Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: 7xe51yiIwwbLteOLKrbkBOcWfk4ggBWJMFWN/FiH3UQ=
Subject key identifier: 95:D0:C7:64:02:E3:7B:E9:A5:B4:0E:65:42:AF:4D:A9:95:34:D6:E9
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 01A1E05F0C06A5F9F0922B87D8F3BC46D2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1AF4
Signing time: Sun 15 Nov 2026 18:01:27 +0000
Manifest this update: Sun 15 Nov 2026 18:01:27 +0000
Manifest next update: Mon 16 Nov 2026 18:01:27 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: NPx+F+DRvlbHynT1sDf5qvC/U+IIy/MGnP2eb2WKFu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:0c:06:a5:f9:f0:92:2b:87:d8:f3:bc:46:d2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Nov 15 18:01:27 2026 GMT
Not After : Nov 16 18:01:27 2026 GMT
Subject: CN=95d0c76402e37be9a5b40e6542af4da99534d6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:77:d2:49:3a:d7:17:41:b5:0b:d5:f0:8f:
5a:01:f6:93:80:3f:f0:77:a3:e6:b6:e9:80:08:4f:
19:0b:63:06:38:aa:81:46:ec:b5:5f:64:c9:6d:19:
be:5e:50:43:7d:c2:b9:62:fb:96:24:73:52:6e:7a:
a8:ba:c8:42:75:90:6c:0c:d2:da:8d:fe:2e:a7:6d:
2e:dd:e9:fe:ee:6a:35:fe:cf:63:11:f9:8f:8e:8b:
3a:cb:96:10:56:be:aa:22:43:fc:96:a5:11:a3:fb:
36:40:6d:3c:36:ff:6b:d5:92:6a:d3:3f:b2:c8:06:
66:c5:f1:5d:3f:f7:09:b0:6f:65:96:0f:77:60:78:
16:7b:ee:fc:b8:4d:21:28:c8:47:96:97:47:88:f6:
f8:2b:50:4c:6d:26:cd:0d:d5:a4:d3:d6:9d:8c:a1:
65:ac:ab:ca:b2:d1:42:79:35:40:27:96:f6:c1:9a:
b9:c8:04:3d:4e:c5:26:c5:3c:96:6b:5f:1d:18:a0:
b8:01:8b:8c:b3:85:8b:6d:04:a5:1c:22:5a:60:ab:
11:80:02:59:0f:a7:45:1e:3a:64:18:6b:e2:6b:06:
69:50:38:e3:d4:5a:19:f7:a1:6c:8e:5f:9b:aa:ff:
97:81:fd:b8:65:23:0a:b6:9d:94:2e:74:ef:89:ab:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:C7:64:02:E3:7B:E9:A5:B4:0E:65:42:AF:4D:A9:95:34:D6:E9
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:0f:a2:73:81:35:e9:ba:10:21:79:38:b1:4d:1d:ef:e7:
5e:61:45:50:7b:2a:ac:db:00:c6:6b:f9:e4:b5:c4:8b:b8:25:
4f:ed:b2:73:58:0d:eb:ac:1a:e2:39:b4:6f:db:62:64:10:bb:
33:2e:d8:4c:31:48:22:cd:e8:f3:f1:c9:4f:1e:f3:80:c3:93:
da:ef:99:3e:c0:10:11:5a:4d:ff:61:a1:ba:15:de:d4:69:ed:
35:b5:34:99:f4:05:e4:0b:25:d4:3a:0e:48:ff:0a:5c:bd:3b:
9c:2f:81:99:34:d6:7f:e0:5f:d0:3f:4e:27:d1:a6:f9:a5:e4:
7a:0a:1a:0d:d1:78:8b:97:24:61:ca:86:a0:5a:12:bb:f9:93:
ef:c2:3b:c6:f6:59:4a:3e:09:23:0d:9e:52:58:6b:64:8c:53:
73:27:e6:de:e1:e8:d6:97:c7:11:89:5b:27:83:f5:1c:ac:6f:
e2:3b:b3:48:9f:3c:c5:01:c2:25:8c:d8:50:b2:1d:bd:74:de:
a6:de:43:56:1b:83:75:c0:12:85:fb:22:bc:3e:04:6e:1a:bf:
6a:b4:e2:12:fd:5c:6c:d0:17:a9:4b:84:a1:ad:06:1a:d6:7f:
e1:7a:f3:ed:39:a9:de:86:46:26:71:08:69:66:9e:73:fb:83:
8f:1a:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:41 2026 by rpki-client