Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: xJrG33e2WoK6dbjiWMWw/aYb3loaFIyuY76JVlVdRGU=
Subject key identifier: 35:33:C4:D9:58:B1:10:EB:1F:14:18:64:D2:93:42:A8:11:51:EA:91
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019F8F10C5D18A514CCDCEED8FAC93FA424A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0E63
Signing time: Thu 23 Jul 2026 13:01:08 +0000
Manifest this update: Thu 23 Jul 2026 13:01:08 +0000
Manifest next update: Fri 24 Jul 2026 13:01:08 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: iekBAim0uE8BgGKmeOQoRfJEmYX3IWuPCceL4fnjJCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:c5:d1:8a:51:4c:cd:ce:ed:8f:ac:93:fa:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Jul 23 13:01:08 2026 GMT
Not After : Jul 24 13:01:08 2026 GMT
Subject: CN=3533c4d958b110eb1f141864d29342a81151ea91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:b5:d1:f0:80:26:d3:7c:cc:df:2a:c6:93:
d8:b7:ce:47:7a:5f:fc:ef:c9:81:0a:35:55:40:d7:
10:4b:0d:ea:29:07:6c:d6:e5:42:6e:04:38:42:d8:
cc:a1:76:45:39:f8:47:46:0b:2f:6b:28:35:13:5e:
98:1c:f1:27:88:1f:e7:09:63:4b:a5:d3:27:82:cf:
5e:d5:9c:60:49:c4:9e:17:dc:ea:1f:28:76:a0:35:
1c:0f:be:1d:c1:96:96:3c:15:e3:e0:e3:39:65:c2:
70:1a:23:28:82:db:f8:17:43:e2:b2:2c:48:d3:e7:
6f:a2:fc:3d:f3:96:c2:1f:f8:16:db:f1:a9:02:84:
24:c8:4d:94:92:17:39:f1:7b:3e:82:ae:ae:e1:c7:
56:cb:b2:ed:8f:18:65:b9:7a:9f:1d:26:c3:7f:2f:
c6:53:a0:df:9b:17:39:f5:c0:31:55:70:9e:a8:c3:
27:c8:c6:f8:9a:9b:2e:2b:05:88:d7:01:da:f5:7d:
95:ea:9d:db:96:95:d4:32:20:ff:e0:be:63:ec:be:
93:1a:ab:0a:07:90:98:db:d9:ae:7b:24:3f:b8:a3:
8c:c5:fa:94:73:c5:32:6c:84:55:8a:42:23:39:dd:
45:76:22:07:20:5b:04:f3:03:13:56:71:c4:b1:11:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:33:C4:D9:58:B1:10:EB:1F:14:18:64:D2:93:42:A8:11:51:EA:91
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4c:43:10:18:ca:f6:2e:c1:84:c4:95:34:b5:e3:f7:6f:ce:
45:92:47:62:aa:bb:61:f0:1c:b1:4d:29:85:f7:12:e3:7e:9e:
ca:77:69:91:8c:4a:ca:12:2f:f7:1a:09:f0:0c:41:b2:9e:ef:
db:0b:27:71:48:f0:62:50:58:3c:ab:12:97:aa:bc:c5:3b:f6:
71:cf:8e:42:4e:17:fe:15:ea:63:a6:4a:4f:88:3f:a4:60:4a:
eb:4e:63:7d:25:c3:75:0e:f9:2f:d3:8d:2e:2a:47:6d:d7:7e:
29:ef:c7:f1:45:90:2f:cc:d5:75:e2:de:16:76:48:b0:6e:47:
e9:02:19:da:2f:6e:c8:d4:23:ad:02:5b:e8:63:36:65:97:da:
8a:ec:be:2b:74:d8:6c:2c:3d:8f:cb:24:8d:02:a6:c8:03:1a:
a5:5c:13:56:7e:78:2d:ae:38:0c:09:ca:6d:be:43:ae:a8:21:
b1:d0:ad:69:91:05:2e:f8:49:11:13:06:42:ea:53:85:e9:86:
4c:bb:be:0b:72:88:81:49:78:df:34:22:59:4e:b7:b5:d2:d7:
3c:e0:c2:b4:e6:6e:88:e6:cc:67:72:dd:d9:06:d4:e2:1a:e1:
93:13:05:f6:46:63:c3:e7:67:e1:b1:03:27:e6:f6:d5:c0:e2:
cd:4d:8f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEMXRilFMzc7tj6yT+kJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmUwY2MzMTQzZjk5YzVlNTU4MzZhM2ZmNmMwYjY2ZmMy
MGM0ZDUwHhcNMjYwNzIzMTMwMTA4WhcNMjYwNzI0MTMwMTA4WjAzMTEwLwYDVQQD
EygzNTMzYzRkOTU4YjExMGViMWYxNDE4NjRkMjkzNDJhODExNTFlYTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCu10fCAJtN8zN8qxpPYt85Hel/8
78mBCjVVQNcQSw3qKQds1uVCbgQ4QtjMoXZFOfhHRgsvayg1E16YHPEniB/nCWNL
pdMngs9e1ZxgScSeF9zqHyh2oDUcD74dwZaWPBXj4OM5ZcJwGiMogtv4F0PisixI
0+dvovw985bCH/gW2/GpAoQkyE2Ukhc58Xs+gq6u4cdWy7LtjxhluXqfHSbDfy/G
U6Dfmxc59cAxVXCeqMMnyMb4mpsuKwWI1wHa9X2V6p3blpXUMiD/4L5j7L6TGqsK
B5CY29mueyQ/uKOMxfqUc8UybIRVikIjOd1FdiIHIFsE8wMTVnHEsRGzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUzxNlYsRDrHxQYZNKTQqgRUeqRMB8GA1UdIwQY
MBaAFNn+DMMUP5nF5Vg2o/9sC2b8IMTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAt
MjYzMTk0OTZkN2RlLzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAtMjYzMTk0OTZkN2Rl
LzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0xDEBjK
9i7BhMSVNLXj92/ORZJHYqq7YfAcsU0phfcS436eyndpkYxKyhIv9xoJ8AxBsp7v
2wsncUjwYlBYPKsSl6q8xTv2cc+OQk4X/hXqY6ZKT4g/pGBK605jfSXDdQ75L9ON
LipHbdd+Ke/H8UWQL8zVdeLeFnZIsG5H6QIZ2i9uyNQjrQJb6GM2ZZfaiuy+K3TY
bCw9j8skjQKmyAMapVwTVn54La44DAnKbb5DrqghsdCtaZEFLvhJERMGQupThemG
TLu+C3KIgUl43zQiWU63tdLXPODCtOZuiObMZ3Ld2QbU4hrhkxMF9kZjw+dn4bED
J+b21cDizU2PTA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:35 2026 by rpki-client