Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: aeA6FaTL3pHWYYFci6UPJuE+0Xt4ArCPKG6AUlBH61g=
Subject key identifier: A7:DC:C2:B4:6A:79:37:CA:7E:0D:71:3F:E0:A8:A3:6E:24:9B:92:36
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 01A1C10A2D9D55BDA6E9EC5FAA9DFA22CA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1AE6
Signing time: Mon 09 Nov 2026 16:00:31 +0000
Manifest this update: Mon 09 Nov 2026 16:00:31 +0000
Manifest next update: Tue 10 Nov 2026 16:00:31 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: Aj3yXaQ+vm9THi8anlrSNnT9PbEjy3m9azHObrOlU1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:2d:9d:55:bd:a6:e9:ec:5f:aa:9d:fa:22:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Nov 9 16:00:31 2026 GMT
Not After : Nov 10 16:00:31 2026 GMT
Subject: CN=a7dcc2b46a7937ca7e0d713fe0a8a36e249b9236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:27:fd:e3:8f:56:18:72:ec:87:41:0b:6d:
75:7e:b0:d2:6a:93:e7:58:b4:28:62:de:72:d8:95:
94:ed:9b:c7:05:7b:c5:38:4a:a7:0b:34:a8:50:38:
e7:00:f8:44:9e:00:2e:60:d0:72:4b:9a:8c:ce:05:
bc:50:30:a2:24:b8:50:fc:00:32:72:8d:d8:44:8b:
c5:f4:68:48:a3:04:3f:5e:54:00:f4:a1:30:5b:96:
f3:9f:4d:4e:b5:91:bc:1d:82:b8:80:cd:bf:4d:5d:
23:6c:87:a6:5e:e8:d8:2f:fd:82:62:00:83:86:0e:
bd:ec:3d:1d:66:62:af:f0:d5:50:0d:bd:33:0b:e9:
5c:a2:5f:d7:3f:6c:dd:cb:14:4a:8e:23:ff:67:ec:
90:56:dd:20:73:69:1e:92:7f:a6:1b:0b:82:f7:5c:
8f:76:33:eb:3c:55:3e:41:4b:36:d8:5a:eb:e4:67:
10:5b:8c:6e:e6:d6:fe:82:25:77:49:17:fb:b4:2e:
63:f7:58:f9:a8:2f:ab:33:6a:68:cf:84:39:7c:9f:
82:ee:8f:b2:16:64:9b:05:ab:30:9b:58:90:41:b9:
04:7c:b0:72:e9:8d:2c:b1:a5:0b:e9:ca:44:fa:b7:
a5:c9:06:a8:f6:c3:e5:ac:b5:60:62:0e:93:93:38:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:C2:B4:6A:79:37:CA:7E:0D:71:3F:E0:A8:A3:6E:24:9B:92:36
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:ef:52:22:a3:42:89:9f:c2:ef:d2:2f:d4:bf:29:b7:4f:
ea:da:8a:1a:a8:62:59:b7:6a:2f:e9:2d:9f:10:8b:2f:93:8a:
36:65:47:7e:72:83:b0:28:9c:9e:22:51:b8:03:a9:ed:24:fa:
b8:46:b4:0b:21:27:c4:77:9a:14:4c:16:3b:f8:7e:98:00:96:
85:fe:d5:ba:60:f9:63:18:f6:cd:af:cf:b5:46:e4:b2:29:0e:
d1:80:19:42:e5:ea:ff:5e:4c:d4:f0:18:de:52:0f:53:9c:77:
71:1c:41:d2:13:26:dc:46:c2:dd:c3:f9:a6:8b:ed:f0:32:ef:
07:43:6e:76:e7:4c:c1:fe:2f:68:fc:8e:31:88:97:29:81:2a:
91:57:de:65:3b:ec:26:e9:1d:d2:a6:e7:3b:9b:09:e7:e1:c1:
34:ad:8b:28:d8:8b:23:d2:4f:79:d2:0c:38:c6:e8:f5:56:92:
fc:42:bc:be:8b:1a:1e:56:b0:75:cc:e0:a7:bf:1d:7d:63:4e:
c9:63:7d:c5:eb:34:c9:b6:27:5b:ba:cf:e6:7f:da:82:b5:55:
33:8b:04:c6:c5:2d:75:e2:68:73:67:d7:dc:34:62:9c:73:c5:
3f:9a:30:14:1d:68:1c:48:f4:4e:6c:52:95:3e:6c:04:1f:46:
cd:c7:d5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHBCi2dVb2m6exfqp36IsqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTg3YzlhYzEwZjIwNTE1MmIxMjhlY2RjMjE1N2M5MDI0
OTE2YTQwHhcNMjYxMTA5MTYwMDMxWhcNMjYxMTEwMTYwMDMxWjAzMTEwLwYDVQQD
EyhhN2RjYzJiNDZhNzkzN2NhN2UwZDcxM2ZlMGE4YTM2ZTI0OWI5MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qon/eOPVhhy7IdBC211frDSapPn
WLQoYt5y2JWU7ZvHBXvFOEqnCzSoUDjnAPhEngAuYNByS5qMzgW8UDCiJLhQ/AAy
co3YRIvF9GhIowQ/XlQA9KEwW5bzn01OtZG8HYK4gM2/TV0jbIemXujYL/2CYgCD
hg697D0dZmKv8NVQDb0zC+lcol/XP2zdyxRKjiP/Z+yQVt0gc2kekn+mGwuC91yP
djPrPFU+QUs22Frr5GcQW4xu5tb+giV3SRf7tC5j91j5qC+rM2poz4Q5fJ+C7o+y
FmSbBaswm1iQQbkEfLBy6Y0ssaUL6cpE+relyQao9sPlrLVgYg6TkziG5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfcwrRqeTfKfg1xP+Coo24km5I2MB8GA1UdIwQY
MBaAFNkYfJrBDyBRUrEo7NwhV8kCSRakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEt
MjRiMzA2MDZlMjE5LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEtMjRiMzA2MDZlMjE5
LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgTvUiKj
Qomfwu/SL9S/KbdP6tqKGqhiWbdqL+ktnxCLL5OKNmVHfnKDsCicniJRuAOp7ST6
uEa0CyEnxHeaFEwWO/h+mACWhf7VumD5Yxj2za/PtUbksikO0YAZQuXq/15M1PAY
3lIPU5x3cRxB0hMm3EbC3cP5povt8DLvB0NududMwf4vaPyOMYiXKYEqkVfeZTvs
Jukd0qbnO5sJ5+HBNK2LKNiLI9JPedIMOMbo9VaS/EK8vosaHlawdczgp78dfWNO
yWN9xes0ybYnW7rP5n/agrVVM4sExsUtdeJoc2fX3DRinHPFP5owFB1oHEj0TmxS
lT5sBB9GzcfVAQ==
-----END CERTIFICATE-----
Generated at Tue Nov 10 01:08:23 2026 by rpki-client