Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
File: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft (raw, json)
Hash identifier: ufQLjdThh/g1OelPvqzK2zZO172ioZP6jXjamaxgyJQ=
Subject key identifier: 06:74:7F:04:0B:1D:C5:B7:D0:1E:9C:16:9A:39:DC:D9:B1:7F:E9:E4
Authority key identifier: DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
Certificate issuer: /CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Certificate serial: 019F1754BA17E67850AA43CD3ECA4ED047C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 07:00:56 +0000
Manifest this update: Tue 30 Jun 2026 07:00:56 +0000
Manifest next update: Wed 01 Jul 2026 07:00:56 +0000
Files and hashes: 1: 2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl (hash: ggvRXynDC6Cnm+pvEjli5c0H7DsfJo/+cuqaHOQ1WYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:ba:17:e6:78:50:aa:43:cd:3e:ca:4e:d0:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7dcb081c73802fc1895c6eb4a272666bd4279a
Validity
Not Before: Jun 30 07:00:56 2026 GMT
Not After : Jul 1 07:00:56 2026 GMT
Subject: CN=06747f040b1dc5b7d01e9c169a39dcd9b17fe9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:ed:3f:23:3e:d2:27:2b:a9:ea:ca:1f:e8:
5c:c4:5c:e8:87:19:34:f2:d6:88:ea:d3:7e:f9:43:
5c:c1:1e:fe:6a:c5:9b:5b:f7:fc:7b:b4:fe:c7:bb:
7a:78:d0:b4:8e:a0:c4:ec:30:3c:2a:db:79:2d:94:
84:aa:85:7d:4d:dd:f7:07:bb:af:66:67:9d:e8:8b:
d3:c0:8c:69:b8:9a:53:69:e5:b9:de:20:b9:42:dd:
a7:56:f7:d1:58:8f:67:6c:cf:35:8f:da:ef:3d:18:
a4:33:66:e9:83:c8:dd:b8:e8:54:be:51:ab:05:af:
a7:33:f2:58:7b:8c:d0:70:84:83:54:c7:a7:a5:59:
ff:4d:55:10:fa:c8:96:c6:94:1e:86:9c:bd:81:7e:
44:64:89:53:eb:be:62:96:4c:1f:22:69:44:24:20:
74:4e:9f:c8:44:25:9e:ea:32:42:49:a5:3e:7f:74:
fe:a3:a8:ec:cb:b9:be:08:a7:51:72:a8:09:ed:c1:
f5:6e:9c:c9:ef:4c:f5:41:2c:24:48:c7:a3:f8:85:
67:5e:a4:cd:bc:fc:97:20:a5:bb:00:cd:93:64:a9:
2b:ba:82:e3:15:bb:65:8b:07:65:b7:2a:e9:dd:55:
b2:3e:8d:59:f7:78:44:61:a3:1c:ac:21:2a:3b:b9:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:7F:04:0B:1D:C5:B7:D0:1E:9C:16:9A:39:DC:D9:B1:7F:E9:E4
X509v3 Authority Key Identifier:
keyid:DA:7D:CB:08:1C:73:80:2F:C1:89:5C:6E:B4:A2:72:66:6B:D4:27:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3LCBxzgC_BiVxutKJyZmvUJ5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4abf12-45a6-4e2a-bc85-68b68e499b4b/1/2n3LCBxzgC_BiVxutKJyZmvUJ5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:01:d1:fc:fe:c1:8d:56:bd:e6:5b:b6:76:3c:6e:41:15:19:
24:ce:2f:e2:73:5b:f3:99:fe:ca:4b:8e:bd:a4:06:1e:62:b6:
d0:2b:9c:e0:50:3e:c2:01:b4:e6:40:a5:dc:d9:ef:99:4b:76:
fc:c2:ab:a1:f1:c6:92:d6:0a:61:c0:ba:6e:d1:f8:36:34:02:
9d:89:02:d7:b3:4a:48:1a:8f:53:d9:c5:37:19:ec:b1:8b:ae:
f5:5e:5b:8a:f2:6c:18:05:5a:21:f0:09:7a:ec:d9:6d:a8:2d:
4c:eb:0a:1c:e5:44:80:09:55:aa:d2:b4:cd:ab:72:b9:0f:2b:
6c:92:47:6c:90:a9:14:fe:f5:92:f5:2a:72:f5:59:f2:f8:c7:
7f:52:ec:fe:69:ec:76:56:aa:24:3e:ba:01:6e:07:57:c1:6b:
88:76:db:01:4c:e6:1f:62:3b:76:de:ee:52:e9:07:f2:db:12:
53:f6:a4:67:de:7e:b4:f6:cb:15:d7:2c:d0:cf:65:05:3a:f5:
d3:9f:f0:aa:a3:44:fd:6c:72:2c:8d:cf:43:0c:4a:a1:b7:dc:
37:8a:f6:ce:00:f4:17:60:8b:7c:44:10:e9:c9:ff:e1:be:b6:
85:fb:94:6b:90:80:27:38:72:2d:2b:17:c7:8f:cb:f5:f2:aa:
d7:71:1d:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XVLoX5nhQqkPNPspO0EfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2RjYjA4MWM3MzgwMmZjMTg5NWM2ZWI0YTI3MjY2NmJk
NDI3OWEwHhcNMjYwNjMwMDcwMDU2WhcNMjYwNzAxMDcwMDU2WjAzMTEwLwYDVQQD
EygwNjc0N2YwNDBiMWRjNWI3ZDAxZTljMTY5YTM5ZGNkOWIxN2ZlOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqDtPyM+0icrqerKH+hcxFzohxk0
8taI6tN++UNcwR7+asWbW/f8e7T+x7t6eNC0jqDE7DA8Ktt5LZSEqoV9Td33B7uv
Zmed6IvTwIxpuJpTaeW53iC5Qt2nVvfRWI9nbM81j9rvPRikM2bpg8jduOhUvlGr
Ba+nM/JYe4zQcISDVMenpVn/TVUQ+siWxpQehpy9gX5EZIlT675ilkwfImlEJCB0
Tp/IRCWe6jJCSaU+f3T+o6jsy7m+CKdRcqgJ7cH1bpzJ70z1QSwkSMej+IVnXqTN
vPyXIKW7AM2TZKkruoLjFbtliwdltyrp3VWyPo1Z93hEYaMcrCEqO7nVEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ0fwQLHcW30B6cFpo53Nmxf+nkMB8GA1UdIwQY
MBaAFNp9ywgcc4AvwYlcbrSicmZr1CeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUt
NjhiNjhlNDk5YjRiLzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS80YWJmMTItNDVhNi00ZTJhLWJjODUtNjhiNjhlNDk5YjRi
LzEvMm4zTENCeHpnQ19CaVZ4dXRLSnlabXZVSjVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAHR/P7B
jVa95lu2djxuQRUZJM4v4nNb85n+ykuOvaQGHmK20Cuc4FA+wgG05kCl3NnvmUt2
/MKrofHGktYKYcC6btH4NjQCnYkC17NKSBqPU9nFNxnssYuu9V5bivJsGAVaIfAJ
euzZbagtTOsKHOVEgAlVqtK0zatyuQ8rbJJHbJCpFP71kvUqcvVZ8vjHf1Ls/mns
dlaqJD66AW4HV8FriHbbAUzmH2I7dt7uUukH8tsSU/akZ95+tPbLFdcs0M9lBTr1
05/wqqNE/WxyLI3PQwxKobfcN4r2zgD0F2CLfEQQ6cn/4b62hfuUa5CAJzhyLSsX
x4/L9fKq13Edpw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:22 2026 by rpki-client