Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: elljR+dwHyXb0keFW39Wa0P/nihK5S/t1Ehg6StyjL8=
Subject key identifier: 34:2F:AF:FA:27:1A:69:3F:66:2A:DB:49:E4:20:8E:33:7F:B0:7A:C3
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 01A00101277DB9B2F34F22DE9A845DC3470F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 19FE
Signing time: Fri 14 Aug 2026 16:00:47 +0000
Manifest this update: Fri 14 Aug 2026 16:00:47 +0000
Manifest next update: Sat 15 Aug 2026 16:00:47 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: vh7SLatcMRrogcLUFFLtoF/gI3bnCztI7VKbWdWtFWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:27:7d:b9:b2:f3:4f:22:de:9a:84:5d:c3:47:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Aug 14 16:00:47 2026 GMT
Not After : Aug 15 16:00:47 2026 GMT
Subject: CN=342faffa271a693f662adb49e4208e337fb07ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:64:3f:7c:79:19:fb:cc:b2:0b:3c:86:d3:b3:
94:10:69:30:ad:fd:43:e4:ac:d1:63:2c:7e:18:f3:
2c:22:44:4b:ca:6c:90:bc:50:58:9b:ab:5c:f4:db:
2d:a5:07:13:2a:03:20:ce:1b:0e:87:a5:11:7c:7a:
0e:da:6d:b2:bd:a7:57:20:03:28:63:dd:84:51:00:
b3:59:9d:ca:82:49:12:b9:b7:73:99:43:db:7d:c7:
45:f0:54:6a:ec:e2:29:1e:7a:4f:e4:c1:cf:0d:6a:
67:67:32:ec:93:c0:a6:b1:ad:f3:39:53:67:13:7b:
a3:f6:91:3a:7d:7f:1e:53:ca:91:44:a8:14:f9:6e:
ac:c2:2d:53:48:1f:1b:6e:7a:a4:88:ce:fd:37:69:
77:7a:d0:e0:48:39:5b:27:f4:ee:88:83:04:3b:62:
a6:83:1b:cb:34:3a:17:53:d8:91:17:9c:a9:b8:72:
4e:99:bb:8b:ce:30:6e:06:f9:60:e5:ed:20:a1:b9:
95:a3:71:ba:f0:52:9d:ee:65:49:53:99:0b:57:7e:
11:17:1d:fe:48:fc:8b:33:70:d0:73:09:ce:1f:88:
e3:01:d4:f4:c0:7f:4b:3e:aa:9c:28:f8:4b:10:bb:
53:1a:0b:b7:56:ac:47:bc:63:76:32:ee:78:6d:38:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:AF:FA:27:1A:69:3F:66:2A:DB:49:E4:20:8E:33:7F:B0:7A:C3
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f4:11:1f:8a:58:71:19:33:be:16:85:f7:45:7b:fa:d8:da:
d2:0a:29:e4:cd:2e:8f:eb:06:13:c4:b9:fb:33:f5:de:cf:f1:
fc:10:8e:f8:73:35:69:8f:93:5b:96:ce:8f:65:35:f4:13:b6:
29:b1:92:94:6f:e9:62:53:92:60:98:de:50:99:d6:d5:e4:dc:
85:d7:e2:b3:06:0e:19:9e:87:7c:d2:d9:3e:f8:61:b7:81:66:
48:d6:6b:b5:b5:ca:52:da:5e:76:ed:83:05:a6:62:b4:38:6b:
cc:a6:4c:9b:84:54:45:8e:10:5e:1f:99:7d:d9:33:6d:10:b3:
98:c4:7d:81:5c:35:a8:98:d4:52:10:02:4b:d3:31:6d:11:f8:
37:1c:ea:41:47:e6:52:02:03:ef:fc:e6:35:80:55:ad:d9:9b:
13:ab:44:ee:85:20:d0:93:4d:bf:20:b1:58:26:81:82:03:00:
29:ec:32:5c:1f:8a:7b:f0:b3:bf:7a:3f:02:92:15:3e:c3:06:
1f:38:29:fa:2f:34:a7:19:c0:a4:9c:2c:dd:ed:34:84:a3:1a:
b2:6b:2e:74:43:5a:a2:36:00:ba:6d:5d:a6:79:93:ed:e7:f9:
68:62:7b:11:23:36:4c:5e:e9:24:1e:75:9c:1d:62:6a:18:68:
c0:b5:e8:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABASd9ubLzTyLemoRdw0cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTg3YzlhYzEwZjIwNTE1MmIxMjhlY2RjMjE1N2M5MDI0
OTE2YTQwHhcNMjYwODE0MTYwMDQ3WhcNMjYwODE1MTYwMDQ3WjAzMTEwLwYDVQQD
EygzNDJmYWZmYTI3MWE2OTNmNjYyYWRiNDllNDIwOGUzMzdmYjA3YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGQ/fHkZ+8yyCzyG07OUEGkwrf1D
5KzRYyx+GPMsIkRLymyQvFBYm6tc9NstpQcTKgMgzhsOh6URfHoO2m2yvadXIAMo
Y92EUQCzWZ3KgkkSubdzmUPbfcdF8FRq7OIpHnpP5MHPDWpnZzLsk8Cmsa3zOVNn
E3uj9pE6fX8eU8qRRKgU+W6swi1TSB8bbnqkiM79N2l3etDgSDlbJ/TuiIMEO2Km
gxvLNDoXU9iRF5ypuHJOmbuLzjBuBvlg5e0gobmVo3G68FKd7mVJU5kLV34RFx3+
SPyLM3DQcwnOH4jjAdT0wH9LPqqcKPhLELtTGgu3VqxHvGN2Mu54bTglhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQvr/onGmk/ZirbSeQgjjN/sHrDMB8GA1UdIwQY
MBaAFNkYfJrBDyBRUrEo7NwhV8kCSRakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEt
MjRiMzA2MDZlMjE5LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80YWQ0NTQtMDA0OC00MTFhLWIxZWEtMjRiMzA2MDZlMjE5
LzEvMlJoOG1zRVBJRkZTc1NqczNDRlh5UUpKRnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPQRH4pY
cRkzvhaF90V7+tja0gop5M0uj+sGE8S5+zP13s/x/BCO+HM1aY+TW5bOj2U19BO2
KbGSlG/pYlOSYJjeUJnW1eTchdfiswYOGZ6HfNLZPvhht4FmSNZrtbXKUtpedu2D
BaZitDhrzKZMm4RURY4QXh+ZfdkzbRCzmMR9gVw1qJjUUhACS9MxbRH4NxzqQUfm
UgID7/zmNYBVrdmbE6tE7oUg0JNNvyCxWCaBggMAKewyXB+Ke/Czv3o/ApIVPsMG
Hzgp+i80pxnApJws3e00hKMasmsudENaojYAum1dpnmT7ef5aGJ7ESM2TF7pJB51
nB1iahhowLXo0Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:24 2026 by rpki-client