Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: wMQHTSGlXgtS3GIV63jgBke5tGoaibq3d3vjFr2xNuw=
Subject key identifier: A6:5D:86:A2:D5:61:C3:6C:A9:37:F6:F3:D9:29:A0:94:DD:6A:14:F2
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 01A0C66B43CFEA7F7FD0F09110B499C34A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1A62
Signing time: Tue 22 Sep 2026 00:01:53 +0000
Manifest this update: Tue 22 Sep 2026 00:01:53 +0000
Manifest next update: Wed 23 Sep 2026 00:01:53 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: F+vnuTw/JyPVBl/HSQfEAYI6xDD2m8rJssYzcAjPktI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:43:cf:ea:7f:7f:d0:f0:91:10:b4:99:c3:4a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Sep 22 00:01:53 2026 GMT
Not After : Sep 23 00:01:53 2026 GMT
Subject: CN=a65d86a2d561c36ca937f6f3d929a094dd6a14f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:fc:12:91:2f:af:38:bb:f2:7d:ec:48:8d:
d4:67:25:2a:2b:e3:f9:fb:b4:c7:a3:1d:91:1e:fd:
ee:07:7b:46:17:5e:63:a9:3b:7f:2c:da:80:0b:bd:
31:5c:c8:16:28:40:ba:09:c4:9b:f7:e3:27:c6:d2:
5a:f5:d8:c4:7f:57:68:2f:1b:0d:06:1d:bc:88:f2:
e2:57:8f:56:f3:18:90:ed:a9:dd:ec:49:43:34:7c:
8b:ec:51:05:4b:58:ff:99:eb:04:8c:2b:d3:25:6d:
8e:0d:c7:69:18:1e:32:3b:b4:0a:23:d0:d5:8c:7a:
ed:96:dd:09:8b:30:4b:ef:b9:35:e0:96:15:db:6f:
3a:6a:b9:93:33:ec:4c:a3:fb:b6:dd:bb:22:4f:21:
ce:c8:f1:e7:fc:8e:54:45:b1:61:05:f1:b4:bb:e7:
d3:08:e6:27:b3:1d:a8:35:73:60:34:15:6c:29:71:
a6:06:ba:61:30:43:b9:1c:ef:27:01:88:cc:43:fd:
4b:81:af:a3:c5:c2:88:86:f5:4d:f7:92:24:9f:36:
04:f7:f9:b8:35:24:2a:f6:f9:7d:e2:69:fd:90:f3:
1a:68:5c:2d:66:62:fc:a5:a6:21:5c:c6:68:39:a2:
2c:e7:e1:d7:28:fc:15:04:76:10:07:69:3b:a4:25:
7c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5D:86:A2:D5:61:C3:6C:A9:37:F6:F3:D9:29:A0:94:DD:6A:14:F2
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:ef:c9:fa:d8:61:3a:bb:73:50:5c:f7:70:e7:74:2a:df:
8d:07:4b:c5:02:40:c2:1c:64:8b:76:d5:bc:86:8e:b5:45:26:
ed:97:d6:b3:07:94:be:19:ad:8e:09:97:f7:30:90:81:4a:22:
08:88:c0:db:ff:f3:70:c1:d0:aa:64:c3:d9:f1:e6:f0:cb:92:
9f:a0:61:51:2e:c4:29:41:45:95:c9:e9:e3:40:21:3a:38:65:
d2:2f:8c:0a:24:8a:25:f0:a4:de:a9:a1:d6:e1:74:04:2b:04:
e5:52:48:96:20:68:6d:b5:c9:f0:70:91:7b:d8:0d:aa:52:ec:
6b:1e:a1:31:43:b5:fe:d8:7f:1c:e7:8c:30:fe:85:9b:75:89:
e7:b9:3c:c3:d7:f7:93:2a:34:cd:9d:1a:2c:59:1b:88:bc:70:
67:01:7c:f2:88:de:38:22:e5:42:f3:94:90:f2:00:a2:45:bb:
80:45:75:d8:3b:e0:b9:b3:65:a2:aa:d2:67:36:69:3e:6b:58:
d2:20:8f:46:37:9d:c5:9c:a8:9a:c2:76:67:84:b7:e6:64:e8:
87:b0:00:a2:e2:45:f6:86:78:90:5f:73:11:18:02:fd:d4:d7:
a7:29:e8:9f:fe:63:1c:11:26:45:c1:dd:58:60:4b:28:59:63:
f2:0b:c1:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGa0PP6n9/0PCRELSZw0oXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4N2Q4MTUwZDExODIzODVjNDYxYjU4MGQ1NjM4YTU3MGMy
YmMwYmYwHhcNMjYwOTIyMDAwMTUzWhcNMjYwOTIzMDAwMTUzWjAzMTEwLwYDVQQD
EyhhNjVkODZhMmQ1NjFjMzZjYTkzN2Y2ZjNkOTI5YTA5NGRkNmExNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF78EpEvrzi78n3sSI3UZyUqK+P5
+7THox2RHv3uB3tGF15jqTt/LNqAC70xXMgWKEC6CcSb9+MnxtJa9djEf1doLxsN
Bh28iPLiV49W8xiQ7and7ElDNHyL7FEFS1j/mesEjCvTJW2ODcdpGB4yO7QKI9DV
jHrtlt0JizBL77k14JYV2286armTM+xMo/u23bsiTyHOyPHn/I5URbFhBfG0u+fT
COYnsx2oNXNgNBVsKXGmBrphMEO5HO8nAYjMQ/1Lga+jxcKIhvVN95IknzYE9/m4
NSQq9vl94mn9kPMaaFwtZmL8paYhXMZoOaIs5+HXKPwVBHYQB2k7pCV83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZdhqLVYcNsqTf289kpoJTdahTyMB8GA1UdIwQY
MBaAFNh9gVDRGCOFxGG1gNVjilcMK8C/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkgyQlVORVlJNFhFWWJXQTFXT0tWd3dyd0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lMTEyNGQtN2IzNC00MzlkLTk2MWQt
ODY3OTUzYTNiMTgxLzEvMkgyQlVORVlJNFhFWWJXQTFXT0tWd3dyd0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lMTEyNGQtN2IzNC00MzlkLTk2MWQtODY3OTUzYTNiMTgx
LzEvMkgyQlVORVlJNFhFWWJXQTFXT0tWd3dyd0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREXvyfrY
YTq7c1Bc93DndCrfjQdLxQJAwhxki3bVvIaOtUUm7ZfWsweUvhmtjgmX9zCQgUoi
CIjA2//zcMHQqmTD2fHm8MuSn6BhUS7EKUFFlcnp40AhOjhl0i+MCiSKJfCk3qmh
1uF0BCsE5VJIliBobbXJ8HCRe9gNqlLsax6hMUO1/th/HOeMMP6Fm3WJ57k8w9f3
kyo0zZ0aLFkbiLxwZwF88ojeOCLlQvOUkPIAokW7gEV12DvgubNloqrSZzZpPmtY
0iCPRjedxZyomsJ2Z4S35mToh7AAouJF9oZ4kF9zERgC/dTXpynon/5jHBEmRcHd
WGBLKFlj8gvBPw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:51:55 2026 by rpki-client