Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
File: 2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft (raw, json)
Hash identifier: w8BHyrCunywTD6cx5fjypnpd4+cP8ZlcZe2PjreKVkI=
Subject key identifier: 64:83:3D:8B:DA:64:24:8C:65:D5:5B:50:02:98:78:BF:E4:4A:6D:AF
Authority key identifier: D8:D9:9E:A0:17:67:D4:AA:DC:42:F3:3E:D8:DC:3B:68:89:35:23:4B
Certificate issuer: /CN=d8d99ea01767d4aadc42f33ed8dc3b688935234b
Certificate serial: 019F9090C648BD86E766DF7C43D79917D419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:00:34 +0000
Manifest this update: Thu 23 Jul 2026 20:00:34 +0000
Manifest next update: Fri 24 Jul 2026 20:00:34 +0000
Files and hashes: 1: 2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl (hash: PJ7PZNyq5QWFYL0PJLbSa6XMwVQcjJf0yeFtaUDvzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:c6:48:bd:86:e7:66:df:7c:43:d7:99:17:d4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d99ea01767d4aadc42f33ed8dc3b688935234b
Validity
Not Before: Jul 23 20:00:34 2026 GMT
Not After : Jul 24 20:00:34 2026 GMT
Subject: CN=64833d8bda64248c65d55b50029878bfe44a6daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:f0:04:a0:43:6e:1d:bc:9e:f3:5c:78:40:
05:5e:a0:23:6c:6e:78:cc:4a:8b:95:7b:8e:68:d9:
2e:13:91:9f:57:81:c2:01:93:99:a2:fd:cf:34:2a:
7d:c2:37:a9:a9:c0:d1:44:76:bd:0c:27:f4:e4:95:
ab:75:93:74:4c:74:a8:2a:0c:d0:c4:e1:25:18:e5:
ab:6a:e6:05:43:a3:98:2d:ae:fb:2f:d5:9f:d2:78:
65:db:38:da:7b:66:12:e6:1d:8f:eb:61:4a:fc:b0:
5f:fb:14:6c:4f:d3:49:0b:27:47:ee:06:1c:53:b3:
6f:93:b6:27:8d:dd:54:58:69:09:57:4a:f3:2d:a6:
06:38:fe:8f:1e:07:89:71:34:51:81:8e:8e:98:1f:
6a:55:66:da:8b:91:1b:52:95:b0:96:bd:3c:d0:1b:
d6:88:99:ab:75:88:d2:34:f3:56:e4:c5:92:55:26:
a6:9a:98:ce:d6:ca:d9:f8:1a:fb:1c:05:4b:1e:a9:
a8:b5:73:1f:e1:de:d2:89:5c:3b:92:30:08:7d:bc:
28:43:e1:1a:2e:42:0d:f9:27:a9:91:3c:d1:77:1e:
e6:6f:a8:94:34:34:76:24:42:05:57:4f:97:76:aa:
4c:67:67:a5:a9:bc:a8:2c:a6:e7:43:56:00:b5:fe:
67:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:83:3D:8B:DA:64:24:8C:65:D5:5B:50:02:98:78:BF:E4:4A:6D:AF
X509v3 Authority Key Identifier:
keyid:D8:D9:9E:A0:17:67:D4:AA:DC:42:F3:3E:D8:DC:3B:68:89:35:23:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3900c6-562b-47bc-a3ee-6564703434e2/1/2NmeoBdn1KrcQvM-2Nw7aIk1I0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:90:c0:75:df:f2:2e:e7:1b:ac:c1:64:7e:1b:e8:8e:c4:f1:
