Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: /wq85zpsfyRun+z/kxVauFjCzY7KytGhFFmgt/qhMZE=
Subject key identifier: 5C:2F:B0:47:6B:1A:D7:DB:D4:66:F5:9B:D0:AD:70:B1:F1:26:D1:E9
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019F194422878F7391DA14BC31FC13286BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 16:02:03 +0000
Manifest this update: Tue 30 Jun 2026 16:02:03 +0000
Manifest next update: Wed 01 Jul 2026 16:02:03 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: /ig6dO4EmkRNvAesjh9XJ3oyQmlfVnAlr7w+GWO8yd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:22:87:8f:73:91:da:14:bc:31:fc:13:28:6b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Jun 30 16:02:03 2026 GMT
Not After : Jul 1 16:02:03 2026 GMT
Subject: CN=5c2fb0476b1ad7dbd466f59bd0ad70b1f126d1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:1e:9a:e1:e8:9e:59:3b:03:6a:74:58:85:
cd:81:4a:b5:f8:4b:64:c5:50:f7:f9:26:de:53:d3:
e9:d9:99:68:41:ac:42:1f:1f:09:b9:20:82:79:ec:
c4:fa:a5:57:f3:98:57:f6:b2:7e:5c:31:aa:32:0b:
22:e9:b5:39:37:24:11:e1:97:34:be:9d:33:42:b0:
0d:cd:c5:30:1d:8a:ad:9c:ca:1a:b4:6b:f7:b5:74:
1c:46:a2:6f:ec:ea:3a:50:df:90:e9:3d:6f:2b:c1:
a4:e0:a1:90:e6:65:14:3c:14:b4:bb:31:65:a5:a7:
85:12:af:d0:45:e9:d5:58:87:ce:15:c2:89:6a:e9:
91:e5:ca:79:df:94:f2:43:7f:c2:df:33:4b:15:95:
92:ad:a8:0b:f9:12:b4:5d:b1:3b:03:8c:95:b4:be:
f6:31:70:bb:bd:ac:63:fe:ec:ab:fc:3f:c9:9f:bb:
22:8d:3f:cc:e0:49:33:0c:a5:df:e4:f2:63:50:e6:
4f:a4:04:a8:15:24:29:76:d6:fb:aa:69:08:69:e9:
f8:fd:98:54:77:17:90:91:98:ea:93:e4:a9:1d:8e:
2c:69:9a:74:f8:c3:9f:45:99:67:7a:50:e8:0b:d7:
64:81:00:d5:85:a5:06:60:75:e7:d5:d2:51:ce:5d:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2F:B0:47:6B:1A:D7:DB:D4:66:F5:9B:D0:AD:70:B1:F1:26:D1:E9
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:f5:52:cf:b0:b5:a1:94:de:87:b0:3c:e3:9f:04:09:28:
f0:71:ec:27:98:b5:ff:72:c6:c6:e4:ac:fd:2f:3b:53:c1:e7:
e6:65:a7:f9:44:1c:56:9c:45:4e:0d:3b:97:55:da:69:2f:c9:
13:41:08:c8:1e:75:8a:7a:49:b1:65:c6:3e:58:2d:f1:5b:e2:
0f:f6:d4:1d:75:86:b4:6b:62:32:46:14:bd:ab:08:85:f9:c5:
fc:f2:11:7e:f2:f7:e8:d0:2f:dd:63:73:4d:dd:43:5d:3e:eb:
10:92:25:d9:3a:9e:cd:15:2d:75:a4:86:5f:3f:83:c7:64:16:
e3:ee:aa:a6:77:cd:3a:00:71:6b:cf:6f:24:c7:78:3d:fb:5b:
99:9d:21:99:d8:39:35:6a:00:ba:44:4b:6f:0b:f1:2d:bf:0a:
d0:19:57:7e:15:a9:e0:f2:0a:8a:3f:fb:d6:d3:1e:4c:d4:98:
2b:1b:a7:3f:cf:38:66:0d:d5:81:41:fc:0a:4a:81:d2:8b:77:
cc:c4:61:9c:f5:78:51:88:4c:5a:95:32:6a:77:bd:82:6c:46:
7a:f6:8e:a9:28:f4:ef:04:fc:be:3f:f4:7f:ed:14:66:06:ac:
06:ff:12:f7:8f:59:eb:eb:88:4d:71:b8:a4:da:02:c4:c8:cd:
c1:d9:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:10:32 2026 by rpki-client