Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: xCO0dNmrBQxMIqsSk/H2oMUmAmNbPzDCIJCUCkoLVQ4=
Subject key identifier: 67:58:0B:19:8D:20:D6:8B:22:61:FD:FA:95:21:15:A6:06:D9:9C:14
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 01A0CA47C77370F8081E39AD3BE07269D20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 18:01:36 +0000
Manifest this update: Tue 22 Sep 2026 18:01:36 +0000
Manifest next update: Wed 23 Sep 2026 18:01:36 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: urB+K5ZlcwKGu6v51thhD8ig3RYB9bdzmsDJPopzwdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:c7:73:70:f8:08:1e:39:ad:3b:e0:72:69:d2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Sep 22 18:01:36 2026 GMT
Not After : Sep 23 18:01:36 2026 GMT
Subject: CN=67580b198d20d68b2261fdfa952115a606d99c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:5c:3d:32:60:6a:03:03:6e:02:e4:0a:bf:
d3:78:1d:28:2e:4a:c2:f8:3a:81:43:3f:b6:83:6c:
0e:9d:2a:31:2d:ba:98:5d:c5:b1:7c:35:25:cd:64:
01:8f:b1:ef:c0:4d:db:44:4a:d2:35:75:1f:0e:16:
9c:91:35:e1:b3:8d:ba:db:6b:07:57:23:67:13:a5:
e8:02:1c:c9:9e:61:64:3e:bb:e7:68:d5:9e:c9:cc:
c9:5a:41:2f:30:f2:71:fc:a9:40:38:d3:83:88:a6:
f4:1f:2d:db:a8:ab:a9:98:30:90:fd:2f:a8:06:b7:
f2:f7:e7:f0:97:c1:cc:8b:63:7d:81:4a:43:98:55:
c4:a0:b8:3d:f2:90:38:16:a0:13:c3:c7:6f:6e:2c:
c9:8c:36:83:c3:4e:c2:58:2c:0b:d2:06:6d:d6:54:
9e:85:06:e6:1c:51:9c:13:23:34:04:e8:45:be:a3:
e2:68:fa:39:a0:b3:6e:80:92:9a:42:02:64:1a:d0:
49:4c:e5:7a:9d:14:a4:24:9d:80:42:b8:3b:97:de:
5e:8d:9f:3c:cc:82:e4:bf:a0:db:3f:b8:cd:4b:b2:
36:91:30:58:97:df:cc:e6:4f:5a:85:5e:10:9f:da:
2e:b8:51:6e:97:31:df:85:73:f9:72:2a:6d:2b:e8:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:58:0B:19:8D:20:D6:8B:22:61:FD:FA:95:21:15:A6:06:D9:9C:14
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ee:ac:b4:06:5d:bd:a5:6c:cb:c0:e0:f8:be:9b:aa:11:ce:
7f:3d:f7:ed:b6:bc:0c:e1:29:d1:20:60:57:6b:fc:2a:dd:9b:
ff:8c:91:b4:d1:41:c2:c9:d2:e0:60:a6:81:43:24:3b:7b:64:
26:ad:1b:10:52:b2:89:d7:6d:b1:5a:17:70:0f:f3:6a:52:78:
21:76:16:b5:7f:04:4a:97:04:70:9f:5d:af:da:d1:1f:d1:e0:
af:cb:34:2f:64:0c:43:44:12:5b:2b:a4:88:1e:b0:3d:d3:2c:
cb:eb:bb:2a:c5:ed:f0:69:91:c7:13:e6:6e:66:38:77:c1:0a:
29:b4:a2:ed:b8:ae:73:be:0c:89:54:25:a4:c6:af:2f:3d:63:
4e:00:f5:e8:d9:d4:0f:40:01:34:78:d1:ee:9b:da:a5:0a:44:
50:dd:6e:4a:ab:04:85:ed:ab:a0:d2:a2:35:9d:76:e0:cc:38:
5c:3b:84:3a:74:48:53:30:d0:28:e2:b7:a0:c9:7c:67:fd:e9:
d0:35:ac:e9:30:92:23:76:cd:91:fd:8a:fc:62:70:37:5f:dc:
0c:70:6d:62:ad:6c:b9:79:42:e4:ca:56:90:c7:0e:1b:88:4f:
a8:ec:9d:f0:8e:c7:de:a8:c8:fe:1d:e5:75:68:c2:01:e2:57:
f5:f9:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:20:29 2026 by rpki-client