Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: Nl3bFDb4KAis/3LwYF5IW/t0xEzMZxg3Gkzcoyzx06E=
Subject key identifier: 1D:3A:8A:0B:0E:9C:C5:6D:CF:98:A1:09:71:F1:5B:92:51:5D:FD:D5
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019FA82C2E494A060DF1899E0F4848D200F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 17C2
Signing time: Tue 28 Jul 2026 10:01:35 +0000
Manifest this update: Tue 28 Jul 2026 10:01:35 +0000
Manifest next update: Wed 29 Jul 2026 10:01:35 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: GIRMxPHqKgEgL3ii833ymvEeoHi66ObWH/vsZ7uhTKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:2e:49:4a:06:0d:f1:89:9e:0f:48:48:d2:00:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Jul 28 10:01:35 2026 GMT
Not After : Jul 29 10:01:35 2026 GMT
Subject: CN=1d3a8a0b0e9cc56dcf98a10971f15b92515dfdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:86:8e:23:ec:6d:48:eb:16:df:f4:23:e9:
f9:01:91:02:c2:25:df:5a:b1:41:3f:69:7f:2d:52:
60:38:2e:90:37:10:b3:df:84:3a:9b:8d:7d:8d:d0:
e4:c3:12:fe:c2:49:09:e7:be:1d:d5:c0:8b:bb:cd:
a5:f4:3e:b6:7e:8e:08:2c:2a:8d:95:ad:61:5e:ff:
a4:33:4c:d1:df:ec:3f:da:f5:d2:9c:83:49:c2:39:
93:d8:1c:93:fa:83:7e:ce:7e:95:13:e8:02:89:c5:
4c:de:d2:33:c4:b9:7a:49:1e:be:24:7f:4d:75:90:
69:07:58:15:5e:9d:a0:9a:91:b8:22:78:aa:71:b8:
ea:d3:a2:04:a6:51:35:15:cf:1d:d9:63:6a:0c:3e:
9a:da:21:63:77:48:70:af:47:2a:08:06:89:71:11:
b1:f7:7b:02:69:98:db:01:07:34:75:c0:c4:80:2c:
ff:ac:d7:0f:b5:43:0d:57:95:c8:35:4b:ca:5f:0c:
81:5c:75:08:f4:35:95:9c:be:f1:fa:f1:cb:52:ba:
a7:34:a1:a8:3c:e7:1f:23:3c:68:b6:82:32:23:25:
b8:ad:a2:26:b1:67:22:33:49:15:b9:b0:84:e1:6a:
d5:bd:ce:d4:fe:7f:eb:4d:84:b5:23:2e:0c:4a:d5:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:8A:0B:0E:9C:C5:6D:CF:98:A1:09:71:F1:5B:92:51:5D:FD:D5
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:88:45:19:60:52:1c:ac:55:c2:a4:94:b8:8e:9d:de:b9:cb:
7a:91:68:d5:17:e7:e2:90:a0:57:0f:2f:a5:1a:51:ee:57:e8:
d1:77:b8:50:31:76:56:ca:32:2a:d8:cc:aa:7c:9a:5e:f7:f6:
08:4c:2a:d7:61:f8:61:65:b5:86:26:8d:e6:5b:4c:b0:e7:8d:
0e:46:2e:dd:29:ca:8b:33:bd:ec:ae:36:ee:75:fe:78:6b:4d:
89:00:5a:07:64:4b:6d:81:65:44:22:e8:a9:c6:5d:b8:e4:31:
6f:55:31:c1:14:b8:03:e0:bf:f4:03:b1:27:85:66:32:7f:ee:
a9:83:9b:8a:64:90:34:41:af:bf:71:83:ee:58:b7:6f:39:aa:
b1:8f:c7:b7:d2:7a:bd:d5:18:ca:21:47:fc:6b:0a:f9:86:9e:
43:4d:92:c9:e7:4f:85:97:dc:af:8b:c0:f7:bc:97:12:c4:a0:
3a:b4:f0:62:22:52:4d:84:71:25:63:6d:3f:e6:9c:2b:17:1f:
4c:06:74:33:b5:18:75:95:b5:99:2e:55:f2:5d:7c:d1:e7:14:
af:a1:0d:3b:15:58:44:8f:06:5b:9c:ec:83:5c:08:85:41:b0:
1b:17:2f:f7:40:24:58:b0:fa:ca:f9:72:79:73:59:98:f4:fb:
94:ea:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:55 2026 by rpki-client