Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
File: 2Hwy4kled0lvwgKzAxZLpAjl0SI.mft (raw, json)
Hash identifier: cf/OmY9T0RyEJ+kse1fye6A/3W6nZ+2MMKGYp8TQF5M=
Subject key identifier: AC:FF:6A:83:66:29:55:D7:EB:CD:BA:8A:81:DA:9A:4D:9A:DC:F1:13
Authority key identifier: D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
Certificate issuer: /CN=d87c32e2495e77496fc202b303164ba408e5d122
Certificate serial: 019FAC08EC949B3FCB95D09490113514FAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
Manifest number: 18CF
Signing time: Wed 29 Jul 2026 04:01:33 +0000
Manifest this update: Wed 29 Jul 2026 04:01:33 +0000
Manifest next update: Thu 30 Jul 2026 04:01:33 +0000
Files and hashes: 1: 2Hwy4kled0lvwgKzAxZLpAjl0SI.crl (hash: pDCbKwH12VTV0PlBFgaweKUPG/k7x4AZuJNpGS2ny0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:ec:94:9b:3f:cb:95:d0:94:90:11:35:14:fa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87c32e2495e77496fc202b303164ba408e5d122
Validity
Not Before: Jul 29 04:01:33 2026 GMT
Not After : Jul 30 04:01:33 2026 GMT
Subject: CN=acff6a83662955d7ebcdba8a81da9a4d9adcf113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:8a:8c:09:1a:ba:13:59:90:4b:69:37:c4:
fb:4d:9b:82:53:71:37:4a:f8:ba:d5:8d:54:9a:14:
23:07:53:1a:0e:6c:6f:7e:bb:50:ab:94:58:32:34:
c5:32:8b:7a:1a:9b:4d:21:a1:75:73:0f:33:b1:de:
41:20:f4:e4:de:5e:43:b5:51:d5:d9:8e:c9:72:a3:
98:bb:47:c9:0c:33:b1:ee:c8:7d:9c:93:73:45:01:
00:5f:6c:73:5c:f5:bb:5e:b8:42:b4:92:2a:6e:72:
e4:d9:8d:b1:77:92:b9:ba:c1:f2:d7:3b:47:bd:6a:
98:ef:01:78:a5:ff:6d:cd:bd:e1:01:3a:04:f7:c0:
c2:c7:34:f5:db:ba:d2:50:e0:8e:a2:0f:7b:d7:d4:
6d:23:b2:0f:6c:4d:8d:63:b0:1a:2c:01:18:ad:bb:
dd:89:30:b9:ff:4e:12:1b:04:f8:6e:99:94:39:45:
f6:83:b9:35:85:08:97:c7:d7:be:4e:10:81:d7:f5:
1a:2e:1c:2a:a0:dd:a0:50:2a:c6:e5:12:af:28:e8:
49:88:5d:e2:bd:e3:7f:d3:0b:e2:84:4b:3e:00:ce:
e3:90:2c:3f:aa:e0:70:d6:21:57:a8:de:38:39:c0:
44:44:9e:72:e4:ec:df:00:b6:95:99:10:b5:41:64:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FF:6A:83:66:29:55:D7:EB:CD:BA:8A:81:DA:9A:4D:9A:DC:F1:13
X509v3 Authority Key Identifier:
keyid:D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:01:4a:f8:a1:6d:a0:19:26:48:3f:68:46:6a:68:92:52:66:
6d:52:92:ca:d2:b1:ce:7b:13:0c:0b:4c:7f:e5:04:b1:0f:dc:
49:22:c1:98:1b:70:32:ab:44:80:cd:4a:e7:f0:bc:47:e0:15:
2e:9c:c3:d9:5b:63:42:8e:77:83:f8:61:e6:24:c6:16:45:5d:
81:bc:5c:e4:c9:05:c7:22:16:26:b3:a0:15:5b:10:15:c6:69:
d6:be:8f:20:e4:33:4b:e0:1a:c7:d5:9e:c8:48:e7:9e:16:3b:
68:f4:39:9f:a6:dd:f0:1a:f8:f6:31:0f:2d:51:65:7a:47:49:
f3:e1:82:64:41:ce:f4:b4:96:e8:be:ce:ed:90:59:61:27:d1:
93:7e:a4:e8:e8:74:5e:34:46:7c:92:c0:9d:ff:d9:5e:fa:27:
92:f9:c7:6d:e4:22:b8:d4:1f:b4:40:69:ac:8e:46:35:d9:00:
d3:ab:42:5f:04:40:bb:6d:da:d1:38:c9:63:71:83:06:bf:e3:
01:c6:46:42:67:9d:f8:0f:b0:94:16:f4:c5:91:ab:e9:03:90:
6e:6f:15:46:80:64:10:74:89:12:81:1a:ea:34:33:ee:37:f0:
52:cc:6e:1d:d0:4b:dd:69:36:0b:ad:5e:12:89:88:39:0e:f0:
f6:e2:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:40 2026 by rpki-client