Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: RRyLRg+o8A7Ywqg9sjAyJqsHNhNVWmE9TpUqCm0phsY=
Subject key identifier: E6:02:7D:6D:0B:B2:9A:17:8D:0A:92:3B:FA:0D:5A:C2:99:43:3F:7A
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019CAAC64DCC272448A85A0D348A5E51F7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 14D7
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: PMN+rNuZbLOysNEijGNrljHmvUNiOOop8vyV/LxDyLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4d:cc:27:24:48:a8:5a:0d:34:8a:5e:51:f7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=e6027d6d0bb29a178d0a923bfa0d5ac299433f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:de:98:e3:67:5b:96:0f:9c:dd:dd:99:4e:bb:
be:b5:e8:72:59:bb:15:da:41:66:69:bb:6d:1b:61:
67:87:53:08:9e:c5:29:35:fa:bd:b1:44:f6:25:0c:
71:d8:28:1c:f0:ac:80:d9:61:7b:fb:de:9d:9a:a9:
48:fa:2c:18:c4:a5:80:45:8a:16:1c:70:b5:0d:8f:
3e:5d:45:e6:9a:35:b4:68:0f:ff:3b:e3:d0:d2:79:
16:98:3b:83:31:2b:3f:6c:eb:d1:0f:38:cb:50:d1:
df:b8:77:53:5a:5e:06:00:98:45:99:43:bc:3b:71:
54:19:7e:bc:0f:54:b5:df:80:cd:b1:43:ba:27:8b:
40:20:9b:d2:d7:20:f3:b1:42:a3:28:35:88:1f:d8:
18:ac:11:e9:e3:de:4e:51:cb:6f:4a:3b:53:cd:0f:
c3:91:0c:35:22:72:13:9b:bb:aa:25:1a:b9:8f:be:
45:54:3e:51:9d:ed:00:23:3a:3a:27:94:f6:90:fe:
12:2e:13:7a:71:e7:08:0e:02:a7:3c:7b:68:21:80:
dc:c8:a7:f3:ec:01:f7:29:5f:45:9c:b0:59:a7:00:
14:b5:04:77:68:45:18:71:5c:90:bb:53:19:30:21:
b9:13:9e:4b:3d:df:49:d2:1e:c3:d6:69:de:39:00:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:7D:6D:0B:B2:9A:17:8D:0A:92:3B:FA:0D:5A:C2:99:43:3F:7A
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:73:6a:d7:5a:68:5e:eb:a9:90:b0:38:4d:45:c2:89:b2:
db:66:7a:3c:eb:f5:04:64:b6:59:ae:54:06:f1:37:ad:dc:a9:
8e:d4:55:05:06:95:c1:5f:4c:f1:bd:b3:7c:0f:33:9a:ae:2f:
2c:c0:bf:01:20:eb:bd:da:06:47:cc:52:75:4b:66:ed:04:98:
81:99:8e:55:87:08:38:bd:f7:e8:d5:a0:21:b8:b6:67:ea:bc:
80:da:d1:75:22:00:04:f5:b4:03:05:d4:d5:35:96:23:74:41:
c3:f1:03:91:61:89:2e:8c:46:cf:41:fd:6b:b1:ef:28:06:18:
00:79:a3:34:da:0f:03:c0:e9:2e:2e:f4:50:d3:06:65:b2:07:
84:86:da:26:ae:01:07:46:84:4a:05:d4:b6:70:17:b2:3e:d8:
bd:91:c1:70:a3:a1:bf:e7:87:e1:b8:d3:f6:e3:c7:1e:15:78:
9f:17:63:0d:99:68:ec:2b:c3:90:d5:fe:7a:7b:f9:a9:ec:bc:
94:52:c7:f7:39:6f:cd:d5:c6:cb:66:ca:a3:cd:95:d2:4f:25:
b6:03:9c:e4:80:f9:ff:17:9b:d3:4a:d7:8b:4b:fa:9e:4f:68:
9a:20:19:6f:ee:75:11:68:1c:39:55:ca:84:b8:ee:34:4f:50:
14:56:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:34 2026 by rpki-client