
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
File: 2JVh1yxrmEdwA-5iKJ_sVwweFng.mft (raw, json)
Hash identifier: VNAN3Sc2Hu9RUKBLfizZTgpbRGgFdIrkRewDBrBgVN8=
Subject key identifier: 1B:D8:1E:3E:0B:02:43:A9:EF:36:C8:09:3F:4E:3E:2F:67:38:D8:D3
Authority key identifier: D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
Certificate issuer: /CN=d89561d72c6b98477003ee62289fec570c1e1678
Certificate serial: 01A13E5D4C9CAE9579B7CCF0438C40723877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
Manifest number: 1A34
Signing time: Thu 15 Oct 2026 07:01:04 +0000
Manifest this update: Thu 15 Oct 2026 07:01:04 +0000
Manifest next update: Fri 16 Oct 2026 07:01:04 +0000
Files and hashes: 1: 2JVh1yxrmEdwA-5iKJ_sVwweFng.crl (hash: HD0wZdCvDhtRBFHv8vRlllWkSj2NSoXWXYV0f/wBHH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:4c:9c:ae:95:79:b7:cc:f0:43:8c:40:72:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89561d72c6b98477003ee62289fec570c1e1678
Validity
Not Before: Oct 15 07:01:04 2026 GMT
Not After : Oct 16 07:01:04 2026 GMT
Subject: CN=1bd81e3e0b0243a9ef36c8093f4e3e2f6738d8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:7e:34:6f:9a:71:82:2f:c0:d4:e0:66:63:
8c:f8:3b:c6:38:f0:42:7e:d0:3c:f6:fe:9d:e8:85:
bf:90:32:85:f2:ac:3d:91:2d:ff:5a:17:39:12:e7:
1e:84:90:27:55:0f:37:15:92:5a:cb:31:c7:ee:6b:
4c:95:ed:28:ef:75:14:11:cb:68:af:08:04:46:e3:
d7:29:fe:2c:fe:d0:ca:0c:7a:ec:28:8d:54:ea:11:
59:df:ad:ca:6c:21:bf:11:ff:2b:a9:58:96:08:f7:
cc:ec:3e:0c:81:2c:33:b9:90:9e:c2:4f:c1:56:b8:
39:37:04:c0:8f:32:e6:3d:66:02:b3:07:e6:75:48:
ee:c1:55:e8:8f:a3:f1:7b:c9:2c:ef:c2:be:68:76:
82:96:70:fc:08:09:f8:39:b7:bd:0d:26:0f:3b:36:
6f:bd:3d:59:c8:72:11:b7:03:20:5e:38:64:c2:68:
e9:fb:05:a9:a7:c6:92:07:45:3e:be:fa:74:8a:b6:
20:eb:d6:b2:94:04:82:05:5c:1d:95:bf:e9:65:28:
a8:d3:eb:dc:d9:d7:9b:b1:e7:b6:3a:8e:65:a0:24:
a7:a4:5a:78:42:14:c1:a5:d0:06:ec:8c:06:59:71:
b1:93:b6:f9:59:18:5e:25:4c:b8:cc:6d:86:74:94:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:1E:3E:0B:02:43:A9:EF:36:C8:09:3F:4E:3E:2F:67:38:D8:D3
X509v3 Authority Key Identifier:
keyid:D8:95:61:D7:2C:6B:98:47:70:03:EE:62:28:9F:EC:57:0C:1E:16:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JVh1yxrmEdwA-5iKJ_sVwweFng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c7116e-cd60-404e-91fa-76e7dae8a1cb/1/2JVh1yxrmEdwA-5iKJ_sVwweFng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:74:83:c4:0a:35:d0:36:dd:74:b2:e5:9f:3b:81:04:94:3c:
