Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: TMJmNv1A+OpEOLRBS2djEppjgj27qWgMhZHSQlSjtHs=
Subject key identifier: 22:DB:2B:10:C1:B6:D0:8E:38:CD:DF:26:10:8D:95:5E:A5:1F:27:40
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019EBE7EE2006B82365E26355008833922B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 1955
Signing time: Sat 13 Jun 2026 01:00:46 +0000
Manifest this update: Sat 13 Jun 2026 01:00:46 +0000
Manifest next update: Sun 14 Jun 2026 01:00:46 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: s4b2eq0F1Km2f1boOPI9MOVFkeOqgU0LIVz0q98Bu4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:e2:00:6b:82:36:5e:26:35:50:08:83:39:22:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jun 13 01:00:46 2026 GMT
Not After : Jun 14 01:00:46 2026 GMT
Subject: CN=22db2b10c1b6d08e38cddf26108d955ea51f2740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:79:e3:f2:77:9a:ed:b4:a0:a0:e1:32:89:
14:07:f2:83:af:b3:3f:9a:ba:45:1c:c0:95:5e:b5:
6a:a2:27:56:32:ee:66:60:83:93:01:54:96:01:04:
b3:38:da:5d:c0:98:aa:88:1f:8e:99:41:6f:e9:7a:
2a:30:11:a9:56:58:33:ae:66:55:be:a8:8e:70:f7:
7a:79:6a:47:1c:3a:05:26:15:07:4f:7e:a2:04:f4:
ce:9f:3a:0c:ba:6e:84:87:65:fd:de:07:ee:6d:61:
8b:49:1b:f7:07:9f:0c:c8:23:77:ab:a8:6d:f1:6a:
76:ce:0e:44:53:91:c6:46:36:2d:7c:bb:0c:bb:03:
b6:76:b3:63:66:ab:6d:fd:07:7e:8e:01:27:b4:2b:
df:99:8d:e9:9c:92:6c:62:13:73:be:32:98:ef:9b:
35:29:5d:83:20:fe:8e:25:be:33:0c:f2:aa:65:ba:
e6:ca:35:8e:d7:c3:7d:3b:0a:bc:91:77:79:79:85:
fa:1f:62:79:e8:39:0e:48:c9:2c:68:4e:d5:d0:54:
45:54:88:b2:78:fa:62:27:e1:4f:3c:e4:4a:0e:fa:
8e:a7:be:8d:bb:2f:58:63:56:2d:a9:fc:a0:01:22:
8c:78:f3:81:d0:d5:83:56:8f:5a:67:f0:10:21:9e:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:2B:10:C1:B6:D0:8E:38:CD:DF:26:10:8D:95:5E:A5:1F:27:40
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:36:f6:c1:fe:73:19:31:14:7d:b1:0a:e7:69:91:97:ee:15:
4f:28:7f:a1:0d:c9:9f:70:46:47:a0:52:67:20:a0:83:2a:92:
9a:50:ca:1a:63:c4:1a:5e:47:a5:b7:fd:bd:86:71:97:f4:cf:
19:6e:8c:bf:88:46:de:b9:e7:f7:51:29:24:26:67:03:97:c4:
39:06:06:08:18:78:02:ba:dc:53:f3:db:8f:24:74:2a:0d:d2:
2b:02:21:a3:31:7f:bd:34:8e:60:b7:14:4e:f4:22:5d:0b:a8:
e4:cb:4c:13:0a:b8:db:fa:ea:41:ef:21:57:8b:a8:3a:2b:e0:
33:47:29:83:f3:85:03:97:9e:bc:8a:c6:38:63:87:88:29:aa:
fb:66:08:a9:6d:81:ce:a5:a7:f3:b7:21:f7:33:da:2e:11:88:
c5:c1:3b:06:ef:d1:f8:22:21:1c:d8:99:9e:70:5a:b2:e9:49:
98:35:01:d8:71:8d:5a:5e:3d:a9:63:20:16:78:93:09:a6:1e:
fd:41:fb:c0:0d:a4:83:8a:71:d8:d2:5a:b7:58:a7:6c:ca:ee:
a2:46:0f:e2:bd:94:16:61:87:dd:bb:5b:44:36:6c:69:50:e8:
d9:f6:82:49:f0:54:dc:cb:30:b2:51:a0:83:a5:99:34:c7:c4:
11:14:c9:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+fuIAa4I2XiY1UAiDOSKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2RjYjA4MWM3MzgwMmZjMTg5NWM2ZWI0YTI3MjY2NmJk
NDI3OWEwHhcNMjYwNjEzMDEwMDQ2WhcNMjYwNjE0MDEwMDQ2WjAzMTEwLwYDVQQD
EygyMmRiMmIxMGMxYjZkMDhlMzhjZGRmMjYxMDhkOTU1ZWE1MWYyNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2h54/J3mu20oKDhMokUB/KDr7M/
mrpFHMCVXrVqoidWMu5mYIOTAVSWAQSzONpdwJiqiB+OmUFv6XoqMBGpVlgzrmZV
vqiOcPd6eWpHHDoFJhUHT36iBPTOnzoMum6Eh2X93gfubWGLSRv3B58MyCN3q6ht
8Wp2zg5EU5HGRjYtfLsMuwO2drNjZqtt/Qd+jgEntCvfmY3pnJJsYhNzvjKY75s1
KV2DIP6OJb4zDPKqZbrmyjWO18N9Owq8kXd5eYX6H2J56DkOSMksaE7V0FRFVIiy
ePpiJ+FPPORKDvqOp76Nuy9YY1YtqfygASKMePOB0NWDVo9aZ/AQIZ4lLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLbKxDBttCOOM3fJhCNlV6lHydAMB8GA1UdIwQY
MBaAFNp9ywgcc4AvwYlcbrSicmZr1CeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUt
NjhiNjhlNDk5YjRiLzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUtNjhiNjhlNDk5YjRi
LzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTb2wf5z
GTEUfbEK52mRl+4VTyh/oQ3Jn3BGR6BSZyCggyqSmlDKGmPEGl5Hpbf9vYZxl/TP
GW6Mv4hG3rnn91EpJCZnA5fEOQYGCBh4ArrcU/PbjyR0Kg3SKwIhozF/vTSOYLcU
TvQiXQuo5MtMEwq42/rqQe8hV4uoOivgM0cpg/OFA5eevIrGOGOHiCmq+2YIqW2B
zqWn87ch9zPaLhGIxcE7Bu/R+CIhHNiZnnBasulJmDUB2HGNWl49qWMgFniTCaYe
/UH7wA2kg4px2NJat1inbMruokYP4r2UFmGH3btbRDZsaVDo2faCSfBU3MswslGg
g6WZNMfEERTJHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:44 2026 by rpki-client