Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
File: 2Hwy4kled0lvwgKzAxZLpAjl0SI.mft (raw, json)
Hash identifier: elmmCHkbB2VASChOLJ2HQdGG4Euj9L/wG6XmmvczbQc=
Subject key identifier: 41:74:CD:F2:42:0A:E3:A0:63:CC:F3:66:1E:7C:3A:55:C3:E0:6C:0D
Authority key identifier: D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
Certificate issuer: /CN=d87c32e2495e77496fc202b303164ba408e5d122
Certificate serial: 01A0D94CC01D3590868FACFA894186050F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
Manifest number: 196B
Signing time: Fri 25 Sep 2026 16:01:20 +0000
Manifest this update: Fri 25 Sep 2026 16:01:20 +0000
Manifest next update: Sat 26 Sep 2026 16:01:20 +0000
Files and hashes: 1: 2Hwy4kled0lvwgKzAxZLpAjl0SI.crl (hash: Ho8PIF5X4OcydtvxusZ7Ml2znUTuDxMnCsvyMIJUnN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:c0:1d:35:90:86:8f:ac:fa:89:41:86:05:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87c32e2495e77496fc202b303164ba408e5d122
Validity
Not Before: Sep 25 16:01:20 2026 GMT
Not After : Sep 26 16:01:20 2026 GMT
Subject: CN=4174cdf2420ae3a063ccf3661e7c3a55c3e06c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:0a:68:58:b1:c2:3d:6e:06:ef:e0:03:61:
cb:fa:36:9d:9d:08:d8:77:68:0f:3d:2e:4f:7f:17:
88:5e:b9:4c:09:30:22:86:13:ba:fb:9d:47:17:a1:
4b:8c:f1:48:8f:4f:68:2f:1e:d7:be:8b:7e:d9:3b:
a8:1a:14:cd:f0:5b:eb:64:3f:23:e4:00:86:32:31:
70:03:34:eb:6e:d1:fa:c1:c8:73:02:9a:33:cd:ee:
8a:f2:b7:ec:97:78:e3:9b:7a:40:45:3d:45:94:58:
e9:9f:59:2a:45:78:69:a5:03:31:d1:8d:10:fe:4d:
bc:d0:38:8d:76:e5:fd:81:b5:5c:01:fe:ba:28:2f:
61:0c:1f:b6:97:ce:d4:ef:55:b7:be:42:73:93:26:
44:0d:b7:91:8d:f7:19:76:70:d4:58:f5:a1:d3:cb:
b1:6f:e8:94:84:51:1e:73:87:94:53:3f:d1:3c:5e:
47:93:eb:40:be:a6:9c:2f:3e:c4:ec:f1:75:6d:e0:
e8:e1:58:ed:0f:17:c0:1f:b9:0a:2b:2f:4e:9b:ac:
66:85:44:ba:11:40:84:19:e6:a7:1e:24:66:21:8a:
1b:9a:67:e2:f8:ef:90:93:c6:cc:b3:c7:0e:cb:ba:
22:6b:fe:26:45:f7:62:99:48:92:42:4c:40:f7:88:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:74:CD:F2:42:0A:E3:A0:63:CC:F3:66:1E:7C:3A:55:C3:E0:6C:0D
X509v3 Authority Key Identifier:
keyid:D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:64:08:d2:6a:da:35:f3:55:23:c3:a0:c0:9e:3e:40:18:75:
24:cd:9f:84:f9:2b:bf:bb:fe:34:c7:38:33:11:0f:d5:b2:84:
84:92:e2:e4:a9:01:bd:19:52:d3:41:9d:a0:40:b7:67:d0:30:
c1:8d:1f:df:41:3f:03:c9:7e:2f:6f:c6:39:fd:9a:73:68:cf:
f5:24:96:af:16:53:c3:96:bb:69:2c:64:eb:b0:40:52:1d:57:
2c:cc:10:0e:43:94:87:79:7e:7b:61:01:8b:06:91:ad:5a:93:
d8:f6:e9:b3:2e:9d:e5:e6:fa:0c:60:d8:cd:de:5d:1a:5e:bf:
83:bb:3e:c8:bf:22:7c:7e:cc:0e:89:ce:1d:25:e9:a5:59:b7:
1c:1b:0e:92:a6:47:56:8d:e6:2a:a2:ad:4b:89:de:a2:0b:d8:
4d:f0:a0:82:ef:81:5e:ba:0a:8f:7d:ba:25:4e:0b:e2:47:ed:
9e:ce:29:c9:25:08:ec:57:7e:94:95:d5:a9:40:db:28:5e:52:
a9:d2:c8:4a:7d:8a:ad:3e:b5:6a:32:82:db:d3:ba:aa:c2:a5:
7e:d1:9d:ee:f6:79:c1:aa:7d:38:61:c2:18:7a:a8:c0:5d:8a:
dd:6c:67:b9:c3:c4:0d:9d:d4:ee:d3:28:b5:14:6e:f3:a8:d9:
32:07:6d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:55:51 2026 by rpki-client