Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
File: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft (raw, json)
Hash identifier: V1zV79waUENrSgqBzK5WofayOBCLz+hieZJbq78dxeg=
Subject key identifier: 03:CE:36:18:78:DA:57:BF:D8:FA:1F:2C:AA:39:69:5E:7D:5A:76:C2
Authority key identifier: D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
Certificate issuer: /CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Certificate serial: 019D98F4F8247F02B63E8A96BBBD8B9C82AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
Manifest number: 0D5F
Signing time: Fri 17 Apr 2026 01:01:24 +0000
Manifest this update: Fri 17 Apr 2026 01:01:24 +0000
Manifest next update: Sat 18 Apr 2026 01:01:24 +0000
Files and hashes: 1: 2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl (hash: kuLfL5NaOXCuMXjKxLItwjTkUHr8LSuHZsQU/Lh6zlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f8:24:7f:02:b6:3e:8a:96:bb:bd:8b:9c:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fe0cc3143f99c5e55836a3ff6c0b66fc20c4d5
Validity
Not Before: Apr 17 01:01:24 2026 GMT
Not After : Apr 18 01:01:24 2026 GMT
Subject: CN=03ce361878da57bfd8fa1f2caa39695e7d5a76c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:a0:85:2d:5b:b7:5b:a4:18:ed:1e:25:22:
87:dc:99:7a:b1:bf:67:b9:a7:ad:db:a9:01:5c:6e:
a6:cd:63:2e:60:46:c2:3a:fa:b4:a0:6b:fc:bf:c7:
02:5e:8c:b3:5c:6b:f2:7f:83:81:a1:90:c2:07:a7:
b5:7c:9c:18:0f:ec:34:fe:7b:22:d6:25:b2:71:02:
2a:51:8e:d6:62:ca:63:ff:ff:d9:41:d6:ca:c0:a5:
81:e8:27:8c:f2:9a:cc:d3:cc:23:bc:6b:d7:72:a3:
bb:c3:ce:f4:3f:38:7c:20:ca:37:28:a2:78:59:36:
64:de:9d:aa:0d:de:3a:c7:74:5b:e3:92:bd:2a:c8:
a8:27:a7:fa:71:50:ba:e1:12:f6:77:71:d1:0d:0c:
2e:42:c5:be:b7:0b:a4:35:66:ca:ff:6c:61:f4:a7:
22:d0:5e:4b:62:af:2d:24:b7:3c:c6:5c:c3:35:50:
d0:a6:23:c0:1a:16:ec:3f:d5:1f:98:e0:ee:e8:a6:
45:67:bd:6e:34:df:65:8f:96:80:6b:ad:c1:54:cd:
82:56:9f:85:72:62:fe:d6:79:3c:08:55:c8:e8:e3:
a2:5a:ff:9c:72:55:82:c8:70:9d:ce:e7:c4:91:44:
1f:cd:82:b1:a1:99:a6:54:37:37:a7:1a:62:8c:c7:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:36:18:78:DA:57:BF:D8:FA:1F:2C:AA:39:69:5E:7D:5A:76:C2
X509v3 Authority Key Identifier:
keyid:D9:FE:0C:C3:14:3F:99:C5:E5:58:36:A3:FF:6C:0B:66:FC:20:C4:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c40db5-8c7b-40b2-b140-26319496d7de/1/2f4MwxQ_mcXlWDaj_2wLZvwgxNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:93:2e:4c:9c:d2:c0:d6:98:d6:1c:6a:9a:76:31:af:5e:93:
3a:9e:74:ed:a6:70:83:96:e5:52:6a:47:8a:9d:ef:57:17:96:
0a:9d:f4:29:b5:e1:1a:06:d4:94:94:b4:9a:40:cc:f9:68:f3:
7f:34:ec:98:9e:dd:d8:f5:21:e7:f1:92:09:4e:ab:40:e1:58:
59:0c:8c:54:be:e7:46:f7:b7:b4:73:03:29:4a:68:ed:96:4b:
34:bd:d3:cb:a4:92:c3:66:42:19:08:a2:5b:f1:2a:7b:28:15:
54:60:c1:9f:a2:bb:63:71:70:27:f4:da:c2:34:3e:f0:e6:59:
34:37:23:95:d1:40:4e:42:3f:da:2a:ff:cd:8a:ae:33:fc:5c:
3c:e4:1f:dd:f0:d9:d4:46:24:1a:ac:15:69:1d:c5:6d:03:d5:
aa:93:74:ed:c0:48:2d:8f:c5:9d:f8:14:03:64:d1:5d:47:30:
6e:91:8c:b5:a0:88:41:db:dd:5f:9d:15:d6:b9:28:1a:1f:bb:
ea:8b:4e:e3:07:aa:e3:4e:fb:e0:67:e1:af:9d:65:52:db:d4:
8e:9b:50:0d:f4:18:71:b6:4d:7d:04:39:5c:1b:88:64:46:27:
75:ec:5b:c2:8a:63:cd:96:80:4b:b8:70:23:4f:a9:39:53:0b:
c7:15:21:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9PgkfwK2PoqWu72LnIKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmUwY2MzMTQzZjk5YzVlNTU4MzZhM2ZmNmMwYjY2ZmMy
MGM0ZDUwHhcNMjYwNDE3MDEwMTI0WhcNMjYwNDE4MDEwMTI0WjAzMTEwLwYDVQQD
EygwM2NlMzYxODc4ZGE1N2JmZDhmYTFmMmNhYTM5Njk1ZTdkNWE3NmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4eghS1bt1ukGO0eJSKH3Jl6sb9n
uaet26kBXG6mzWMuYEbCOvq0oGv8v8cCXoyzXGvyf4OBoZDCB6e1fJwYD+w0/nsi
1iWycQIqUY7WYspj///ZQdbKwKWB6CeM8prM08wjvGvXcqO7w870Pzh8IMo3KKJ4
WTZk3p2qDd46x3Rb45K9KsioJ6f6cVC64RL2d3HRDQwuQsW+twukNWbK/2xh9Kci
0F5LYq8tJLc8xlzDNVDQpiPAGhbsP9UfmODu6KZFZ71uNN9lj5aAa63BVM2CVp+F
cmL+1nk8CFXI6OOiWv+cclWCyHCdzufEkUQfzYKxoZmmVDc3pxpijMfBYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPONhh42le/2PofLKo5aV59WnbCMB8GA1UdIwQY
MBaAFNn+DMMUP5nF5Vg2o/9sC2b8IMTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAt
MjYzMTk0OTZkN2RlLzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jNDBkYjUtOGM3Yi00MGIyLWIxNDAtMjYzMTk0OTZkN2Rl
LzEvMmY0TXd4UV9tY1hsV0Rhal8yd0xadndneE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJMuTJzS
wNaY1hxqmnYxr16TOp507aZwg5blUmpHip3vVxeWCp30KbXhGgbUlJS0mkDM+Wjz
fzTsmJ7d2PUh5/GSCU6rQOFYWQyMVL7nRve3tHMDKUpo7ZZLNL3Ty6SSw2ZCGQii
W/EqeygVVGDBn6K7Y3FwJ/TawjQ+8OZZNDcjldFATkI/2ir/zYquM/xcPOQf3fDZ
1EYkGqwVaR3FbQPVqpN07cBILY/FnfgUA2TRXUcwbpGMtaCIQdvdX50V1rkoGh+7
6otO4weq40774Gfhr51lUtvUjptQDfQYcbZNfQQ5XBuIZEYndexbwopjzZaAS7hw
I0+pOVMLxxUhWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:16 2026 by rpki-client