Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
File: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft (raw, json)
Hash identifier: +kjZeVmoJQzGmuAOseZYSCE72//AKOCiRnLbffrPTmM=
Subject key identifier: 5C:4F:73:D4:95:24:8E:95:C0:1C:E3:24:89:79:67:36:DB:DA:28:9C
Authority key identifier: D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
Certificate issuer: /CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Certificate serial: 01A0CBC7908CADD2092A9C581448B6632EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
Manifest number: 1504
Signing time: Wed 23 Sep 2026 01:00:48 +0000
Manifest this update: Wed 23 Sep 2026 01:00:48 +0000
Manifest next update: Thu 24 Sep 2026 01:00:48 +0000
Files and hashes: 1: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl (hash: GSTJgCH5tDCUaCkFN1tbC8XIA9XtmSXxvU1nZB2U9xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:90:8c:ad:d2:09:2a:9c:58:14:48:b6:63:2e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Validity
Not Before: Sep 23 01:00:48 2026 GMT
Not After : Sep 24 01:00:48 2026 GMT
Subject: CN=5c4f73d495248e95c01ce32489796736dbda289c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:ff:28:6e:41:dd:e6:f8:73:60:d2:dc:18:
a7:57:89:a8:e2:d9:2d:a9:91:81:20:7f:92:ec:7a:
49:84:f2:5e:68:f0:bb:f2:f9:e3:83:a4:06:ff:12:
4a:e4:2f:8a:fa:a4:0d:d0:20:12:2a:2c:fb:3d:75:
94:27:df:d7:ce:88:8d:a9:ba:b2:aa:a7:a7:47:5c:
89:53:39:c9:ac:ed:b2:52:72:51:60:88:22:58:6d:
4c:1f:61:72:fa:4b:86:1c:e9:06:e3:3c:c2:51:a6:
fd:c6:d7:b0:6f:86:79:7f:91:17:ed:ce:36:26:51:
69:56:5e:7f:39:cd:7b:75:a2:4c:12:eb:bf:96:a6:
76:b8:3a:b8:e8:25:eb:1c:ca:6a:85:49:cd:f0:99:
25:52:d5:8d:b7:76:94:7c:2c:32:78:ae:fd:26:af:
14:ae:18:1e:84:74:cd:f9:0d:3f:e5:21:9d:46:76:
04:c5:87:5c:ff:5e:39:6d:0b:d2:b4:87:3e:af:66:
67:64:4b:84:04:25:83:bf:7b:00:87:e1:19:29:de:
77:7d:ed:0d:ef:43:b8:e7:8b:08:7e:08:4a:d2:b3:
5a:fd:4c:2e:77:b4:96:2f:ac:e8:e8:d1:17:de:48:
84:14:b8:f7:ef:30:67:e2:88:a7:46:6d:ff:69:16:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:73:D4:95:24:8E:95:C0:1C:E3:24:89:79:67:36:DB:DA:28:9C
X509v3 Authority Key Identifier:
keyid:D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:39:78:7f:21:07:b3:b0:5d:d0:6c:98:e9:85:a1:fb:4d:bd:
ed:2e:9e:09:57:ce:53:4f:ed:44:d9:51:01:98:17:d1:06:45:
bb:83:54:1a:ee:a2:90:bc:0d:e1:21:07:00:e5:5e:72:56:82:
7a:03:b5:19:1d:7a:fb:eb:b7:af:ec:ee:48:b5:f6:85:fb:a5:
72:59:cc:c2:f5:b9:03:95:0e:9e:5e:63:fb:43:76:86:d9:24:
17:69:eb:4e:5d:7a:5d:6f:00:5e:d9:2b:55:6a:a3:ef:64:67:
44:c4:5d:0c:42:42:d2:9d:b2:19:61:39:56:53:41:66:96:c5:
24:e0:7c:80:81:9b:72:69:4c:a0:6d:03:b9:83:1e:f7:c3:d9:
e1:73:4c:4a:c7:6c:3a:fc:6a:ee:f3:a5:c3:62:c1:44:c0:27:
da:48:4f:71:9d:a7:b3:e0:d2:4e:ee:a9:dc:0e:84:44:98:a1:
26:57:6a:b7:36:cc:64:58:8f:4b:4e:7a:e0:ba:6e:59:ef:36:
a1:2a:bc:ab:8c:33:bd:19:0d:ad:6d:b7:ba:a6:e4:db:8e:2f:
67:0c:2a:46:3c:29:ce:cd:b9:48:af:95:4f:a9:8d:70:cd:fa:
05:92:80:67:0a:54:fc:4e:ed:d4:a8:5d:9c:00:53:f0:8f:22:
08:e5:23:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx5CMrdIJKpxYFEi2Yy7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTFkNjg5MGY5MWZiMmNkNzc5MzFiODA5YmRiMWViMDUw
OTEzNDkwHhcNMjYwOTIzMDEwMDQ4WhcNMjYwOTI0MDEwMDQ4WjAzMTEwLwYDVQQD
Eyg1YzRmNzNkNDk1MjQ4ZTk1YzAxY2UzMjQ4OTc5NjczNmRiZGEyODljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Ar/KG5B3eb4c2DS3BinV4mo4tkt
qZGBIH+S7HpJhPJeaPC78vnjg6QG/xJK5C+K+qQN0CASKiz7PXWUJ9/XzoiNqbqy
qqenR1yJUznJrO2yUnJRYIgiWG1MH2Fy+kuGHOkG4zzCUab9xtewb4Z5f5EX7c42
JlFpVl5/Oc17daJMEuu/lqZ2uDq46CXrHMpqhUnN8JklUtWNt3aUfCwyeK79Jq8U
rhgehHTN+Q0/5SGdRnYExYdc/145bQvStIc+r2ZnZEuEBCWDv3sAh+EZKd53fe0N
70O454sIfghK0rNa/Uwud7SWL6zo6NEX3kiEFLj37zBn4oinRm3/aRbgewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxPc9SVJI6VwBzjJIl5Zzbb2iicMB8GA1UdIwQY
MBaAFNmR1okPkfss13kxuAm9sesFCRNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpIV2lRLVIteXpYZVRHNENiMng2d1VKRTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNzc3OTctMGVjNy00YTBlLWE1NDIt
YzQwODU3NjA4OWIxLzEvMlpIV2lRLVIteXpYZVRHNENiMng2d1VKRTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNzc3OTctMGVjNy00YTBlLWE1NDItYzQwODU3NjA4OWIx
LzEvMlpIV2lRLVIteXpYZVRHNENiMng2d1VKRTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjl4fyEH
s7Bd0GyY6YWh+0297S6eCVfOU0/tRNlRAZgX0QZFu4NUGu6ikLwN4SEHAOVeclaC
egO1GR16++u3r+zuSLX2hfulclnMwvW5A5UOnl5j+0N2htkkF2nrTl16XW8AXtkr
VWqj72RnRMRdDEJC0p2yGWE5VlNBZpbFJOB8gIGbcmlMoG0DuYMe98PZ4XNMSsds
Ovxq7vOlw2LBRMAn2khPcZ2ns+DSTu6p3A6ERJihJldqtzbMZFiPS0564LpuWe82
oSq8q4wzvRkNrW23uqbk244vZwwqRjwpzs25SK+VT6mNcM36BZKAZwpU/E7t1Khd
nABT8I8iCOUjBA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:09:26 2026 by rpki-client