Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File: 2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier: jszocyymHWi5TGTdB5LiaeiPqhSBGvF+3jWnJxBemGE=
Subject key identifier: 64:6D:16:1C:F2:6D:D8:4D:7A:15:ED:80:1E:A5:90:9D:98:53:B7:CA
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer: /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial: 01A0D0ED62C36D5FB42E3F3669393B404F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number: 17EF
Signing time: Thu 24 Sep 2026 01:00:13 +0000
Manifest this update: Thu 24 Sep 2026 01:00:13 +0000
Manifest next update: Fri 25 Sep 2026 01:00:13 +0000
Files and hashes: 1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: 0hen3P0euYVfnqRwnuctyfM6dR9bUilT/+syFBYcEag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:62:c3:6d:5f:b4:2e:3f:36:69:39:3b:40:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
Validity
Not Before: Sep 24 01:00:13 2026 GMT
Not After : Sep 25 01:00:13 2026 GMT
Subject: CN=646d161cf26dd84d7a15ed801ea5909d9853b7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:b3:c9:c4:c7:b0:bf:85:17:be:75:6d:c7:
7b:aa:43:3a:03:3e:89:7b:8f:21:27:a0:eb:3e:6c:
47:47:7c:1e:f3:c1:cc:81:20:24:46:09:2a:19:fb:
cc:98:2d:81:a7:e0:c3:c4:88:45:9a:f1:8d:2d:95:
3b:64:2c:62:ad:c7:bb:2f:d0:09:4b:12:1c:64:37:
a5:10:50:bf:90:56:5b:29:2f:e3:51:48:a9:9b:84:
70:c1:ba:f3:f9:62:c4:bb:1c:f5:12:ad:1f:fa:c2:
2a:fb:72:3a:a3:3b:36:52:5e:28:0f:d9:72:ec:a0:
96:a8:b5:f3:07:70:95:8f:ac:78:d4:a0:b1:76:06:
ca:2b:81:6f:90:3c:4a:98:93:11:fa:60:ad:38:d8:
1e:2b:11:66:bb:4a:aa:a0:d8:10:90:cc:ca:0e:38:
02:4b:6f:6d:b3:33:8b:de:74:29:2c:fd:36:dc:b3:
5d:aa:d5:96:3c:f8:61:e1:ba:16:b9:4d:c9:98:1f:
18:d8:91:18:32:c6:9c:03:4d:f7:e0:a8:40:4b:e1:
87:ac:19:83:a2:29:36:e3:b7:82:72:66:f9:0d:9e:
b2:66:b6:10:ca:84:8a:77:6e:21:a7:c3:f8:53:dc:
ea:a6:19:90:f0:8e:c1:af:b8:db:dc:c4:f6:6a:6c:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:16:1C:F2:6D:D8:4D:7A:15:ED:80:1E:A5:90:9D:98:53:B7:CA
X509v3 Authority Key Identifier:
keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cf:18:b7:9e:98:44:70:c0:28:47:48:7d:aa:62:46:fa:0e:
09:31:40:bc:fb:fa:07:42:87:3a:90:66:6d:02:ca:29:a3:2a:
13:6e:cc:16:5e:e2:8c:17:ec:b8:47:2a:33:a4:87:67:65:79:
19:c2:38:4f:8e:ab:9e:ba:65:44:8b:0d:bf:2d:3a:da:6f:4b:
33:47:08:f5:c5:a7:64:b7:26:cc:41:09:ec:7f:78:94:f4:d7:
ab:5e:7e:f5:71:e1:83:b8:81:e9:92:f0:76:34:b7:5a:85:15:
56:75:c7:f7:cd:85:d5:06:35:c8:c2:82:0f:cd:85:2f:46:9e:
6e:e7:6e:af:87:bf:36:2f:94:67:13:b3:ca:dd:7e:f1:8f:8a:
dd:73:d9:39:eb:9d:3d:b8:11:6b:09:4d:89:c2:76:f5:f7:96:
ec:7b:65:11:65:a3:f4:b9:28:d5:a0:df:46:6d:f1:58:71:21:
23:4d:eb:44:14:c5:c5:b7:e0:30:5c:55:ab:af:09:4f:cd:25:
eb:ed:47:ff:eb:3f:8a:d9:b8:98:9a:7c:6e:42:13:43:0e:18:
1f:c5:72:29:d0:7e:1f:85:43:17:a1:9c:a6:da:70:26:d2:a0:
86:59:ce:91:13:93:01:8c:36:1e:3e:83:93:39:b6:bb:0d:05:
4d:ef:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:25:54 2026 by rpki-client