Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: oXqa90N0c3Tf8Ns6DNANMSo/HOwzkornhGI4yeuRJbo=
Subject key identifier: 1E:D2:17:9F:41:0C:69:8A:A3:58:07:A0:D8:30:F3:F5:5A:41:6D:3E
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019CAB6B8F4A4A8BB1E7833900C491B669D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 22:01:18 +0000
Manifest this update: Sun 01 Mar 2026 22:01:18 +0000
Manifest next update: Mon 02 Mar 2026 22:01:18 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: 1feyPwn/17/IJvg7SRjKjHd4j66n0xsb4TytqY02kwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8f:4a:4a:8b:b1:e7:83:39:00:c4:91:b6:69:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Mar 1 22:01:18 2026 GMT
Not After : Mar 2 22:01:18 2026 GMT
Subject: CN=1ed2179f410c698aa35807a0d830f3f55a416d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:6e:9e:17:87:04:6b:c1:45:db:52:fc:10:
2d:56:48:cb:9d:f5:f3:71:2a:6f:9d:6d:76:ed:e0:
b8:3f:8f:fa:3c:23:06:5e:50:9d:98:04:d3:8c:2b:
19:f2:50:3a:4d:72:c2:e1:3f:cd:ad:73:4b:f7:43:
64:5c:aa:31:a7:c2:85:b5:31:0d:3b:02:ed:6d:18:
cf:de:74:6c:23:b5:4d:78:aa:44:c4:5c:2c:88:75:
03:01:81:e6:fb:02:f7:61:61:29:73:d2:9a:8a:2b:
c6:d2:08:62:0c:f0:09:d0:d1:0b:85:66:4d:7a:67:
fd:95:4b:66:03:a4:21:80:2e:43:5b:6f:d2:31:67:
d8:04:33:59:19:aa:f5:cf:38:27:cd:a6:b6:eb:56:
63:18:8f:37:f9:0d:c3:6e:3e:38:a4:72:05:76:14:
ce:fb:16:5a:f3:03:69:f2:ff:0f:db:b7:6a:18:51:
69:ae:bb:bc:6b:8a:90:23:b8:78:ec:df:39:d2:1a:
c1:e4:b2:94:60:57:39:8d:02:4d:80:7c:ed:b9:cd:
a0:8e:eb:9b:d6:22:1c:09:91:9c:30:59:93:83:5b:
b6:87:5b:a2:13:7d:e0:13:db:6b:12:5a:78:d5:54:
2c:c5:6f:4f:ab:5e:0a:18:72:81:5c:c2:aa:96:47:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D2:17:9F:41:0C:69:8A:A3:58:07:A0:D8:30:F3:F5:5A:41:6D:3E
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:66:34:1c:06:77:a6:ba:ce:09:12:f4:8d:63:0d:12:9e:f7:
32:52:a0:d5:f5:2e:ad:eb:be:a9:77:71:a8:56:11:ea:93:97:
00:e9:ec:c0:b6:fd:d1:99:6c:4e:ca:09:c8:28:6c:19:83:33:
bc:7a:11:1e:83:eb:d5:53:cc:78:72:dc:9a:1c:7d:28:a7:ab:
4b:ea:e6:19:d9:4f:bb:8b:ba:3b:b8:a6:98:76:04:d0:ee:eb:
76:68:03:56:bb:41:55:6d:6a:80:30:55:ac:fd:48:25:5b:ce:
fc:21:6f:fc:5b:db:37:47:e9:6d:32:b7:f6:5b:a9:d8:97:a2:
6d:f5:a4:5f:86:dc:3c:36:55:c0:8f:da:f7:31:8e:c4:e5:3f:
3a:31:98:25:58:c3:fd:39:5f:ef:f0:d8:e2:50:ae:1b:a6:24:
89:78:9c:8d:d7:46:30:98:48:63:c4:98:eb:c2:fa:bc:9c:a1:
53:82:c4:9c:68:3f:80:db:6b:41:81:fb:d7:2a:87:89:85:93:
ca:31:2d:d8:68:15:7e:7f:cf:c1:2d:93:28:44:f7:47:9a:0a:
a3:58:a8:78:f3:91:53:8e:b3:3b:a1:b5:d8:7f:85:33:22:6d:
06:eb:64:36:2c:42:1c:17:4c:64:51:12:04:67:64:68:cb:56:
23:68:97:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra49KSoux54M5AMSRtmnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTg3YzlhYzEwZjIwNTE1MmIxMjhlY2RjMjE1N2M5MDI0
OTE2YTQwHhcNMjYwMzAxMjIwMTE4WhcNMjYwMzAyMjIwMTE4WjAzMTEwLwYDVQQD
EygxZWQyMTc5ZjQxMGM2OThhYTM1ODA3YTBkODMwZjNmNTVhNDE2ZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwpunheHBGvBRdtS/BAtVkjLnfXz
cSpvnW127eC4P4/6PCMGXlCdmATTjCsZ8lA6TXLC4T/NrXNL90NkXKoxp8KFtTEN
OwLtbRjP3nRsI7VNeKpExFwsiHUDAYHm+wL3YWEpc9KaiivG0ghiDPAJ0NELhWZN
emf9lUtmA6QhgC5DW2/SMWfYBDNZGar1zzgnzaa261ZjGI83+Q3Dbj44pHIFdhTO
+xZa8wNp8v8P27dqGFFprru8a4qQI7h47N850hrB5LKUYFc5jQJNgHztuc2gjuub
1iIcCZGcMFmTg1u2h1uiE33gE9trElp41VQsxW9Pq14KGHKBXMKqlkc6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7SF59BDGmKo1gHoNgw8/VaQW0+MB8GA1UdIwQY
MBaAFNkYfJrBDyBRUrEo7NwhV8kCSRakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEt
MjRiMzA2MDZlMjE5LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEtMjRiMzA2MDZlMjE5
LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGY0HAZ3
prrOCRL0jWMNEp73MlKg1fUureu+qXdxqFYR6pOXAOnswLb90ZlsTsoJyChsGYMz
vHoRHoPr1VPMeHLcmhx9KKerS+rmGdlPu4u6O7immHYE0O7rdmgDVrtBVW1qgDBV
rP1IJVvO/CFv/FvbN0fpbTK39lup2JeibfWkX4bcPDZVwI/a9zGOxOU/OjGYJVjD
/Tlf7/DY4lCuG6YkiXicjddGMJhIY8SY68L6vJyhU4LEnGg/gNtrQYH71yqHiYWT
yjEt2GgVfn/PwS2TKET3R5oKo1ioePORU46zO6G12H+FMyJtButkNixCHBdMZFES
BGdkaMtWI2iXbA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:22 2026 by rpki-client