Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
File: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft (raw, json)
Hash identifier: JO8IcE2czNGHmJKsdeqJA1MXT3s0WomYmZR42e/pxZE=
Subject key identifier: 5A:7E:66:2E:04:AD:A5:53:34:25:71:7E:59:6C:49:15:30:10:04:C4
Authority key identifier: D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
Certificate issuer: /CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Certificate serial: 01A1401581A427E6A23EB3570BAB0F06F8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 15:01:53 +0000
Manifest this update: Thu 15 Oct 2026 15:01:53 +0000
Manifest next update: Fri 16 Oct 2026 15:01:53 +0000
Files and hashes: 1: 2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl (hash: BDPbfPbQmoGfrIaKfVNjyp/dhK89q7Yale22V72BxOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:81:a4:27:e6:a2:3e:b3:57:0b:ab:0f:06:f8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87d8150d1182385c461b580d5638a570c2bc0bf
Validity
Not Before: Oct 15 15:01:53 2026 GMT
Not After : Oct 16 15:01:53 2026 GMT
Subject: CN=5a7e662e04ada5533425717e596c4915301004c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:5d:2c:ca:e8:6d:eb:d1:84:73:b9:76:63:
5b:9a:89:02:03:bd:cb:48:b5:e1:83:34:03:1c:c7:
f7:cd:6f:0e:65:55:a1:9d:b7:1f:9f:67:e8:3d:5b:
5a:33:25:d6:7f:74:ef:9b:cd:96:2d:e2:d2:51:f7:
3c:d8:cf:c5:e7:60:74:8b:37:50:69:c9:58:4d:60:
ea:6e:62:30:7f:9b:4d:26:79:86:f5:aa:1f:25:8b:
39:01:73:3a:1c:85:79:dd:a3:fd:a4:2a:c4:db:fc:
d6:d0:94:6a:bb:13:4f:56:de:fc:d9:0d:bf:16:71:
2e:4d:43:20:3b:f8:ff:21:16:e8:aa:ab:9d:6d:65:
0e:72:19:a3:36:b1:df:52:f9:1b:d8:be:52:fa:35:
d6:d7:64:90:fd:f3:c7:57:8d:aa:46:16:07:54:ff:
d0:b3:9a:8c:69:5e:f5:5b:eb:fa:d9:a1:f9:ec:a6:
e3:21:68:37:46:c0:19:d5:1b:1f:1d:56:0b:d5:d2:
66:f0:29:e2:a0:92:d3:36:6f:dc:e0:3d:c8:93:aa:
d8:9d:fa:f0:e7:1a:33:bf:15:fa:f9:b2:10:10:a5:
40:76:11:cc:16:c4:7b:d7:1d:e0:ca:00:01:28:36:
99:86:ab:3a:09:dc:87:c1:8e:9e:e9:0b:c0:32:ce:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:66:2E:04:AD:A5:53:34:25:71:7E:59:6C:49:15:30:10:04:C4
X509v3 Authority Key Identifier:
keyid:D8:7D:81:50:D1:18:23:85:C4:61:B5:80:D5:63:8A:57:0C:2B:C0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2H2BUNEYI4XEYbWA1WOKVwwrwL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e1124d-7b34-439d-961d-867953a3b181/1/2H2BUNEYI4XEYbWA1WOKVwwrwL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:84:64:3e:11:64:58:9d:e1:1b:a2:65:af:c7:b1:2b:0b:
a0:a9:54:0a:76:eb:3e:e5:06:6a:a8:48:50:74:a0:da:01:86:
28:6b:72:2d:a3:54:8f:18:cd:76:da:74:f5:0e:da:76:f5:47:
d3:f5:c0:c4:05:6c:c8:30:b6:da:7a:02:91:a6:03:fb:ae:68:
d6:e8:11:ab:8c:fd:10:c7:2b:72:89:c1:81:78:40:44:65:1e:
c4:a2:65:8d:46:8f:88:0b:47:a6:b7:e4:4f:d8:e2:c7:c4:bf:
44:37:24:ad:07:90:71:04:2d:22:47:5a:cf:f2:45:3d:93:1b:
67:3c:d2:c6:f8:5a:f7:79:c7:62:7a:b9:4b:00:66:53:8e:05:
73:74:66:56:d3:19:bb:78:40:93:0e:64:bf:de:74:57:6d:8d:
ae:e8:a1:4b:7f:0c:92:af:b7:62:9d:e9:37:d0:e4:a4:2c:ff:
96:da:3e:97:16:2d:d5:f0:21:b3:d7:a5:aa:82:5a:81:fe:cb:
79:82:23:ff:67:a7:b1:07:c2:1f:68:4e:ff:5c:b8:19:83:a4:
8e:2e:ef:32:97:82:e6:7e:9b:22:e4:a7:bb:01:d9:85:a9:6e:
73:f5:0e:4b:15:1b:ed:34:f9:98:7d:41:ee:c9:22:ee:98:99:
aa:ba:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:03 2026 by rpki-client