
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File: 2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier: AJqvH7v2qZI0BhuyRjSAu/0Hp3CSf8hVXJghF71P/YQ=
Subject key identifier: 78:6D:C4:3F:40:70:C2:D4:EE:55:65:FA:E3:ED:34:F7:39:BD:14:04
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer: /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial: 01A0CEFFF12589AEC767F1A9DA302B75D7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 16:01:14 +0000
Manifest this update: Wed 23 Sep 2026 16:01:14 +0000
Manifest next update: Thu 24 Sep 2026 16:01:14 +0000
Files and hashes: 1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: fY/FPJnRfUryIl9NCVeP/tfEZAhdgfhk94UwlLPkhQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:f1:25:89:ae:c7:67:f1:a9:da:30:2b:75:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Validity
Not Before: Sep 23 16:01:14 2026 GMT
Not After : Sep 24 16:01:14 2026 GMT
Subject: CN=786dc43f4070c2d4ee5565fae3ed34f739bd1404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:46:91:89:06:96:76:ff:a3:d4:6d:53:41:
1b:75:70:be:ba:5f:73:29:04:1d:4b:4e:fd:34:bb:
38:22:41:ef:da:f6:bf:02:15:52:67:30:ca:01:3b:
37:2e:50:dd:05:c8:76:44:1f:e5:88:f1:4d:89:5d:
67:80:42:12:46:03:9f:74:e4:f4:e1:66:95:1d:a0:
87:37:e2:8f:41:29:11:1b:7e:8b:c9:a6:be:4c:c0:
a5:29:6f:a3:32:90:2c:99:b8:01:ec:e8:0a:d6:05:
37:42:1d:5f:ba:8b:53:95:90:e5:a9:f3:01:8c:9c:
fc:08:51:64:05:14:f9:0a:b6:d6:34:b5:b0:53:a4:
67:79:d1:79:44:ec:92:18:72:11:75:d8:b6:f4:4a:
1d:8c:a4:92:6b:39:76:39:9e:68:9b:9d:2b:52:7a:
55:4a:ba:37:43:26:16:5d:9b:4f:ca:ec:cb:2c:1a:
68:fd:ed:e7:b5:97:0c:d6:f3:1f:98:8d:07:8f:03:
87:a5:e9:7b:fb:cf:e3:fd:6d:66:4c:ba:0c:5e:f0:
45:11:a7:13:28:80:51:d7:48:66:99:10:7d:37:a2:
96:38:03:f3:b8:23:ab:90:c5:a7:cf:04:33:04:97:
24:37:df:c9:c8:e4:e1:86:c5:4b:81:8b:ed:67:00:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:C4:3F:40:70:C2:D4:EE:55:65:FA:E3:ED:34:F7:39:BD:14:04
X509v3 Authority Key Identifier:
keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2a:4f:9c:01:71:82:0b:fe:4d:7c:23:ec:14:36:1e:1a:ba:
1b:8f:2e:3e:a0:f6:e4:92:92:28:ba:a1:fb:1c:d9:65:57:45:
9f:9c:ef:9b:8c:6e:f8:5b:5a:23:5b:89:a4:d4:8c:d2:60:6c:
bb:d4:9b:ac:2a:6b:53:1a:f4:53:f7:1e:c5:23:80:a4:fe:41:
3a:95:40:b1:3a:d7:0b:00:bd:87:c4:54:28:6d:d1:9c:f8:e6:
30:80:c7:f3:95:97:30:24:67:1b:ea:9d:82:d7:eb:18:72:6d:
4d:9d:16:90:18:eb:91:13:31:4f:79:85:d2:1b:8b:2f:d9:f9:
44:89:d1:b3:3c:fa:6e:4e:bb:1b:53:1f:a6:30:9f:c6:a9:34:
ae:79:3a:b8:cd:07:b6:ae:09:20:ef:b9:36:d7:b5:c8:27:79:
50:c2:a2:0e:e4:65:25:81:3e:09:01:8c:eb:43:38:92:a2:84:
56:be:c8:b0:d7:a3:62:4a:fe:9d:f7:ab:c3:8a:75:8e:5f:da:
e1:51:b0:56:e6:17:74:01:0c:e6:3a:2b:50:73:7b:de:8e:9c:
72:01:12:c1:d8:ed:a2:50:45:1f:f3:ad:1c:5c:d2:49:80:53:
ee:0f:0a:53:cb:dd:b8:41:a8:2e:92:c3:d5:81:1d:75:fe:2e:
78:62:35:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO//Elia7HZ/Gp2jArddfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Y2ZhMGU0NDhhYmUzMGQyNmIwNjY1YTljMjk0ZDI5Yzk3
YjdlYmYwHhcNMjYwOTIzMTYwMTE0WhcNMjYwOTI0MTYwMTE0WjAzMTEwLwYDVQQD
Eyg3ODZkYzQzZjQwNzBjMmQ0ZWU1NTY1ZmFlM2VkMzRmNzM5YmQxNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8NGkYkGlnb/o9RtU0EbdXC+ul9z
KQQdS079NLs4IkHv2va/AhVSZzDKATs3LlDdBch2RB/liPFNiV1ngEISRgOfdOT0
4WaVHaCHN+KPQSkRG36Lyaa+TMClKW+jMpAsmbgB7OgK1gU3Qh1fuotTlZDlqfMB
jJz8CFFkBRT5CrbWNLWwU6RnedF5ROySGHIRddi29EodjKSSazl2OZ5om50rUnpV
Sro3QyYWXZtPyuzLLBpo/e3ntZcM1vMfmI0HjwOHpel7+8/j/W1mTLoMXvBFEacT
KIBR10hmmRB9N6KWOAPzuCOrkMWnzwQzBJckN9/JyOThhsVLgYvtZwB6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhtxD9AcMLU7lVl+uPtNPc5vRQEMB8GA1UdIwQY
MBaAFNnPoORIq+MNJrBmWpwpTSnJe36/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDIt
NWRmZGQyNTlkZDFiLzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9hMDE3MDUtN2EwNi00YjA0LTg2NDItNWRmZGQyNTlkZDFi
LzEvMmMtZzVFaXI0dzBtc0daYW5DbE5LY2w3ZnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSpPnAFx
ggv+TXwj7BQ2Hhq6G48uPqD25JKSKLqh+xzZZVdFn5zvm4xu+FtaI1uJpNSM0mBs
u9SbrCprUxr0U/cexSOApP5BOpVAsTrXCwC9h8RUKG3RnPjmMIDH85WXMCRnG+qd
gtfrGHJtTZ0WkBjrkRMxT3mF0huLL9n5RInRszz6bk67G1MfpjCfxqk0rnk6uM0H
tq4JIO+5Nte1yCd5UMKiDuRlJYE+CQGM60M4kqKEVr7IsNejYkr+nferw4p1jl/a
4VGwVuYXdAEM5jorUHN73o6ccgESwdjtolBFH/OtHFzSSYBT7g8KU8vduEGoLpLD
1YEddf4ueGI1qg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:51:07 2026 by rpki-client