Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: 8lsHQv+sqppq1BFwKIxQhK1fRqMsbJs0vPkdvVobvCc=
Subject key identifier: 02:B7:F1:5D:98:C6:8D:B6:C9:6D:10:F0:01:19:12:FD:FF:88:61:18
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 019E1EA3F3589BB48D70C1606F0E1E3C3B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1902
Signing time: Wed 13 May 2026 00:02:01 +0000
Manifest this update: Wed 13 May 2026 00:02:01 +0000
Manifest next update: Thu 14 May 2026 00:02:01 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: KDw/5SXs99DnqgKXtc/B6xnPYB6X5CJtYZtuv6s6fR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:f3:58:9b:b4:8d:70:c1:60:6f:0e:1e:3c:3b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: May 13 00:02:01 2026 GMT
Not After : May 14 00:02:01 2026 GMT
Subject: CN=02b7f15d98c68db6c96d10f0011912fdff886118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:7b:5e:74:3d:8c:de:86:57:98:b6:33:42:
e1:0e:16:5b:5e:97:71:64:94:91:b1:56:80:37:90:
7a:e7:68:0a:f8:65:e7:88:73:45:10:be:e5:61:91:
80:aa:da:68:68:49:34:8f:0d:8e:b6:25:f6:2d:17:
ba:d3:7b:79:ec:a1:6c:d9:d9:ba:37:86:25:2e:f8:
27:7e:99:54:9c:31:9f:93:88:26:3f:10:74:ca:9a:
0e:98:b1:17:5f:69:33:df:6b:0f:b5:17:d9:4d:85:
97:00:cd:6b:7f:3c:c1:29:9b:58:f6:34:e3:a0:1e:
f3:d9:e0:5d:5d:fe:3d:b8:81:3c:29:51:e5:86:a7:
e4:45:df:38:82:02:9b:56:8c:7f:ae:4e:0d:57:6f:
80:10:55:93:0f:6a:fd:c5:cf:5c:86:c3:58:a4:18:
56:6e:ec:65:22:2a:00:1b:06:9f:70:e5:7e:e5:d9:
97:38:25:31:c3:40:ad:5b:8a:5c:65:cb:7f:1a:b9:
49:26:ee:95:89:a0:86:51:44:50:9f:c3:d2:d3:45:
2c:59:f3:5c:89:28:6a:7c:62:ff:43:a7:af:a6:44:
ff:44:bb:2a:eb:41:a7:5a:21:ba:55:9a:6d:c5:8e:
4e:d1:10:07:05:b5:78:cc:f5:f1:76:00:9e:db:7e:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:F1:5D:98:C6:8D:B6:C9:6D:10:F0:01:19:12:FD:FF:88:61:18
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:50:6b:62:57:7a:52:70:f1:08:16:7f:e0:8a:9c:5c:8d:78:
a9:2c:74:39:fc:0a:98:1f:60:f6:c4:d5:2c:ae:d7:c2:17:53:
df:68:e1:88:fe:55:25:07:11:5a:81:d6:8f:89:22:12:30:c8:
3a:31:e4:dd:e5:e3:8a:31:b3:ee:16:93:c0:ef:2a:e1:4f:41:
f0:20:00:f2:96:7a:af:f9:8a:34:f4:9a:c9:b3:1a:e5:96:b5:
71:9f:d1:88:41:f0:cf:d7:c9:91:5a:f0:6d:52:8b:6c:39:4a:
45:b3:90:ef:3b:93:19:0e:66:ca:e6:89:9e:29:8b:de:af:9e:
de:b8:b8:8b:4c:41:58:03:c4:a3:79:90:b5:f8:c2:6e:89:a3:
68:a3:7c:c1:57:9a:b9:e5:15:52:ac:49:78:d0:2e:9e:0c:2e:
90:9d:96:39:81:a4:80:2c:52:0b:7b:53:ae:bd:dd:e4:1c:84:
72:95:9d:9a:5e:e7:05:5c:94:b8:6a:ec:09:00:0a:80:c5:ee:
9b:00:fc:6f:cb:23:a4:20:5e:2c:bc:fe:e4:1b:a7:55:d9:18:
09:e4:50:92:29:5d:81:72:15:df:75:e9:d7:db:4a:88:95:78:
54:23:b7:c7:c8:98:8f:6c:8b:da:db:88:81:ec:ef:a9:bf:51:
3a:a8:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:54 2026 by rpki-client