Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
File: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft (raw, json)
Hash identifier: eVSts9meo7VN1xiFvkal27QgwNr2I/sceZdUcTC9cLA=
Subject key identifier: 93:13:00:4E:00:B2:EB:5F:79:02:CC:A4:54:BA:85:7B:B1:41:21:FF
Authority key identifier: D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
Certificate issuer: /CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Certificate serial: 01A0404DE8DF5F240FF0133262589F95FB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
Manifest number: 03E4
Signing time: Wed 26 Aug 2026 23:00:42 +0000
Manifest this update: Wed 26 Aug 2026 23:00:42 +0000
Manifest next update: Thu 27 Aug 2026 23:00:42 +0000
Files and hashes: 1: 2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl (hash: xNdd1GOlqlqDNj0dwggQ5uYoDWZm4cftAGMejXhASw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:e8:df:5f:24:0f:f0:13:32:62:58:9f:95:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92bff36bf957a9167ee3f0fa4a64d872516e72d
Validity
Not Before: Aug 26 23:00:42 2026 GMT
Not After : Aug 27 23:00:42 2026 GMT
Subject: CN=9313004e00b2eb5f7902cca454ba857bb14121ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8a:7c:e8:ac:fa:fe:93:b3:26:53:d1:91:06:
cd:f2:4d:e7:ca:a1:01:82:74:46:00:be:da:57:11:
42:55:41:1c:10:ec:ba:e3:f9:fb:d6:6b:4a:18:92:
14:08:f4:2c:d8:d5:62:36:ca:13:ac:72:36:dc:f9:
36:0f:69:f6:b5:5c:10:6a:e0:7c:68:dd:3c:40:11:
e4:97:28:27:a7:ee:94:66:8c:3e:0c:65:3f:6f:e7:
0f:07:a9:0e:0a:10:09:75:b6:c7:c5:77:e0:2b:d3:
85:11:5b:a6:8a:ff:6b:ab:d7:c0:a4:f1:0a:1e:72:
5d:51:8b:74:ba:43:b9:7d:44:8d:bd:e7:fe:1b:40:
8a:61:dd:3e:5e:67:2d:46:af:5c:97:86:b2:43:3d:
e8:64:f8:ac:b1:9b:c3:bd:77:36:9c:ad:f2:c1:f7:
35:4d:17:19:c4:12:0c:e6:1d:ae:f0:e6:3a:a8:2a:
6e:d3:51:e3:fd:4d:6a:58:ac:a7:61:a8:b5:4c:88:
04:9d:76:9d:9d:c3:8a:87:1c:3a:64:a7:92:4c:f4:
b7:72:ea:b1:cb:79:1c:27:62:1a:d4:7f:ec:42:e4:
e6:bf:ee:ff:01:31:c9:37:6a:bf:fa:c4:96:9e:5d:
5a:18:4b:55:12:e8:c3:3c:44:bf:53:4f:e0:11:c8:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:13:00:4E:00:B2:EB:5F:79:02:CC:A4:54:BA:85:7B:B1:41:21:FF
X509v3 Authority Key Identifier:
keyid:D9:2B:FF:36:BF:95:7A:91:67:EE:3F:0F:A4:A6:4D:87:25:16:E7:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cb52b7-7471-40f1-bbb7-5dfeb9782cfb/1/2Sv_Nr-VepFn7j8PpKZNhyUW5y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:34:08:db:51:a2:e0:52:e0:c3:d2:01:c2:6b:b6:62:80:02:
54:a3:05:7d:3e:31:eb:c1:e0:2a:6c:90:78:28:68:d3:c2:8d:
81:7c:80:d2:9d:ed:36:7c:fe:22:61:15:1b:fc:85:bd:19:b2:
78:1d:ba:b2:e9:13:7b:d8:02:7f:f4:9f:41:24:3d:7e:0a:83:
c2:80:10:64:23:27:e2:60:4c:69:4b:ee:22:4b:43:91:bb:08:
2e:a3:90:c0:63:34:7d:3f:ca:ae:1f:8d:62:91:df:f9:58:da:
dd:70:6a:84:51:49:6f:56:c8:f6:39:ab:5f:f5:8f:d7:59:c7:
89:d9:b7:61:4b:c4:6f:49:b3:c8:4f:57:4f:bc:06:dc:47:ac:
37:38:67:a3:f8:64:c3:0a:fe:22:e5:86:f9:35:73:fc:ac:af:
37:0e:f1:98:f2:50:6e:16:89:ac:da:89:95:e2:45:12:14:b5:
4a:c8:b4:2a:0d:51:5c:67:84:4a:2e:97:96:c3:15:7b:10:7d:
b7:ab:b6:bf:89:f0:a8:e3:9c:a5:04:f0:6a:20:ac:25:3b:6a:
07:7e:83:fb:9a:b3:5e:45:b1:80:60:83:4b:e5:4e:26:c2:15:
ab:1d:e0:ba:03:ca:57:1f:91:58:ea:60:5e:14:0d:23:49:ed:
86:77:55:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATejfXyQP8BMyYliflfuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MmJmZjM2YmY5NTdhOTE2N2VlM2YwZmE0YTY0ZDg3MjUx
NmU3MmQwHhcNMjYwODI2MjMwMDQyWhcNMjYwODI3MjMwMDQyWjAzMTEwLwYDVQQD
Eyg5MzEzMDA0ZTAwYjJlYjVmNzkwMmNjYTQ1NGJhODU3YmIxNDEyMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0op86Kz6/pOzJlPRkQbN8k3nyqEB
gnRGAL7aVxFCVUEcEOy64/n71mtKGJIUCPQs2NViNsoTrHI23Pk2D2n2tVwQauB8
aN08QBHklygnp+6UZow+DGU/b+cPB6kOChAJdbbHxXfgK9OFEVumiv9rq9fApPEK
HnJdUYt0ukO5fUSNvef+G0CKYd0+XmctRq9cl4ayQz3oZPissZvDvXc2nK3ywfc1
TRcZxBIM5h2u8OY6qCpu01Hj/U1qWKynYai1TIgEnXadncOKhxw6ZKeSTPS3cuqx
y3kcJ2Ia1H/sQuTmv+7/ATHJN2q/+sSWnl1aGEtVEujDPES/U0/gEcg/UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMTAE4AsutfeQLMpFS6hXuxQSH/MB8GA1UdIwQY
MBaAFNkr/za/lXqRZ+4/D6SmTYclFuctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjct
NWRmZWI5NzgyY2ZiLzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9jYjUyYjctNzQ3MS00MGYxLWJiYjctNWRmZWI5NzgyY2Zi
LzEvMlN2X05yLVZlcEZuN2o4UHBLWk5oeVVXNXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDQI21Gi
4FLgw9IBwmu2YoACVKMFfT4x68HgKmyQeCho08KNgXyA0p3tNnz+ImEVG/yFvRmy
eB26sukTe9gCf/SfQSQ9fgqDwoAQZCMn4mBMaUvuIktDkbsILqOQwGM0fT/Krh+N
YpHf+Vja3XBqhFFJb1bI9jmrX/WP11nHidm3YUvEb0mzyE9XT7wG3EesNzhno/hk
wwr+IuWG+TVz/KyvNw7xmPJQbhaJrNqJleJFEhS1Ssi0Kg1RXGeESi6XlsMVexB9
t6u2v4nwqOOcpQTwaiCsJTtqB36D+5qzXkWxgGCDS+VOJsIVqx3gugPKVx+RWOpg
XhQNI0nthndVGg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:58 2026 by rpki-client