EOwt1lvxgg+OG7F84ZOXXiSugJGvfZhCLzCjvgf6CteOwG5ngKoKS
xyt7TKbPSxoXEPwzFoRYloz+XIL+ZLs2UqMpCOsSC6indqz69lkVrf/eRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV6WX7Qe2dBh2tj40VaSvUL3FcGMB8GA1UdIwQY
MBaAFNp1QXJbcotaifO/ryD4dlVjwvP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMt
ZGI4ZmQ1MDdkMWI2LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny80ZDM5YjEtZmM5YS00NDc2LWE3OWMtZGI4ZmQ1MDdkMWI2
LzEvMm5WQmNsdHlpMXFKODctdklQaDJWV1BDOF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+qEmRQg
ED+GzvU/qBulxRpc3m85LDrMerwYWohVH8VYA6i3p35pGOOcoC2X6dGB7N2yB0LP
e2a6WlBLg6xGFDJgeHK4rtfv3RRh26d5HuIbA7ZXq3e+NEujUQ+4Ph/rFmxf57pz
Qwqna8RuPv2EfrJ4Naan53njw3xhFHvP80Kp+QbuGwY+XUTDd4HcC4aYzaPul/G0
KZQflj6Rfx6RgC2t8UUeoNdcvuaL2BFJMASl/jowwEx7kSdfGmEz73uyzey+dvoD
XuZc1KTP8lfKklmR3ojkqluTDpUFbvyX0pR1zrUO3aKlIm/59QMEvYZKxesHqzdO
5QzYQPrm+EzwKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:57 2026 by rpki-client