
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: JWf/J1ERbm5yaGOYjT+Ia+KcDj6dqBAAAYQjOKkWVe8=
Subject key identifier: AD:A4:8E:B1:5B:03:2C:D7:AD:40:5A:08:A1:0D:3A:D0:3B:4F:E8:2C
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 01A0C5FBEFBE6076D6A63342B244552CA77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 22:00:17 +0000
Manifest this update: Mon 21 Sep 2026 22:00:17 +0000
Manifest next update: Tue 22 Sep 2026 22:00:17 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: 6uLOsOvRH6yJBDRUlL65E/izECDUFMY2ZN+xty8ijis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fb:ef:be:60:76:d6:a6:33:42:b2:44:55:2c:a7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Sep 21 22:00:17 2026 GMT
Not After : Sep 22 22:00:17 2026 GMT
Subject: CN=ada48eb15b032cd7ad405a08a10d3ad03b4fe82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:e3:31:cc:21:bf:e2:11:0c:8c:75:a3:1d:
e3:c0:a8:fe:89:da:c4:63:92:89:fd:45:53:db:cf:
91:d5:7c:f1:87:0a:06:32:70:1e:21:e7:12:6c:85:
d2:6b:09:a9:ae:69:d5:0a:ff:56:65:7a:18:a7:6a:
98:62:59:5d:c4:2b:76:f4:a0:9f:35:be:f1:87:68:
77:74:48:ae:55:35:fe:5c:61:fd:c7:db:35:5c:fd:
b6:72:90:76:1e:68:d3:0f:8f:85:d9:7c:54:67:a1:
0d:08:b4:5f:07:20:9b:6e:c0:f7:90:47:d8:0d:b3:
72:0d:45:ba:ce:0b:c6:7d:0e:fd:4c:fd:14:4f:e1:
33:1a:c5:02:35:d6:07:4d:15:e4:5b:a9:28:c1:92:
aa:01:33:41:66:9f:74:b1:d2:93:dc:19:e0:63:ee:
eb:0c:cd:06:1a:3d:0f:fe:a4:83:2a:46:a1:5e:d6:
cd:05:b8:19:7a:9f:b2:9f:2a:cc:ae:2e:2e:f5:01:
88:ef:2b:34:60:8f:ee:5b:38:7b:fa:ba:02:06:b0:
73:cf:c7:12:5f:00:a0:96:b8:b5:9a:08:b3:07:dd:
1e:2b:67:ce:45:15:b2:7d:c3:10:9c:09:e3:1c:e3:
93:05:1d:4c:ce:66:98:9f:1f:02:7e:0f:97:14:37:
7b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:8E:B1:5B:03:2C:D7:AD:40:5A:08:A1:0D:3A:D0:3B:4F:E8:2C
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bd:bb:4c:43:7a:05:9a:a3:f4:4b:fa:49:00:64:45:2c:e0:
6a:a1:55:3f:bf:b5:69:52:b6:d7:fd:d7:47:6a:75:0f:6a:5f:
a7:24:98:86:6e:9b:de:45:54:3b:7e:24:0f:0a:9e:b9:07:48:
08:36:6a:f3:aa:6f:d0:87:68:67:ae:99:63:a4:fd:58:6f:cf:
c9:3d:33:36:c6:33:6d:f8:58:ec:03:24:6c:a6:b2:22:89:c2:
38:82:2d:1e:8e:cb:c0:fe:5c:50:a4:51:fb:70:8b:33:58:93:
82:e1:d6:49:1e:4b:92:d3:43:dc:ed:0c:1a:cf:f5:8e:b7:df:
bf:a3:42:56:51:1a:e5:9d:fd:e9:c8:37:19:0f:8d:60:ae:bb:
b0:30:4e:57:ac:6d:4d:be:04:49:e0:e9:d8:b8:9c:2f:b7:cd:
5e:6c:c1:df:ab:5d:74:62:6f:f1:35:49:3c:ce:ee:4c:2f:3c:
e5:0d:de:56:1d:27:03:5c:5d:2b:6b:9e:9a:60:46:1b:c2:1a:
a1:78:f4:e8:21:5f:d2:95:9c:e7:7e:67:fa:60:05:51:a9:c1:
15:52:58:cb:6d:7c:0d:07:df:6d:a9:0d:77:28:9c:1d:d0:36:
f2:b1:4c:6e:d0:11:c5:3b:66:06:2f:61:9a:b8:d3:9c:9d:dd:
5f:bb:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:10:11 2026 by rpki-client