Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File: 2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier: Cz5/0pa9+Kt41Hk4pSKSlG/OU6mbimooZ0h8OuykT0E=
Subject key identifier: 68:C8:28:E8:EB:D6:C1:0F:5F:61:3C:39:09:B7:AB:97:E4:15:50:30
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer: /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial: 019F9059ACB4615D5FDFB3BC2CA0B1500815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number: 1749
Signing time: Thu 23 Jul 2026 19:00:23 +0000
Manifest this update: Thu 23 Jul 2026 19:00:23 +0000
Manifest next update: Fri 24 Jul 2026 19:00:23 +0000
Files and hashes: 1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: LZYET02rOscyBA8Mmk4Ca362fG5AhLBQOvGs/hwvbGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:ac:b4:61:5d:5f:df:b3:bc:2c:a0:b1:50:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
Validity
Not Before: Jul 23 19:00:23 2026 GMT
Not After : Jul 24 19:00:23 2026 GMT
Subject: CN=68c828e8ebd6c10f5f613c3909b7ab97e4155030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:61:eb:66:3b:49:22:aa:df:eb:70:bb:fb:
35:47:b1:f6:75:99:eb:b4:82:3a:ef:fb:a6:95:6f:
50:56:23:f1:1c:78:4a:93:54:d8:e1:e5:d6:06:0b:
39:a4:8c:e4:20:f1:6d:3e:0c:a0:11:75:67:7c:0f:
d9:c4:5f:c9:93:7d:84:51:10:b7:a7:09:23:44:82:
25:c5:10:b5:7e:dc:98:f6:35:5a:26:dc:ac:2a:1e:
f8:f7:45:5d:32:ff:6a:10:6e:d8:ab:8c:de:44:6e:
42:44:95:e0:5f:6f:04:01:6d:a1:2b:15:37:5d:1f:
d2:ac:a2:25:16:70:9d:5b:ed:18:22:4d:32:03:fc:
62:45:de:9f:eb:b4:f4:28:c9:d4:a0:2b:13:31:e4:
eb:de:34:c6:8e:2a:16:16:da:89:57:7e:6d:b8:f6:
35:17:82:9f:ad:fc:10:9f:3c:a1:9d:03:51:fa:b1:
ed:e7:2d:70:c0:56:d6:c7:d4:7c:16:99:8b:88:9b:
f6:25:19:5d:dc:a4:08:b1:5c:55:4c:a5:75:a9:96:
ae:f1:0d:b7:fd:6f:b5:80:e0:82:b9:d7:49:55:ec:
9a:26:ed:73:33:fb:84:14:27:dd:75:13:89:3e:3b:
96:b6:04:05:93:e9:06:63:21:03:af:3d:83:1c:4b:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:28:E8:EB:D6:C1:0F:5F:61:3C:39:09:B7:AB:97:E4:15:50:30
X509v3 Authority Key Identifier:
keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9a:34:fa:15:6f:e5:c6:79:06:0e:74:c4:bd:4e:7f:0b:1f:
eb:be:c7:e8:49:c6:04:e9:7e:3e:2d:2f:2f:2a:95:35:cd:a8:
7e:ee:b4:5c:44:ec:7e:98:ca:49:11:e3:43:e1:28:4b:90:15:
87:3f:8f:34:5c:f8:f5:33:f2:b6:80:af:34:e0:e1:02:09:5c:
bb:4d:e3:f3:f7:c9:18:86:38:cf:79:16:47:d7:1d:30:8d:3c:
5c:fe:bd:89:77:2b:07:47:e1:89:74:22:58:bf:39:5e:cd:1b:
84:9d:ed:df:75:ed:e5:07:87:e5:20:10:1b:83:29:8a:e0:42:
ec:ab:bc:cb:cc:25:9e:21:73:70:26:61:f9:2f:82:af:f1:e3:
28:80:3b:98:e9:a0:27:27:d7:b1:b6:5a:38:8c:0f:7c:65:1d:
07:ec:f4:57:e5:4f:65:5f:d1:90:54:a7:f5:e7:8f:1b:1c:99:
2b:39:6a:2f:c7:16:86:a4:f8:a3:23:06:fd:76:21:62:cc:1e:
a0:38:dc:71:05:ac:b0:6a:67:0a:de:a2:a5:29:83:b8:87:e7:
e0:85:21:14:95:81:5e:20:05:74:96:00:b2:e3:86:e8:9e:09:
00:1b:99:ee:61:9f:92:26:80:3e:3d:5f:31:a6:85:a8:1d:57:
38:dd:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:36:57 2026 by rpki-client