Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File: 2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier: ynTVXBxJG4lU+CoMshLHgzAOHOcacm32g3qHYTx56Cs=
Subject key identifier: B3:6F:95:94:25:12:AD:A2:DC:00:C8:D9:BE:DB:09:28:A6:AD:F8:8B
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer: /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial: 019FA974C8398CAC71F8E9000A2F19AD7B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number: 1756
Signing time: Tue 28 Jul 2026 16:00:30 +0000
Manifest this update: Tue 28 Jul 2026 16:00:30 +0000
Manifest next update: Wed 29 Jul 2026 16:00:30 +0000
Files and hashes: 1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: IDI8L4LnYia94kFCcfKZZF8hFMybGnblCMnzCCKb8C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c8:39:8c:ac:71:f8:e9:00:0a:2f:19:ad:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
Validity
Not Before: Jul 28 16:00:30 2026 GMT
Not After : Jul 29 16:00:30 2026 GMT
Subject: CN=b36f95942512ada2dc00c8d9bedb0928a6adf88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:4e:48:6f:19:be:02:56:57:80:aa:eb:af:
cb:1a:21:3d:ee:8e:b5:44:76:10:6e:d0:a0:73:d2:
18:ea:71:7b:e5:3a:29:84:38:33:ae:2c:60:e9:ce:
85:97:09:b9:e6:7f:78:af:07:c4:30:a2:85:0d:98:
55:11:2e:ed:48:f8:7c:03:1f:5c:80:b1:d1:0d:5c:
93:1b:cc:e8:f1:e6:69:cc:85:2b:e2:2d:1a:11:e6:
90:a7:ff:4b:a6:30:13:e4:f9:2d:57:d2:f0:e6:54:
49:a7:2c:19:81:24:71:bc:78:80:88:a6:9b:69:6b:
27:53:dc:2f:e2:1a:fb:1b:bd:da:f1:df:a2:72:13:
24:53:49:c3:f1:a3:92:c9:35:4d:c8:ff:fe:ae:b9:
f7:ab:d6:06:7e:50:a6:94:0b:93:b1:df:aa:2d:aa:
b3:ff:4a:d3:1b:be:22:2a:d9:72:a8:d8:ed:04:50:
d9:64:69:6e:be:11:86:85:19:52:c4:a5:d8:5b:30:
74:43:2a:f8:f5:1e:ee:cb:16:a4:3f:f3:45:1a:b8:
bf:6a:e8:46:e3:14:a4:10:53:9c:cd:bc:bb:e8:7d:
eb:0c:3c:9c:b0:ed:83:1a:90:ab:6d:bc:49:85:58:
9a:a7:c8:70:94:ce:5e:5e:77:77:30:b1:12:1b:9c:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6F:95:94:25:12:AD:A2:DC:00:C8:D9:BE:DB:09:28:A6:AD:F8:8B
X509v3 Authority Key Identifier:
keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:36:d3:44:c6:b9:02:4b:49:58:6e:c8:9b:af:a1:4b:c4:
c8:03:a8:cc:b5:66:93:29:4d:3e:98:74:81:ad:e6:e7:2d:9d:
0c:12:b7:49:a2:c9:e4:71:d0:da:2c:10:a2:20:27:10:35:f1:
46:9e:17:be:c8:67:6c:b7:5f:a7:32:8e:15:45:5f:89:a6:d0:
d8:bb:54:ab:5a:bb:64:09:24:e6:0b:9e:d4:5b:72:e3:05:ed:
80:1a:f8:81:4a:32:76:7c:1f:e6:0c:ef:94:7d:32:bc:00:29:
d6:80:d3:ff:8a:4d:d8:47:23:1d:5d:f7:ab:66:51:d7:7e:0b:
5c:0e:f3:b1:79:e1:c0:43:40:95:48:4b:f8:45:27:10:63:fe:
03:07:40:c1:10:0a:05:15:d6:5f:ba:e1:bf:43:1a:74:76:76:
c2:40:f4:9b:2d:04:79:8e:53:54:68:25:a9:71:9f:c3:de:e1:
a6:71:69:7e:90:6d:7a:0d:83:eb:00:04:e0:06:92:82:7b:0e:
46:2e:74:d8:77:c3:16:fe:2b:13:e9:de:58:5b:2b:97:b8:47:
42:1d:61:69:e5:46:c0:18:4f:a6:3e:c5:23:33:e8:06:62:02:
6a:c3:77:6e:14:76:96:6f:8a:b7:27:23:37:72:4c:73:93:8b:
02:dd:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:33:18 2026 by rpki-client