Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier: CDr1WjY53roMFyKbhssa1+FTFlzZHYlXnxpdMPRF6qg=
Subject key identifier: 5E:1E:04:12:11:A5:11:EA:8C:0D:4D:CB:53:75:F7:32:49:05:54:D3
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer: /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial: 019D98F44C874E91B52340AA904AD0124974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:40 +0000
Manifest this update: Fri 17 Apr 2026 01:00:40 +0000
Manifest next update: Sat 18 Apr 2026 01:00:40 +0000
Files and hashes: 1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: PBj1lntrqn5PYS+mMs8r+sXnyRtg92nj4sRj8uQ6X34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4c:87:4e:91:b5:23:40:aa:90:4a:d0:12:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Validity
Not Before: Apr 17 01:00:40 2026 GMT
Not After : Apr 18 01:00:40 2026 GMT
Subject: CN=5e1e041211a511ea8c0d4dcb5375f732490554d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:0a:ce:a0:cb:05:7c:6e:d5:55:13:b0:a4:
62:72:25:1c:e5:7a:dd:97:92:5a:1e:01:02:73:cd:
07:ca:1c:c1:2d:a1:81:21:b1:f2:92:3d:d3:ef:69:
7b:40:20:3d:ba:8a:19:3b:30:b0:ba:92:1d:83:da:
0c:0b:10:ab:90:78:0c:14:d3:01:b4:41:f8:da:c8:
40:33:79:7b:34:78:99:95:08:51:85:e9:d6:6f:7c:
44:0f:2b:b2:43:a2:20:8a:34:70:6c:01:4e:56:90:
c5:a6:66:dd:75:3b:4d:a0:e4:d3:74:13:90:fd:40:
72:44:6a:36:a9:c6:db:f6:96:c3:43:c6:4b:e2:95:
73:3c:a9:80:35:02:71:e5:93:0a:bb:c5:b3:b2:d0:
e7:59:09:f7:91:91:51:2d:eb:4d:3f:f9:ea:ae:87:
b3:d4:5c:42:b9:7a:3f:2d:5b:aa:a3:c6:4d:39:48:
b1:66:d9:4d:e0:09:7f:03:eb:fa:ed:08:02:82:f5:
84:09:a1:7c:fe:b0:64:65:0a:ee:e5:2e:a2:9c:00:
eb:13:54:d0:04:dc:9b:c5:88:d8:c1:77:38:4c:4f:
80:77:98:0e:eb:9e:f8:d3:a8:47:1d:3f:cb:9c:04:
1b:90:6a:55:8f:dd:50:e0:d7:e3:e7:43:5e:28:29:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1E:04:12:11:A5:11:EA:8C:0D:4D:CB:53:75:F7:32:49:05:54:D3
X509v3 Authority Key Identifier:
keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c1:00:b4:10:6a:9f:34:c8:70:14:8a:8f:8b:89:57:c7:16:
95:03:ea:b7:73:e5:b7:42:53:a0:e4:6a:de:0c:15:44:1e:15:
9c:83:67:3e:4f:e3:91:b3:12:da:5a:67:c5:26:10:87:57:55:
d1:43:c1:ba:17:71:63:ae:63:6b:40:c0:3d:ff:72:c1:a9:42:
e9:2c:03:c8:1a:3c:01:e1:54:9e:87:95:7f:f8:55:cf:28:f2:
2d:eb:df:e1:5a:9b:ea:c1:f7:d1:05:af:40:ac:c6:30:72:18:
fd:33:eb:73:f3:0a:c6:13:04:40:cd:18:9d:09:14:0d:b4:f2:
0d:88:2f:32:6b:2d:c5:34:5c:2a:73:2f:a6:a1:8a:bb:c8:80:
8f:88:f6:8b:5e:b6:21:1f:de:a3:d0:36:ed:3c:4e:76:5b:86:
8a:83:a3:e4:a6:9e:5d:b0:2e:83:14:fe:61:48:35:81:37:d9:
6e:a4:d0:b3:10:87:0c:8a:e6:0d:6f:02:b2:e3:15:34:a9:59:
78:ec:44:72:56:68:be:fa:c3:6b:21:10:e5:a8:e7:ea:65:14:
71:32:c6:08:da:d9:66:ae:35:37:ad:cc:51:8e:ed:a6:8c:49:
6e:5a:c3:6d:36:a2:4a:eb:64:cc:df:20:d0:5d:7d:7f:45:4e:
ba:ad:dd:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9EyHTpG1I0CqkErQEkl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZDcyYjAzM2ZmNmZhMzhiZjIzNjEzOWFjZGI3N2E3YTBh
MDQ3YTMwHhcNMjYwNDE3MDEwMDQwWhcNMjYwNDE4MDEwMDQwWjAzMTEwLwYDVQQD
Eyg1ZTFlMDQxMjExYTUxMWVhOGMwZDRkY2I1Mzc1ZjczMjQ5MDU1NGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UwKzqDLBXxu1VUTsKRiciUc5Xrd
l5JaHgECc80HyhzBLaGBIbHykj3T72l7QCA9uooZOzCwupIdg9oMCxCrkHgMFNMB
tEH42shAM3l7NHiZlQhRhenWb3xEDyuyQ6IgijRwbAFOVpDFpmbddTtNoOTTdBOQ
/UByRGo2qcbb9pbDQ8ZL4pVzPKmANQJx5ZMKu8WzstDnWQn3kZFRLetNP/nqroez
1FxCuXo/LVuqo8ZNOUixZtlN4Al/A+v67QgCgvWECaF8/rBkZQru5S6inADrE1TQ
BNybxYjYwXc4TE+Ad5gO657406hHHT/LnAQbkGpVj91Q4Nfj50NeKCm1zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4eBBIRpRHqjA1Ny1N19zJJBVTTMB8GA1UdIwQY
MBaAFNnXKwM/9vo4vyNhOazbd6egoEejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYt
ZjgyMWE1YTVjZjZhLzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Y2JhZjctYjgzYi00Nzk4LWFiMzYtZjgyMWE1YTVjZjZh
LzEvMmRjckF6XzItamlfSTJFNXJOdDNwNkNnUjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8EAtBBq
nzTIcBSKj4uJV8cWlQPqt3Plt0JToORq3gwVRB4VnINnPk/jkbMS2lpnxSYQh1dV
0UPBuhdxY65ja0DAPf9ywalC6SwDyBo8AeFUnoeVf/hVzyjyLevf4Vqb6sH30QWv
QKzGMHIY/TPrc/MKxhMEQM0YnQkUDbTyDYgvMmstxTRcKnMvpqGKu8iAj4j2i162
IR/eo9A27TxOdluGioOj5KaeXbAugxT+YUg1gTfZbqTQsxCHDIrmDW8CsuMVNKlZ
eOxEclZovvrDayEQ5ajn6mUUcTLGCNrZZq41N63MUY7tpoxJblrDbTaiSutkzN8g
0F19f0VOuq3dJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:57 2026 by rpki-client