Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
File: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft (raw, json)
Hash identifier: RQAxkY1ffeXluVVy90OEeVJBvUDlSaU9gLDbMTQdgiU=
Subject key identifier: 52:D2:81:6D:57:1E:12:BE:32:6E:79:92:12:5E:CE:F1:F9:10:5B:EF
Authority key identifier: D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
Certificate issuer: /CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Certificate serial: 01A14B3D8E2C7F585B9D1316D343C3A700B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
Manifest number: 1546
Signing time: Sat 17 Oct 2026 19:01:27 +0000
Manifest this update: Sat 17 Oct 2026 19:01:27 +0000
Manifest next update: Sun 18 Oct 2026 19:01:27 +0000
Files and hashes: 1: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl (hash: jilLrxW2tXAdyz2uXgoNpScQuwMk5J3O2hxKDW6X/5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:8e:2c:7f:58:5b:9d:13:16:d3:43:c3:a7:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Validity
Not Before: Oct 17 19:01:27 2026 GMT
Not After : Oct 18 19:01:27 2026 GMT
Subject: CN=52d2816d571e12be326e7992125ecef1f9105bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:88:d7:56:7e:99:34:f2:b6:95:b5:9a:3d:fa:
d4:bb:26:68:22:37:e0:c6:0d:04:9c:fe:3c:0d:81:
d9:1b:3c:b9:3a:1a:e3:04:93:c7:5d:ed:65:a8:23:
a3:9a:75:72:85:2e:a6:44:33:dc:cc:65:6c:92:55:
60:4f:d8:9b:1d:8a:f6:77:d6:9d:a4:7b:52:35:c1:
c7:d9:22:ba:6d:b4:48:e8:b9:46:3c:b1:54:3e:a1:
b5:f7:8a:07:ab:eb:d3:b4:a4:7f:11:bb:c4:f1:60:
b6:aa:16:39:96:e4:54:73:53:04:d4:16:c9:d6:64:
77:7b:20:ed:c8:01:03:b8:b0:c6:82:87:52:fb:34:
bc:48:23:df:d3:9b:0a:30:15:2e:cb:b3:be:54:23:
b4:39:1f:7e:04:a5:38:13:5a:99:f4:7c:ed:3c:bf:
d5:bf:1a:f3:b3:6b:54:23:fe:f6:67:88:26:48:08:
87:45:ad:fe:ee:21:16:47:b8:4a:d1:80:6c:18:7c:
20:36:38:e8:ed:61:aa:79:01:10:af:33:c9:56:b5:
ba:78:cf:29:be:1d:cd:ae:3f:ba:68:10:89:31:c2:
52:e7:93:9d:7c:a6:38:93:d3:a8:44:ec:9c:31:1b:
7a:c2:37:5e:67:dc:6f:3b:9a:a8:c0:37:2a:58:02:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D2:81:6D:57:1E:12:BE:32:6E:79:92:12:5E:CE:F1:F9:10:5B:EF
X509v3 Authority Key Identifier:
keyid:D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6b:b8:1f:73:11:97:5a:0e:de:ec:ea:52:bb:fe:f1:b5:bb:
4c:47:37:9e:2b:cd:4b:b5:10:33:ed:45:ab:0c:fd:50:fa:36:
5a:23:04:70:e6:b6:42:fa:39:64:1c:41:fd:42:ac:6d:16:e7:
06:14:0a:d6:d2:97:25:ac:e2:54:53:2e:5e:90:28:93:59:89:
93:2b:f2:3c:39:18:00:1b:e7:59:d2:92:74:c5:47:74:12:00:
de:be:80:6a:de:94:07:7c:71:70:df:b8:e9:8e:46:80:1f:d1:
3c:f4:c6:66:c3:e0:3e:45:20:85:d0:c4:50:90:d6:c4:ff:cc:
62:a9:e5:5d:79:41:b8:34:aa:ec:0b:dd:29:19:1f:44:2f:34:
65:73:e3:db:f0:e6:20:75:67:a7:82:c2:f9:7d:88:9e:bd:21:
8e:96:9a:23:94:5f:7d:d8:96:23:b5:9e:50:14:09:5d:2a:00:
aa:0b:ad:9f:d6:5e:72:49:fe:db:3d:2e:4a:82:02:ab:f3:88:
7b:3e:c4:aa:09:df:22:64:7a:af:0f:25:95:78:5e:b9:fc:4a:
31:4a:ec:cd:fb:cb:26:84:5c:5d:9a:06:c9:fb:5e:a5:3b:a4:
29:35:b7:9d:45:44:bc:7b:ea:26:9e:d6:d9:d8:8f:04:61:dc:
d0:1e:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:32:56 2026 by rpki-client