Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File: 2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier: hligywhjlQdPU4wU1va/tZelh8Hrc+RSZEZB0yJx4Ac=
Subject key identifier: 89:C1:ED:43:DB:77:75:3C:BF:F4:1A:0C:F2:60:2E:4F:B0:C2:1E:7B
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer: /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial: 01A0E061DD66B369963BE45AB0A050114F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number: 17F7
Signing time: Sun 27 Sep 2026 01:01:45 +0000
Manifest this update: Sun 27 Sep 2026 01:01:45 +0000
Manifest next update: Mon 28 Sep 2026 01:01:45 +0000
Files and hashes: 1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: rab0tE+7nTUSvQJZ/AaC4CGgt+xtXDyFYV/z+imf4aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:dd:66:b3:69:96:3b:e4:5a:b0:a0:50:11:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
Validity
Not Before: Sep 27 01:01:45 2026 GMT
Not After : Sep 28 01:01:45 2026 GMT
Subject: CN=89c1ed43db77753cbff41a0cf2602e4fb0c21e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:8e:aa:5d:4d:25:c3:64:47:66:15:de:27:
ba:0e:a2:b8:87:b9:31:06:36:d6:09:b9:c2:a6:cf:
3b:20:e0:4a:ff:44:6e:43:e3:7a:b6:43:45:37:55:
98:b0:22:63:bb:da:71:09:eb:87:8c:4e:29:92:63:
34:2d:db:99:71:46:e7:d2:e5:42:16:b3:0c:7a:06:
17:3d:9c:2f:c9:11:c4:42:2d:b0:e3:f1:0f:7d:41:
47:00:cf:eb:54:40:3f:01:82:dc:4c:61:db:5d:f9:
d4:3b:be:dc:17:44:55:ce:31:ff:bb:3d:4d:df:e0:
cd:d6:37:af:40:f6:b7:65:72:82:15:31:2f:e5:6f:
fd:28:da:d0:4b:85:1f:c8:d5:d2:b1:19:d2:fe:77:
fc:fb:f7:0f:d5:1e:7f:97:e4:a6:81:89:31:e9:bc:
ef:7b:39:da:ca:42:88:a4:3e:89:e8:d9:f3:bc:2e:
88:4a:81:6f:a9:ec:ce:25:51:06:9d:37:e9:86:e2:
0f:5e:11:8f:55:94:36:58:ff:26:49:73:bc:a9:2e:
5d:fd:85:12:0e:2c:19:f6:48:30:e2:0b:94:84:6c:
5b:93:80:b8:9c:ed:d9:22:58:84:8f:e6:2a:79:f4:
47:a2:73:9e:c2:7e:e7:7a:95:a7:d6:c1:29:53:4e:
47:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:ED:43:DB:77:75:3C:BF:F4:1A:0C:F2:60:2E:4F:B0:C2:1E:7B
X509v3 Authority Key Identifier:
keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cd:cd:d7:ce:4a:06:6e:6f:3e:5b:3a:86:c5:ca:12:e4:9b:
52:37:72:34:cf:ec:81:bd:1b:e0:7d:a2:48:99:7a:1c:e9:92:
b1:43:43:98:06:92:69:ff:4e:7a:da:f4:6a:7d:7d:8c:51:27:
22:07:fb:30:17:2d:82:23:98:74:9a:9a:47:31:3a:27:cd:94:
48:56:93:b8:0e:b9:ea:8a:11:0c:4c:89:4a:69:24:e5:9e:e3:
4a:d9:57:dc:65:e0:53:57:ee:bb:42:24:6d:a2:93:75:7a:c1:
dd:0b:7c:b1:29:58:a1:52:0c:cf:f2:ad:9f:8b:7a:54:7e:38:
94:6e:21:7a:1d:b5:e4:4f:fb:32:cb:d1:38:6d:96:53:a3:e1:
02:14:83:00:dd:3b:dd:c8:d6:f7:56:57:9f:68:c2:dd:f6:74:
36:f1:76:d1:70:d4:e7:0e:40:7a:e9:e6:91:df:2a:70:c6:16:
74:48:a7:02:22:f1:99:31:85:76:6a:b1:85:97:cd:16:97:d5:
9a:2a:67:38:7e:df:25:c1:67:43:0d:e6:13:7a:60:f8:22:2e:
13:8e:63:c1:41:0d:26:d6:d0:2a:4c:43:d1:1b:18:48:97:c1:
60:0b:44:9b:25:8b:a1:6a:2e:48:3c:e9:c5:00:c0:2f:07:3b:
dc:db:6d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYd1ms2mWO+RasKBQEU97MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWJmMDA4MjRiNjI4YmY2MjYzYmI3NGRlNzc0YWRkZjk5
OTBmYzkwHhcNMjYwOTI3MDEwMTQ1WhcNMjYwOTI4MDEwMTQ1WjAzMTEwLwYDVQQD
Eyg4OWMxZWQ0M2RiNzc3NTNjYmZmNDFhMGNmMjYwMmU0ZmIwYzIxZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hiOql1NJcNkR2YV3ie6DqK4h7kx
BjbWCbnCps87IOBK/0RuQ+N6tkNFN1WYsCJju9pxCeuHjE4pkmM0LduZcUbn0uVC
FrMMegYXPZwvyRHEQi2w4/EPfUFHAM/rVEA/AYLcTGHbXfnUO77cF0RVzjH/uz1N
3+DN1jevQPa3ZXKCFTEv5W/9KNrQS4UfyNXSsRnS/nf8+/cP1R5/l+SmgYkx6bzv
eznaykKIpD6J6NnzvC6ISoFvqezOJVEGnTfphuIPXhGPVZQ2WP8mSXO8qS5d/YUS
DiwZ9kgw4guUhGxbk4C4nO3ZIliEj+YqefRHonOewn7nepWn1sEpU05H3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInB7UPbd3U8v/QaDPJgLk+wwh57MB8GA1UdIwQY
MBaAFNob8Agktii/YmO7dN53St35mQ/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmh2d0NDUzJLTDlpWTd0MDNuZEszZm1aRDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wMjQ4Y2MtYzc2OC00NmMxLTgyM2Mt
ZDZjNjIxNDJmN2UzLzEvMmh2d0NDUzJLTDlpWTd0MDNuZEszZm1aRDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wMjQ4Y2MtYzc2OC00NmMxLTgyM2MtZDZjNjIxNDJmN2Uz
LzEvMmh2d0NDUzJLTDlpWTd0MDNuZEszZm1aRDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM3N185K
Bm5vPls6hsXKEuSbUjdyNM/sgb0b4H2iSJl6HOmSsUNDmAaSaf9Oetr0an19jFEn
Igf7MBctgiOYdJqaRzE6J82USFaTuA656ooRDEyJSmkk5Z7jStlX3GXgU1fuu0Ik
baKTdXrB3Qt8sSlYoVIMz/Ktn4t6VH44lG4heh215E/7MsvROG2WU6PhAhSDAN07
3cjW91ZXn2jC3fZ0NvF20XDU5w5Aeunmkd8qcMYWdEinAiLxmTGFdmqxhZfNFpfV
mipnOH7fJcFnQw3mE3pg+CIuE45jwUENJtbQKkxD0RsYSJfBYAtEmyWLoWouSDzp
xQDALwc73Nttyg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:17:34 2026 by rpki-client