Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: 75mjANajhEmocW1WcJlagP+EcL+qaRiUPPPfl+WNmxs=
Subject key identifier: E1:31:85:5D:BE:E1:46:3F:36:7D:92:10:C5:95:C2:4C:64:A2:DF:67
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019E1D910DAD075018D57E4AC38758F65A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1597
Signing time: Tue 12 May 2026 19:01:45 +0000
Manifest this update: Tue 12 May 2026 19:01:45 +0000
Manifest next update: Wed 13 May 2026 19:01:45 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: hNDb6Yaz1qaxzH/sap2lXs9GISi2XaIfwcBoUxBds0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:0d:ad:07:50:18:d5:7e:4a:c3:87:58:f6:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: May 12 19:01:45 2026 GMT
Not After : May 13 19:01:45 2026 GMT
Subject: CN=e131855dbee1463f367d9210c595c24c64a2df67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:97:9f:4e:a1:16:58:1a:72:2e:ad:0c:91:
d8:6e:8c:77:bd:45:74:27:d6:15:16:6f:b7:61:6e:
dc:a8:38:eb:9e:e8:fa:92:d7:5e:b8:a9:00:1a:93:
61:dd:58:cd:b3:f2:75:8f:21:60:dc:d6:38:f6:fd:
a8:0e:d3:bf:7e:7d:a4:44:c3:69:12:d3:0f:c0:f1:
8f:46:90:65:18:84:86:ac:77:97:4c:3c:df:62:32:
87:69:9e:9e:a4:14:ed:af:16:76:eb:10:11:c1:71:
db:89:8f:d2:22:c1:86:fa:38:03:73:29:ba:de:58:
5e:f2:09:1b:40:e6:2d:c6:ef:8d:81:5d:cd:40:f1:
e7:26:7d:2b:05:49:72:be:27:0a:9c:5e:6e:4d:f0:
f1:1f:79:1c:70:aa:e4:0b:df:34:68:5f:69:29:a8:
cf:da:6a:29:41:67:97:82:77:cb:6e:52:2b:3f:1e:
9f:17:6c:3a:7a:3b:b8:c8:b2:f4:3e:78:18:7e:9c:
78:92:06:d1:b7:17:6d:c5:58:1d:f7:32:67:cc:ad:
3b:30:0f:3a:de:b1:fc:1c:2d:3e:07:75:3d:39:bb:
d0:86:3b:12:da:67:cd:06:5b:f6:fd:19:cb:d3:2b:
80:d5:8e:ad:6c:46:61:63:a7:39:94:bb:4b:36:22:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:85:5D:BE:E1:46:3F:36:7D:92:10:C5:95:C2:4C:64:A2:DF:67
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:cc:0d:52:71:ce:19:81:d3:32:17:a6:7f:d6:22:da:a4:
ac:a1:a0:3a:33:ee:1d:b7:7f:9e:f0:e1:ab:4b:26:68:c5:95:
2d:dd:36:38:c5:f4:e8:f5:02:fe:8f:3a:4d:1c:b1:cb:a7:24:
89:8e:ea:e9:f7:9e:70:62:c5:ad:60:22:24:6d:9f:62:11:47:
20:6d:b5:27:db:69:8a:fd:db:f4:a5:14:01:0f:4f:0a:4b:bd:
bb:8d:0d:af:89:d5:1e:f9:17:7f:0f:8c:9b:54:4c:f5:41:ec:
79:72:b9:d4:91:e8:9c:59:84:f2:26:44:73:b0:13:54:f1:c0:
e3:fe:03:55:3d:69:b5:ef:4f:24:76:29:60:28:a7:9d:89:24:
fb:73:13:6b:0c:4f:e6:a0:95:27:13:75:64:92:ee:6a:79:54:
81:dd:35:4f:89:82:33:60:69:dd:4d:41:ef:8e:3b:f8:5d:cc:
01:06:89:d6:59:a3:6f:8d:11:20:2a:fd:22:3f:76:17:d3:f0:
c6:57:35:a3:ce:1f:3d:db:ea:f3:b8:5f:7e:62:4a:49:cf:d8:
c3:0e:d6:cb:29:f4:9b:4b:ca:d0:5a:e0:78:ee:8b:5b:05:f3:
79:b1:28:40:42:7b:66:1c:6d:e4:a1:70:91:79:25:62:8c:2c:
8e:e1:a6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:35 2026 by rpki-client