7f:63:21:86:5b:69:a7:1d:4f:df:91:a4:fb:90:7c:cb:66:01:
a9:97:85:41:42:16:8b:8f:58:9a:c7:03:57:ef:d2:9e:91:f0:
6a:d1:e7:de:eb:f0:91:37:33:04:fb:4b:07:09:86:6c:89:6c:
0a:a7:4d:c3:47:60:3d:69:55:4d:17:43:a3:ac:d6:80:b9:d9:
b9:da:4c:4f:4e:48:80:19:e0:9a:8d:ba:8f:69:9f:8d:cd:d3:
f8:2a:04:0c:54:91:9c:2c:d3:16:5a:5d:19:e3:ad:4e:01:92:
3c:dd:f2:50:e4:c1:07:d2:02:58:97:06:ae:9b:7a:1d:9d:82:
aa:27:21:6b:a7:48:e6:e2:90:25:40:26:ae:f0:85:31:b7:d7:
8a:db:2a:57:c2:61:21:40:b6:31:2b:43:04:bf:dd:b3:03:f1:
91:81:4b:5c:c6:34:c0:fc:b0:5d:f6:49:40:39:9c:2a:68:33:
91:05:2d:62:c0:99:0a:76:d6:9a:fa:98:05:d6:0e:96:6f:dc:
07:e8:9e:2c:7b:61:fe:43:d8:09:25:45:16:64:50:31:a0:67:
a6:fe:8b:c1:cf:9d:25:cd:ed:c2:19:3a:f4:ca:4f:fd:9e:77:
64:5b:f4:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkMZIvYbnZt98Q9eZF9QZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDk5ZWEwMTc2N2Q0YWFkYzQyZjMzZWQ4ZGMzYjY4ODkz
NTIzNGIwHhcNMjYwNzIzMjAwMDM0WhcNMjYwNzI0MjAwMDM0WjAzMTEwLwYDVQQD
Eyg2NDgzM2Q4YmRhNjQyNDhjNjVkNTViNTAwMjk4NzhiZmU0NGE2ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQjwBKBDbh28nvNceEAFXqAjbG54
zEqLlXuOaNkuE5GfV4HCAZOZov3PNCp9wjepqcDRRHa9DCf05JWrdZN0THSoKgzQ
xOElGOWrauYFQ6OYLa77L9Wf0nhl2zjae2YS5h2P62FK/LBf+xRsT9NJCydH7gYc
U7Nvk7Ynjd1UWGkJV0rzLaYGOP6PHgeJcTRRgY6OmB9qVWbai5EbUpWwlr080BvW
iJmrdYjSNPNW5MWSVSammpjO1srZ+Br7HAVLHqmotXMf4d7SiVw7kjAIfbwoQ+Ea
LkIN+SepkTzRdx7mb6iUNDR2JEIFV0+XdqpMZ2elqbyoLKbnQ1YAtf5nnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSDPYvaZCSMZdVbUAKYeL/kSm2vMB8GA1UdIwQY
MBaAFNjZnqAXZ9Sq3ELzPtjcO2iJNSNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5tZW9CZG4xS3JjUXZNLTJOdzdhSWsxSTBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUt
NjU2NDcwMzQzNGUyLzEvMk5tZW9CZG4xS3JjUXZNLTJOdzdhSWsxSTBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zOTAwYzYtNTYyYi00N2JjLWEzZWUtNjU2NDcwMzQzNGUy
LzEvMk5tZW9CZG4xS3JjUXZNLTJOdzdhSWsxSTBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJDAdd/y
LucbrMFkfhvojsTxf2Mhhltppx1P35Gk+5B8y2YBqZeFQUIWi49YmscDV+/SnpHw
atHn3uvwkTczBPtLBwmGbIlsCqdNw0dgPWlVTRdDo6zWgLnZudpMT05IgBngmo26
j2mfjc3T+CoEDFSRnCzTFlpdGeOtTgGSPN3yUOTBB9ICWJcGrpt6HZ2Cqicha6dI
5uKQJUAmrvCFMbfXitsqV8JhIUC2MStDBL/dswPxkYFLXMY0wPywXfZJQDmcKmgz
kQUtYsCZCnbWmvqYBdYOlm/cB+ieLHth/kPYCSVFFmRQMaBnpv6Lwc+dJc3twhk6
9MpP/Z53ZFv0pQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:12 2026 by rpki-client