Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: xPoUSRrTWMfQIc0/i1x2+mHcpmmTLCcheZxa9N/rHqs=
Subject key identifier: 1F:FB:AB:56:05:02:E1:D5:BB:AB:D3:82:51:FF:0E:00:41:76:0C:CE
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019F189E9BA694C3B48E320EB412BCF7B148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1619
Signing time: Tue 30 Jun 2026 13:01:15 +0000
Manifest this update: Tue 30 Jun 2026 13:01:15 +0000
Manifest next update: Wed 01 Jul 2026 13:01:15 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 2jFGqQIRvkga5mPySg3eEEEKw0MSKZCkjyPloBn0Zh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:9b:a6:94:c3:b4:8e:32:0e:b4:12:bc:f7:b1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Jun 30 13:01:15 2026 GMT
Not After : Jul 1 13:01:15 2026 GMT
Subject: CN=1ffbab560502e1d5bbabd38251ff0e0041760cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8f:b1:e7:9b:34:29:ca:bb:3e:80:21:bf:93:
c2:40:69:cd:0a:7c:9f:03:ea:19:5b:f1:67:e8:c6:
e9:10:c1:76:28:5b:4c:b5:7e:e3:68:79:d5:16:c3:
c0:91:4c:20:b5:f4:b7:d4:33:50:31:34:07:55:62:
84:3b:c4:7a:a4:b2:f6:fd:9f:10:49:27:7d:f1:d9:
42:19:05:2c:66:a5:a5:bb:b6:e9:e7:f0:61:ec:47:
e4:9b:cb:ee:8e:69:41:4b:2b:32:28:c3:4e:ae:9f:
52:5f:74:11:b1:18:cf:01:ec:c7:4d:82:fe:98:e9:
26:01:68:6a:bd:1b:95:3d:23:32:a4:dd:8f:37:b2:
0a:61:b1:70:42:73:b8:b0:8f:0f:36:90:9b:b5:60:
5a:66:09:40:6c:d8:fa:33:f0:51:b7:f9:06:91:f4:
59:30:62:dd:21:b1:5c:e4:2a:60:31:1e:78:28:24:
86:43:a8:86:ae:08:3a:ef:3f:24:c4:86:94:86:bd:
07:9c:c7:82:77:a4:63:1e:ea:fd:51:43:5f:e2:f7:
80:33:a4:e9:1d:f9:7e:45:38:7b:49:b2:2e:c5:74:
dd:d9:6f:c3:a9:52:c3:55:93:57:fb:c9:12:1d:dc:
bb:b8:84:b8:c5:33:76:db:3b:f5:30:f7:9c:fa:df:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FB:AB:56:05:02:E1:D5:BB:AB:D3:82:51:FF:0E:00:41:76:0C:CE
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:91:18:62:56:70:85:d7:0a:f3:33:70:57:c7:aa:6f:00:
49:fb:5e:ac:3b:f0:44:48:81:85:38:88:0a:4e:6b:36:d0:19:
1b:c6:85:08:5b:50:c8:73:1f:6e:ca:30:32:95:4c:97:32:ff:
2a:ca:2f:5b:af:0c:ac:7d:80:b1:6f:51:e7:4f:6c:b5:36:d0:
c2:79:65:98:50:e7:c8:b5:05:d1:2b:41:bf:3a:c6:56:2e:a3:
06:d1:cf:08:fc:9a:18:8e:b3:d1:bc:32:57:a1:f7:e5:d8:9c:
8a:cb:16:4f:85:c9:74:34:aa:0d:8a:da:1d:ab:dc:32:22:d0:
e3:d6:b6:6a:08:be:fe:5f:01:43:a5:e3:59:aa:1a:04:ff:f1:
80:aa:81:03:74:47:9a:38:db:a8:f4:4c:23:99:d4:58:2a:7f:
6c:45:40:a5:a5:c0:d3:90:eb:fe:96:3f:a4:5d:96:54:1f:50:
b0:91:81:c3:cd:1f:6a:b3:58:43:73:d3:7e:f0:ad:e7:b5:63:
d3:1c:b7:4f:f7:22:3a:22:20:f9:92:b1:a6:0d:ee:e0:44:0a:
49:1a:ae:50:0c:ac:20:b8:60:78:17:f9:e9:fe:ba:91:a9:6c:
46:aa:bc:b2:87:e2:b5:90:88:7b:05:6f:a5:e9:ae:70:d1:1a:
e1:42:c3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnpumlMO0jjIOtBK897FIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcxZmUxNTdlNzdlNTYyODRjNTRkNTJlMmRmMGQ3ZmUz
YWQzZDkwHhcNMjYwNjMwMTMwMTE1WhcNMjYwNzAxMTMwMTE1WjAzMTEwLwYDVQQD
EygxZmZiYWI1NjA1MDJlMWQ1YmJhYmQzODI1MWZmMGUwMDQxNzYwY2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4+x55s0Kcq7PoAhv5PCQGnNCnyf
A+oZW/Fn6MbpEMF2KFtMtX7jaHnVFsPAkUwgtfS31DNQMTQHVWKEO8R6pLL2/Z8Q
SSd98dlCGQUsZqWlu7bp5/Bh7Efkm8vujmlBSysyKMNOrp9SX3QRsRjPAezHTYL+
mOkmAWhqvRuVPSMypN2PN7IKYbFwQnO4sI8PNpCbtWBaZglAbNj6M/BRt/kGkfRZ
MGLdIbFc5CpgMR54KCSGQ6iGrgg67z8kxIaUhr0HnMeCd6RjHur9UUNf4veAM6Tp
Hfl+RTh7SbIuxXTd2W/DqVLDVZNX+8kSHdy7uIS4xTN22zv1MPec+t8xNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/7q1YFAuHVu6vTglH/DgBBdgzOMB8GA1UdIwQY
MBaAFNhnH+FX535WKExU1S4t8Nf+OtPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83NjhiNzItMmE3Ny00MmI5LThiMGMt
MWVhYmZmYWFmZjE5LzEvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83NjhiNzItMmE3Ny00MmI5LThiMGMtMWVhYmZmYWFmZjE5
LzEvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZuRGGJW
cIXXCvMzcFfHqm8ASfterDvwREiBhTiICk5rNtAZG8aFCFtQyHMfbsowMpVMlzL/
KsovW68MrH2AsW9R509stTbQwnllmFDnyLUF0StBvzrGVi6jBtHPCPyaGI6z0bwy
V6H35dicissWT4XJdDSqDYraHavcMiLQ49a2agi+/l8BQ6XjWaoaBP/xgKqBA3RH
mjjbqPRMI5nUWCp/bEVApaXA05Dr/pY/pF2WVB9QsJGBw80farNYQ3PTfvCt57Vj
0xy3T/ciOiIg+ZKxpg3u4EQKSRquUAysILhgeBf56f66kalsRqq8sofitZCIewVv
pemucNEa4ULDzQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:58 2026 by rpki-client