5f:33:f7:68:01:ac:f0:39:54:fd:8a:45:b7:44:c2:88:83:74:
f8:e4:4b:4d:47:83:2a:20:ca:d0:a6:3a:9f:0e:22:96:58:77:
ed:c0:3a:a1:1c:f4:6d:2d:42:a9:1e:b7:0b:c0:2e:57:93:aa:
f2:d9:8f:3d:22:c8:59:8b:b4:a8:7c:8a:b5:dd:a0:c7:d6:0c:
ed:39:f1:4c:52:7c:41:b4:50:88:50:3d:2c:e5:7e:11:88:db:
7a:7d:3d:3e:8b:a0:dc:e8:96:20:b7:f0:e5:70:19:37:a1:02:
cd:8f:6c:2e:a2:61:94:4c:72:ba:6d:08:64:47:94:b2:d5:91:
5f:c7:4f:5f:fb:86:35:c4:94:b3:45:8f:f8:26:2c:76:67:da:
b0:23:d3:70:b1:64:04:b3:a6:6c:4b:c7:b7:07:ef:f1:f5:e6:
17:cf:47:4f:61:a3:7d:d8:0c:ff:75:4a:fb:ae:10:36:5a:cd:
7f:79:bd:60:63:6c:f4:34:80:0a:47:83:ef:19:3e:7f:f0:bd:
cd:17:c4:2d:a9:70:b6:7a:00:84:59:f9:2c:03:06:68:71:20:
2e:71:15:ec:7b:c3:fd:ae:01:e5:be:96:40:5f:67:fd:34:b9:
81:92:8f:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XUycrpV5t8zwQ4xAcjh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTU2MWQ3MmM2Yjk4NDc3MDAzZWU2MjI4OWZlYzU3MGMx
ZTE2NzgwHhcNMjYxMDE1MDcwMTA0WhcNMjYxMDE2MDcwMTA0WjAzMTEwLwYDVQQD
EygxYmQ4MWUzZTBiMDI0M2E5ZWYzNmM4MDkzZjRlM2UyZjY3MzhkOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBp+NG+acYIvwNTgZmOM+DvGOPBC
ftA89v6d6IW/kDKF8qw9kS3/Whc5EucehJAnVQ83FZJayzHH7mtMle0o73UUEcto
rwgERuPXKf4s/tDKDHrsKI1U6hFZ363KbCG/Ef8rqViWCPfM7D4MgSwzuZCewk/B
Vrg5NwTAjzLmPWYCswfmdUjuwVXoj6Pxe8ks78K+aHaClnD8CAn4Obe9DSYPOzZv
vT1ZyHIRtwMgXjhkwmjp+wWpp8aSB0U+vvp0irYg69aylASCBVwdlb/pZSio0+vc
2debsee2Oo5loCSnpFp4QhTBpdAG7IwGWXGxk7b5WRheJUy4zG2GdJQ3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvYHj4LAkOp7zbICT9OPi9nONjTMB8GA1UdIwQY
MBaAFNiVYdcsa5hHcAPuYiif7FcMHhZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jNzExNmUtY2Q2MC00MDRlLTkxZmEt
NzZlN2RhZThhMWNiLzEvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jNzExNmUtY2Q2MC00MDRlLTkxZmEtNzZlN2RhZThhMWNi
LzEvMkpWaDF5eHJtRWR3QS01aUtKX3NWd3dlRm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3SDxAo1
0DbddLLlnzuBBJQ8XzP3aAGs8DlU/YpFt0TCiIN0+ORLTUeDKiDK0KY6nw4illh3
7cA6oRz0bS1CqR63C8AuV5Oq8tmPPSLIWYu0qHyKtd2gx9YM7TnxTFJ8QbRQiFA9
LOV+EYjben09Poug3OiWILfw5XAZN6ECzY9sLqJhlExyum0IZEeUstWRX8dPX/uG
NcSUs0WP+CYsdmfasCPTcLFkBLOmbEvHtwfv8fXmF89HT2GjfdgM/3VK+64QNlrN
f3m9YGNs9DSACkeD7xk+f/C9zRfELalwtnoAhFn5LAMGaHEgLnEV7HvD/a4B5b6W
QF9n/TS5gZKPtA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:50 2026 by rpki-client