Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: xjkPjm32tHSDdnzjDcPOqIlD/9qICjpxmlnaaqetxOE=
Subject key identifier: 00:0B:08:3B:D1:F1:77:0A:76:AD:AF:F7:6A:13:51:35:F7:33:02:4D
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 019D27A86C5EF6B7DC41C5D134BE89646A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 17E3
Signing time: Thu 26 Mar 2026 01:00:42 +0000
Manifest this update: Thu 26 Mar 2026 01:00:42 +0000
Manifest next update: Fri 27 Mar 2026 01:00:42 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: 18awtFvDEhUE/+lBwQWkVCP2HWuvRkGG6rli3VL9axA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6c:5e:f6:b7:dc:41:c5:d1:34:be:89:64:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: Mar 26 01:00:42 2026 GMT
Not After : Mar 27 01:00:42 2026 GMT
Subject: CN=000b083bd1f1770a76adaff76a135135f733024d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:83:78:19:83:ff:c0:78:d4:98:fb:b8:40:75:
d7:8b:81:95:1a:3c:20:99:c4:4b:a5:3b:00:ab:f0:
c2:62:61:e9:a2:76:53:38:49:b6:75:90:b0:98:cc:
df:d7:da:91:c3:c5:a6:cc:de:ba:50:9f:30:34:20:
32:d0:d9:51:d7:0c:c3:9a:07:5f:1b:c9:e2:ec:89:
95:8e:55:0a:56:37:d9:2a:53:96:89:5e:4d:f0:a2:
b6:ab:e4:64:20:98:b5:48:47:6f:8f:0a:f8:3e:15:
5a:9a:50:c7:6d:87:8d:43:a7:79:53:8f:27:24:9b:
ba:bd:62:ee:b3:90:08:62:65:6b:6d:64:40:df:70:
68:73:6f:90:56:c1:19:cf:58:7d:0b:20:80:41:18:
9b:a7:0f:71:78:42:88:8a:6c:1e:66:11:78:bb:30:
b7:61:e6:8a:50:e3:b9:1a:fe:dd:8c:c9:05:36:7f:
13:9a:16:c1:e8:bb:de:de:33:6f:73:87:f8:88:a3:
da:32:c5:ea:a8:1d:95:66:9b:fa:a7:16:3c:b2:c7:
8d:46:31:d8:a3:09:56:3f:bb:03:cd:00:da:e3:25:
c1:17:13:ff:c7:52:d8:e7:c4:c7:8d:b0:62:ea:49:
a4:67:50:c6:eb:9c:22:60:a4:3f:84:2e:f9:3b:4b:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:08:3B:D1:F1:77:0A:76:AD:AF:F7:6A:13:51:35:F7:33:02:4D
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f3:dd:ad:87:2f:e9:b9:48:89:1a:dd:81:8f:e2:4d:5b:7a:
15:34:fd:88:49:fd:cd:ee:8d:f8:9d:f0:d2:cf:cb:51:18:d8:
27:40:67:af:65:a0:3f:a2:48:93:d3:24:b7:d4:e2:06:4c:4c:
37:f9:ad:20:96:6d:ce:d4:7f:4f:f2:1f:f0:5f:b0:40:5f:95:
7e:38:0b:83:46:e8:fb:d6:2c:bd:4c:2f:97:34:43:9d:75:a8:
2c:0e:e2:b7:52:8e:da:75:59:9f:77:86:85:0a:ce:4a:aa:d5:
92:b9:8d:93:2c:5e:98:ac:fb:92:f4:bf:73:dd:44:0a:49:85:
0f:f6:11:b8:63:f4:7e:0e:18:b9:a0:67:2e:cd:98:bd:39:bc:
21:98:4f:41:55:96:f7:5d:c0:0a:d6:2b:fa:0c:64:3d:05:b1:
5a:b1:2c:de:c7:40:57:d1:bb:e8:e2:97:63:67:e9:d0:8b:93:
a1:96:a1:af:c5:16:1c:d3:2a:69:62:ff:72:b3:02:a3:a9:1f:
c7:dc:b3:2f:67:b6:36:cd:5b:d3:d1:44:82:4b:8a:4a:a2:4a:
d4:96:3d:e4:e8:b4:d8:f4:5c:64:e7:1b:35:87:7b:e5:0f:6a:
94:26:4e:8c:52:29:d7:d6:85:e5:21:7a:cf:84:1a:06:88:93:
ce:e1:f0:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGxe9rfcQcXRNL6JZGoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGFjZDhhOTcyYzBlNzM3MTFhY2Y0N2UwYzg0NTlhMWNm
NzI2MDYwHhcNMjYwMzI2MDEwMDQyWhcNMjYwMzI3MDEwMDQyWjAzMTEwLwYDVQQD
EygwMDBiMDgzYmQxZjE3NzBhNzZhZGFmZjc2YTEzNTEzNWY3MzMwMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIN4GYP/wHjUmPu4QHXXi4GVGjwg
mcRLpTsAq/DCYmHponZTOEm2dZCwmMzf19qRw8WmzN66UJ8wNCAy0NlR1wzDmgdf
G8ni7ImVjlUKVjfZKlOWiV5N8KK2q+RkIJi1SEdvjwr4PhVamlDHbYeNQ6d5U48n
JJu6vWLus5AIYmVrbWRA33Boc2+QVsEZz1h9CyCAQRibpw9xeEKIimweZhF4uzC3
YeaKUOO5Gv7djMkFNn8TmhbB6Lve3jNvc4f4iKPaMsXqqB2VZpv6pxY8sseNRjHY
owlWP7sDzQDa4yXBFxP/x1LY58THjbBi6kmkZ1DG65wiYKQ/hC75O0vetwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAALCDvR8XcKdq2v92oTUTX3MwJNMB8GA1UdIwQY
MBaAFNpKzYqXLA5zcRrPR+DIRZoc9yYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYjEzMmUtYjc5ZS00ZTU4LTkzODAt
OWU1ZmQ0MzkzNWI3LzEvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYjEzMmUtYjc5ZS00ZTU4LTkzODAtOWU1ZmQ0MzkzNWI3
LzEvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvPdrYcv
6blIiRrdgY/iTVt6FTT9iEn9ze6N+J3w0s/LURjYJ0Bnr2WgP6JIk9Mkt9TiBkxM
N/mtIJZtztR/T/If8F+wQF+VfjgLg0bo+9YsvUwvlzRDnXWoLA7it1KO2nVZn3eG
hQrOSqrVkrmNkyxemKz7kvS/c91ECkmFD/YRuGP0fg4YuaBnLs2YvTm8IZhPQVWW
913ACtYr+gxkPQWxWrEs3sdAV9G76OKXY2fp0IuToZahr8UWHNMqaWL/crMCo6kf
x9yzL2e2Ns1b09FEgkuKSqJK1JY95Oi02PRcZOcbNYd75Q9qlCZOjFIp19aF5SF6
z4QaBoiTzuHwNA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:22 2026 by rpki-client