Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
File: 2IUFXXA5jPDHLM6sXlga1A8gPvw.mft (raw, json)
Hash identifier: Dge1efdwa5V0QXHoUePNx7m1jYxWMrXWfHkeTYK/fp0=
Subject key identifier: 57:50:92:9B:F6:BA:0B:FF:39:0D:16:38:D8:F0:80:32:CE:ED:33:82
Authority key identifier: D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
Certificate issuer: /CN=d885055d70398cf0c72cceac5e581ad40f203efc
Certificate serial: 019D9BBE830F2CED23E5E4C543EA8220EEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
Manifest number: 108C
Signing time: Fri 17 Apr 2026 14:00:46 +0000
Manifest this update: Fri 17 Apr 2026 14:00:46 +0000
Manifest next update: Sat 18 Apr 2026 14:00:46 +0000
Files and hashes: 1: 2IUFXXA5jPDHLM6sXlga1A8gPvw.crl (hash: F6kQ1nr4IbFniOAi4TDONGeaZ2HHQw6aBmHtqvCZpDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:83:0f:2c:ed:23:e5:e4:c5:43:ea:82:20:ee:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d885055d70398cf0c72cceac5e581ad40f203efc
Validity
Not Before: Apr 17 14:00:46 2026 GMT
Not After : Apr 18 14:00:46 2026 GMT
Subject: CN=5750929bf6ba0bff390d1638d8f08032ceed3382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:77:ae:ba:81:2f:55:67:2c:c0:cd:db:66:
1c:48:97:a0:e3:28:7b:97:b1:f5:ae:29:3f:e7:25:
33:fd:74:bf:43:fe:a8:d5:fa:ee:b1:5d:8d:65:84:
13:70:3c:8a:b2:00:e1:cb:21:ad:4a:b5:bc:f9:c0:
6a:d2:3b:16:39:45:56:cb:2d:1a:44:dc:c3:b7:c1:
92:0c:68:e7:6e:63:97:01:e9:bf:d9:94:8d:9f:c4:
83:58:7c:87:24:2d:0d:99:e2:43:66:d2:a4:9a:94:
98:8a:05:bd:0a:49:e0:12:1d:95:a5:00:64:1b:51:
16:38:82:20:48:44:3d:66:0a:c1:4d:de:26:f1:9b:
11:e4:a1:cb:8c:e9:2e:14:c8:95:97:c7:53:45:25:
43:ff:ba:82:e4:40:34:ca:57:9d:8f:a5:95:9a:da:
ef:30:ce:e4:81:2e:95:64:c3:62:e6:58:3e:e7:cb:
56:ea:49:10:83:92:f8:51:73:92:22:68:fc:f8:67:
c3:b0:45:ab:47:22:d3:0d:6b:c2:aa:56:63:9c:3d:
00:32:9c:70:0a:60:0f:7d:a2:f4:26:71:b0:5a:94:
88:0e:35:9b:e8:c7:3c:56:f0:6d:4e:ec:ae:f3:d8:
52:30:19:2f:4f:07:46:5b:93:bf:d8:7b:05:78:b8:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:92:9B:F6:BA:0B:FF:39:0D:16:38:D8:F0:80:32:CE:ED:33:82
X509v3 Authority Key Identifier:
keyid:D8:85:05:5D:70:39:8C:F0:C7:2C:CE:AC:5E:58:1A:D4:0F:20:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IUFXXA5jPDHLM6sXlga1A8gPvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/82af28-b634-463a-b6be-1ca3c67f1506/1/2IUFXXA5jPDHLM6sXlga1A8gPvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cb:0c:15:b5:14:11:b7:ff:c0:19:a7:53:46:42:75:c6:5c:
