Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: hMi+KG/aGUg6LxE9ujZj6jUzk1J+JfpJdjyWP8+KAxE=
Subject key identifier: 46:5D:0B:07:C0:31:8A:CB:21:86:F4:AB:B1:C4:64:8F:BE:B3:FA:F5
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 01A0C4B308DB226826AD495E1AC2B6417C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 19F5
Signing time: Mon 21 Sep 2026 16:01:02 +0000
Manifest this update: Mon 21 Sep 2026 16:01:02 +0000
Manifest next update: Tue 22 Sep 2026 16:01:02 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: XetkAD2DyG4VuyqP9Jg4Uhm9qKRmF3HYaV8hKduedws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:08:db:22:68:26:ad:49:5e:1a:c2:b6:41:7c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Sep 21 16:01:02 2026 GMT
Not After : Sep 22 16:01:02 2026 GMT
Subject: CN=465d0b07c0318acb2186f4abb1c4648fbeb3faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:83:a4:72:b2:b0:35:bb:92:5d:36:3e:2e:
67:fc:b8:32:48:03:04:62:a6:f2:a8:0f:03:54:e8:
61:35:8b:d0:32:eb:e9:58:49:40:1a:2b:d3:41:76:
6d:47:f0:d1:a0:2f:b1:12:58:20:12:72:f0:d3:bc:
4f:c6:e4:4d:75:6f:ee:34:cf:3d:c1:be:8c:02:29:
6d:65:b6:06:ca:87:24:0d:b3:ac:cd:96:5b:63:b9:
e9:ad:2b:07:28:99:d0:81:15:d3:0f:a6:d6:fb:7b:
d3:86:70:36:eb:48:bb:a4:c9:12:f8:4e:dd:b4:c8:
ff:93:dd:06:de:90:e6:5a:37:d2:e8:24:2a:17:1f:
26:8e:a6:94:60:74:7a:96:80:99:ac:4b:f0:51:89:
1f:0d:12:36:63:9a:f9:d0:68:a4:ff:aa:2b:ac:31:
9e:c4:77:73:67:07:a9:a5:14:1d:bf:52:82:77:b0:
89:63:cc:3d:61:92:63:47:70:8b:04:ba:d4:8d:0e:
f5:68:4e:0e:6f:c3:cc:c6:e1:11:d6:33:85:2f:b4:
3e:e0:1c:f1:cd:d7:a0:e9:22:f3:83:6c:a8:f5:61:
41:57:26:f8:c9:9c:71:41:41:39:30:25:4d:93:5c:
d5:36:1c:cc:74:58:99:72:c3:ec:5b:77:a8:e9:3f:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5D:0B:07:C0:31:8A:CB:21:86:F4:AB:B1:C4:64:8F:BE:B3:FA:F5
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5e:cb:76:08:36:3f:be:7e:1b:f1:17:bc:66:5a:c7:4b:b2:
cc:6a:2f:1c:4a:7b:c2:12:66:66:3d:2f:3c:58:86:fa:0e:7e:
39:8e:85:76:8d:2d:62:16:68:f5:01:10:48:bc:04:df:e1:04:
ac:b9:09:49:3a:4c:bf:ff:01:7c:14:13:7b:13:a3:03:b6:75:
3b:68:fa:87:30:ce:24:32:01:85:8b:53:b8:57:15:7f:1f:d1:
cd:b0:bc:c5:91:d8:15:b2:5d:f8:8d:df:91:0a:89:46:f4:37:
ca:8e:5e:27:0e:85:e6:d7:3a:87:51:8b:df:20:ad:21:2c:6d:
a8:f1:0c:16:ba:94:10:37:c3:a1:25:cd:1c:e1:0b:ac:46:76:
e3:ba:fa:07:60:fb:42:39:c5:92:8f:0f:b4:38:5d:bd:01:67:
3e:28:21:6a:0b:1c:bf:87:70:d2:36:b7:a3:1a:ba:e6:e7:1b:
89:1e:cb:98:5f:82:68:2d:c6:0f:b5:78:7f:ba:ee:2e:0a:04:
09:54:10:05:9b:c8:1b:f2:6e:63:ca:1e:6f:d5:8d:01:76:2f:
69:37:a1:6a:94:3d:6a:53:ea:9b:5d:80:94:0b:ce:df:52:5b:
7e:35:87:ea:b5:a5:4b:5f:be:c1:0c:d6:01:cb:5a:df:40:21:
7a:31:1e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:55:09 2026 by rpki-client