Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: A0N1auY566KKpO2At4FO8uES1BC2wv5oB0bZZQg1Nmg=
Subject key identifier: FD:4F:0D:77:5D:EA:EF:2D:4B:75:42:89:39:B8:12:DF:23:BE:E6:D1
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 01A13DB80CDBBB3F614089294404813B3418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 04:00:34 +0000
Manifest this update: Thu 15 Oct 2026 04:00:34 +0000
Manifest next update: Fri 16 Oct 2026 04:00:34 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: yaCoS3IYD+ZlRTI6h2/JI1GvaInI6dDobH73AfYH1Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:0c:db:bb:3f:61:40:89:29:44:04:81:3b:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Oct 15 04:00:34 2026 GMT
Not After : Oct 16 04:00:34 2026 GMT
Subject: CN=fd4f0d775deaef2d4b75428939b812df23bee6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:77:f1:14:73:79:6d:72:7b:12:24:16:4d:8d:
d0:f7:0d:29:c4:fe:54:14:2e:53:b8:d7:d9:b3:91:
cb:34:d3:48:c5:18:65:33:b0:e2:4e:24:fc:d6:2b:
53:aa:04:50:e2:3c:76:80:7a:70:a8:0b:d2:e7:a7:
ff:23:6f:00:d0:f7:02:3c:41:18:d0:d3:ef:ce:5d:
37:29:17:19:85:09:55:71:9f:76:96:8e:6f:ee:ec:
b7:f3:16:19:6f:49:43:27:8f:08:18:70:0a:88:d1:
95:c4:5c:5a:0b:7d:70:b5:8a:02:6c:ee:17:42:3f:
c5:ba:db:3c:10:97:eb:e8:53:0a:52:9a:52:6e:06:
e4:70:4b:15:f2:1c:3a:07:ca:23:a4:85:37:56:63:
fa:56:5f:0f:19:df:f9:c4:bc:48:85:e7:eb:1f:93:
f4:e3:0e:a3:ec:d0:51:13:2c:0e:3a:34:e5:6e:35:
fc:5d:a4:1e:11:2d:71:b5:46:7f:0c:5b:cc:29:e6:
77:b6:88:7c:77:f6:14:6d:3c:28:71:66:9e:dd:05:
91:90:6d:f8:cd:08:92:6d:06:67:1f:51:a0:4e:84:
8d:c0:ca:13:ff:43:fd:9c:b6:6a:7b:0e:10:5c:bc:
09:5d:d4:66:3e:59:b0:be:02:a2:6d:80:05:2d:50:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:0D:77:5D:EA:EF:2D:4B:75:42:89:39:B8:12:DF:23:BE:E6:D1
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6b:36:f1:56:20:32:5a:57:4d:cb:f6:dc:16:88:95:d7:48:
af:77:94:7a:8d:b1:7f:24:46:a7:f4:1e:63:54:17:79:25:af:
f2:6a:d8:9c:fc:0d:69:b6:de:82:49:28:a4:bf:d0:09:26:00:
86:5c:2c:c1:c3:56:b2:7e:fd:3a:af:cf:ac:5f:5c:d6:e6:6b:
c5:9d:9f:8b:b7:3f:9a:ce:fc:06:6e:35:39:bc:f1:e1:09:aa:
80:19:d7:65:ed:c0:67:9e:a3:dc:f2:d2:e7:f2:27:c5:01:7b:
1b:7e:19:a8:a5:45:0f:8c:c1:97:5a:c2:33:9b:18:18:13:5d:
e3:cb:29:56:89:04:80:ab:05:e1:7d:92:9e:e9:f9:fa:21:ac:
f1:21:c6:3c:90:d1:f2:2d:c2:77:e0:d8:b2:b4:ce:39:93:22:
65:a8:15:2b:0f:ef:2c:9f:75:c8:cd:a5:e1:f7:31:16:81:2a:
2a:cd:62:c1:c5:8b:15:30:fe:10:ce:b1:db:93:a7:ad:be:da:
2a:af:98:fb:2e:1a:89:a9:d4:b3:08:3a:f8:8b:90:46:c5:55:
ba:2c:0e:5e:fd:6a:f1:5a:53:f7:d5:4e:4d:bc:b0:93:04:2f:
c2:f5:ad:de:dc:bc:1c:f3:2b:11:65:d0:63:7f:f9:09:30:b0:
d4:92:48:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:55:55 2026 by rpki-client