95:33:03:b5:d5:42:c7:a1:44:76:89:44:97:3a:5f:ce:aa:f2:
22:ce:33:17:d5:7f:51:8c:0c:52:e5:1c:73:64:73:7e:a9:40:
39:51:22:b1:cf:bd:7a:9f:70:b5:b7:f5:eb:25:86:f8:63:02:
77:ae:ae:bf:4b:c2:78:9c:6d:6e:56:bb:d0:fd:89:1c:4c:93:
32:25:60:4d:19:69:17:84:f8:81:88:ae:c6:70:de:02:62:1c:
1c:38:e6:ea:cf:da:da:34:fc:5d:96:d8:e7:62:a7:08:e1:23:
31:18:7b:71:2b:9f:68:f5:d4:1e:53:ca:63:a7:59:27:0f:1b:
76:33:70:ce:41:6e:fe:64:66:3c:15:d2:7a:9a:b5:dd:bd:4b:
00:95:07:69:c7:0e:15:b8:ea:1d:97:8d:61:da:bd:65:c4:23:
8f:21:3b:97:79:3d:4b:5e:61:1f:bb:f4:ca:df:00:22:cd:d5:
28:4b:78:cf:94:9f:5b:59:ff:76:ed:84:a1:2e:8a:72:49:40:
36:58:74:6b:10:d3:81:8c:c8:fc:45:c1:b6:09:19:cb:22:44:
d0:1c:29:e1:df:d4:c9:d8:c8:33:aa:af:ed:0d:e5:b6:03:19:
44:b5:30:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvoMPLO0j5eTFQ+qCIO6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ODUwNTVkNzAzOThjZjBjNzJjY2VhYzVlNTgxYWQ0MGYy
MDNlZmMwHhcNMjYwNDE3MTQwMDQ2WhcNMjYwNDE4MTQwMDQ2WjAzMTEwLwYDVQQD
Eyg1NzUwOTI5YmY2YmEwYmZmMzkwZDE2MzhkOGYwODAzMmNlZWQzMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIl3rrqBL1VnLMDN22YcSJeg4yh7
l7H1rik/5yUz/XS/Q/6o1frusV2NZYQTcDyKsgDhyyGtSrW8+cBq0jsWOUVWyy0a
RNzDt8GSDGjnbmOXAem/2ZSNn8SDWHyHJC0NmeJDZtKkmpSYigW9CkngEh2VpQBk
G1EWOIIgSEQ9ZgrBTd4m8ZsR5KHLjOkuFMiVl8dTRSVD/7qC5EA0yledj6WVmtrv
MM7kgS6VZMNi5lg+58tW6kkQg5L4UXOSImj8+GfDsEWrRyLTDWvCqlZjnD0AMpxw
CmAPfaL0JnGwWpSIDjWb6Mc8VvBtTuyu89hSMBkvTwdGW5O/2HsFeLghGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdQkpv2ugv/OQ0WONjwgDLO7TOCMB8GA1UdIwQY
MBaAFNiFBV1wOYzwxyzOrF5YGtQPID78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUt
MWNhM2M2N2YxNTA2LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MmFmMjgtYjYzNC00NjNhLWI2YmUtMWNhM2M2N2YxNTA2
LzEvMklVRlhYQTVqUERITE02c1hsZ2ExQThnUHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAissMFbUU
Ebf/wBmnU0ZCdcZclTMDtdVCx6FEdolElzpfzqryIs4zF9V/UYwMUuUcc2RzfqlA
OVEisc+9ep9wtbf16yWG+GMCd66uv0vCeJxtbla70P2JHEyTMiVgTRlpF4T4gYiu
xnDeAmIcHDjm6s/a2jT8XZbY52KnCOEjMRh7cSufaPXUHlPKY6dZJw8bdjNwzkFu
/mRmPBXSepq13b1LAJUHaccOFbjqHZeNYdq9ZcQjjyE7l3k9S15hH7v0yt8AIs3V
KEt4z5SfW1n/du2EoS6KcklANlh0axDTgYzI/EXBtgkZyyJE0Bwp4d/UydjIM6qv
7Q3ltgMZRLUwaw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:27 2026 by rpki-client