Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: vLIQ2z5gioTfNZAhpUna6+pDLtbgRh7O0eGGFK9QE88=
Subject key identifier: 22:1A:B1:C0:AD:8B:FE:38:15:0B:BA:F9:02:77:74:29:C5:BD:15:18
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019D9AE326D962E3D9719BBF16556808DF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 16B2
Signing time: Fri 17 Apr 2026 10:01:10 +0000
Manifest this update: Fri 17 Apr 2026 10:01:10 +0000
Manifest next update: Sat 18 Apr 2026 10:01:10 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: Fx/LVpawu+dHixaaMGN7IWHza4ZRG1HaReriGEgKASI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:26:d9:62:e3:d9:71:9b:bf:16:55:68:08:df:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Apr 17 10:01:10 2026 GMT
Not After : Apr 18 10:01:10 2026 GMT
Subject: CN=221ab1c0ad8bfe38150bbaf902777429c5bd1518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:db:ab:ce:5d:66:f2:f2:42:15:b7:93:0d:
16:1f:51:46:90:89:ba:d8:33:ee:7e:e6:a7:75:ce:
bf:ac:c1:43:89:1c:a7:96:17:62:3c:3d:2e:05:1b:
ac:38:b5:a2:9b:f2:b7:96:56:dc:25:ca:3f:9c:af:
db:7d:db:0f:22:b9:a6:8b:27:96:83:85:8e:43:59:
cb:42:0d:56:2a:1e:13:d8:72:f7:ab:6a:e5:5f:b4:
2e:93:3b:a3:26:a2:60:cd:66:47:e8:39:88:ae:4a:
e7:eb:04:64:18:8a:b7:9f:60:79:f1:ca:0c:3c:ff:
ba:0f:aa:0f:84:a7:e4:5c:b2:69:ff:32:23:14:71:
13:9d:cd:b9:f0:af:33:d5:88:ce:8a:10:22:8f:b7:
a1:79:d2:26:4d:8d:a2:78:bd:b6:e3:07:21:4f:1d:
2e:39:64:b3:46:ff:dc:02:f9:4e:4b:52:3e:e0:89:
c4:1f:44:4c:93:40:b6:09:fb:d0:04:1d:0f:82:63:
06:c6:76:1b:cc:f5:bc:c8:77:b3:e8:43:dc:24:b0:
fb:62:a2:4f:23:6c:07:2c:db:a9:bf:7c:e8:51:59:
4d:aa:25:1e:3a:2a:1d:33:ba:35:5b:ca:30:81:ee:
4f:e1:86:ec:e1:2c:a9:82:62:67:d3:5f:05:e8:18:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1A:B1:C0:AD:8B:FE:38:15:0B:BA:F9:02:77:74:29:C5:BD:15:18
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:90:48:83:bc:8f:66:dd:29:d4:55:a6:0a:da:bf:cb:b1:5b:
eb:21:b3:3b:c7:89:28:2a:99:9b:92:bd:93:24:ac:ca:5e:4a:
86:57:95:86:c3:d3:ae:46:df:a8:cd:7e:4e:7a:d2:40:9b:d5:
8f:6b:fc:fd:f3:3a:73:f7:e0:d2:e3:e0:f1:b9:de:4a:db:7c:
c7:af:f1:f0:8c:29:37:2b:1d:57:67:5d:7d:0e:dd:35:92:1f:
b8:58:08:5a:93:22:7c:c6:6a:3f:5a:52:8e:af:2e:b6:52:cf:
cf:69:91:39:f4:4c:bf:8b:0d:7d:db:93:ef:1b:b9:f1:56:81:
e7:fe:ee:bf:ed:ba:92:1d:64:dc:39:e2:eb:7a:8e:a2:ad:70:
97:a0:80:56:ea:38:57:2f:08:eb:8a:ee:cd:93:03:06:51:96:
5c:3c:4b:52:91:06:a8:9b:1f:f4:58:12:c5:1e:e5:9a:d8:cd:
ac:5d:3f:7b:ec:1a:bc:13:71:fc:cc:8e:5b:08:0c:0d:5b:18:
8e:f2:ec:9c:0f:60:b3:7d:67:52:ea:57:e8:ae:6f:17:09:b9:
92:f4:06:3b:1f:33:e6:2f:c7:b9:08:70:f6:8f:5a:75:3c:b4:
a0:da:9e:08:e3:b8:01:1e:7f:1e:6a:95:5d:dc:66:f3:01:a7:
51:29:c4:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4ybZYuPZcZu/FlVoCN+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZjViY2I5MWM2NDBhMGEzNDI5MDVlNWE1MTcwNzUyOGY1
YTMzYTEwHhcNMjYwNDE3MTAwMTEwWhcNMjYwNDE4MTAwMTEwWjAzMTEwLwYDVQQD
EygyMjFhYjFjMGFkOGJmZTM4MTUwYmJhZjkwMjc3NzQyOWM1YmQxNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu/bq85dZvLyQhW3kw0WH1FGkIm6
2DPufuandc6/rMFDiRynlhdiPD0uBRusOLWim/K3llbcJco/nK/bfdsPIrmmiyeW
g4WOQ1nLQg1WKh4T2HL3q2rlX7QukzujJqJgzWZH6DmIrkrn6wRkGIq3n2B58coM
PP+6D6oPhKfkXLJp/zIjFHETnc258K8z1YjOihAij7ehedImTY2ieL224wchTx0u
OWSzRv/cAvlOS1I+4InEH0RMk0C2CfvQBB0PgmMGxnYbzPW8yHez6EPcJLD7YqJP
I2wHLNupv3zoUVlNqiUeOiodM7o1W8owge5P4Ybs4SypgmJn018F6BjsqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIascCti/44FQu6+QJ3dCnFvRUYMB8GA1UdIwQY
MBaAFNv1vLkcZAoKNCkF5aUXB1KPWjOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQt
MTJiNGViYzQxNDUxLzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQtMTJiNGViYzQxNDUx
LzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5BIg7yP
Zt0p1FWmCtq/y7Fb6yGzO8eJKCqZm5K9kySsyl5KhleVhsPTrkbfqM1+TnrSQJvV
j2v8/fM6c/fg0uPg8bneStt8x6/x8IwpNysdV2ddfQ7dNZIfuFgIWpMifMZqP1pS
jq8utlLPz2mROfRMv4sNfduT7xu58VaB5/7uv+26kh1k3Dni63qOoq1wl6CAVuo4
Vy8I64ruzZMDBlGWXDxLUpEGqJsf9FgSxR7lmtjNrF0/e+wavBNx/MyOWwgMDVsY
jvLsnA9gs31nUupX6K5vFwm5kvQGOx8z5i/HuQhw9o9adTy0oNqeCOO4AR5/HmqV
Xdxm8wGnUSnENw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:45 2026 by rpki-client