Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
File: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft (raw, json)
Hash identifier: nXaya01HBNi2Z1b5WY1J6qD+8n4cu59PogEoYOYkzpo=
Subject key identifier: 2A:EA:66:6D:8B:96:2E:88:E7:3B:D7:EB:2C:43:78:0B:B7:F4:EB:6D
Authority key identifier: D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
Certificate issuer: /CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Certificate serial: 01A001010D919424EB19F2AB47F9A72D3678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
Manifest number: 149B
Signing time: Fri 14 Aug 2026 16:00:41 +0000
Manifest this update: Fri 14 Aug 2026 16:00:41 +0000
Manifest next update: Sat 15 Aug 2026 16:00:41 +0000
Files and hashes: 1: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl (hash: UkN7v26O9P2+c1fypP285O2SRINyQGUMOryevRFYxg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:0d:91:94:24:eb:19:f2:ab:47:f9:a7:2d:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Validity
Not Before: Aug 14 16:00:41 2026 GMT
Not After : Aug 15 16:00:41 2026 GMT
Subject: CN=2aea666d8b962e88e73bd7eb2c43780bb7f4eb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:59:0a:0a:6d:a8:2a:25:96:f1:09:d3:d1:
03:a6:02:1e:32:c7:c0:22:64:69:fe:68:85:e7:65:
eb:6c:37:00:71:09:45:49:db:c9:48:ab:2d:f0:0f:
15:57:fe:f7:50:3d:da:0f:0d:40:31:fa:83:3b:b8:
95:9d:d6:9f:d9:50:0b:a2:e4:08:93:49:03:63:e0:
48:7c:d3:f8:29:64:34:10:23:a1:46:f3:14:c4:c3:
8b:db:6d:08:d3:e1:c1:af:40:c2:65:49:83:47:5f:
c0:65:ab:d2:96:01:40:49:f3:e2:ff:07:ed:0f:3e:
2d:ea:08:f1:02:a5:e4:d9:d6:b6:56:c4:31:99:92:
1f:43:e3:f5:ad:a0:78:bf:1f:4f:ca:d6:ee:53:8b:
d3:78:b5:95:af:75:44:43:f9:f9:e9:db:01:40:80:
3e:3c:f8:05:34:9d:06:8c:a3:a7:47:75:98:82:15:
1e:dd:54:14:29:1f:c8:54:ce:5c:30:02:b7:ff:c8:
a2:85:3e:31:5b:0f:8d:c0:9e:55:e4:12:93:7a:d0:
50:e9:db:4b:ca:a6:f4:6f:33:7f:fa:39:85:5c:33:
30:52:b4:b7:de:85:6a:9e:e4:18:8f:35:26:30:31:
23:64:3c:27:77:bc:60:c3:f1:4d:78:b4:12:f1:98:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EA:66:6D:8B:96:2E:88:E7:3B:D7:EB:2C:43:78:0B:B7:F4:EB:6D
X509v3 Authority Key Identifier:
keyid:D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4e:02:a6:ed:cb:cc:8a:10:d9:60:8e:80:b2:3b:94:86:c2:
70:88:ad:94:82:f2:6e:27:3c:74:b7:1a:38:e2:e7:a4:51:40:
4b:2b:74:ab:f1:90:e0:c6:59:41:f8:87:02:6f:dc:5f:0c:db:
8a:d0:51:14:a8:1c:af:e9:82:95:af:e2:ce:8c:3c:eb:fe:29:
7b:8d:d7:e0:3b:41:11:c3:d7:af:c9:3f:2c:66:b3:71:a8:ab:
b3:2a:73:c0:b5:01:bf:1c:9b:82:1c:1e:84:ef:d8:f1:b7:c1:
e3:08:4f:c5:4c:87:9a:00:d9:e7:90:98:2f:94:fc:b0:99:49:
43:41:b3:47:b6:36:6c:71:6e:30:c0:4c:bb:f8:f4:e3:db:c9:
14:84:73:33:91:60:82:ff:5b:76:f6:65:6d:d8:b8:8c:99:32:
23:6c:8d:30:68:52:c4:97:4a:7b:23:68:e7:b1:f2:99:d2:9d:
ce:7a:11:aa:5f:85:8f:5b:15:6a:bb:ef:a6:66:fc:f8:08:e1:
a3:a6:67:e8:d4:c1:1a:b9:1b:3f:75:dc:9c:65:15:2a:f9:c3:
e4:d1:21:e0:9f:7b:e2:cd:49:b4:55:4a:b1:2d:c5:cb:d9:e5:
bf:36:98:29:01:5e:bd:75:ba:d1:1c:76:e1:47:7b:98:5c:73:
50:40:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:56 2026 by rpki-client