Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: XVqONeJ0DUP98Vx/Uuf2R5s7xwsiWubXy+VIC4PR9P8=
Subject key identifier: A3:D3:CD:B0:31:F7:75:EF:EA:4E:98:13:74:CA:49:52:EE:34:F6:80
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 01A140F108A7064024996EEDEA309B0D05DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 1737
Signing time: Thu 15 Oct 2026 19:01:40 +0000
Manifest this update: Thu 15 Oct 2026 19:01:40 +0000
Manifest next update: Fri 16 Oct 2026 19:01:40 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 7CbMwbdsa42qKtls2tnqdbB2NBRC/o3eG1M6rP5GRxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:08:a7:06:40:24:99:6e:ed:ea:30:9b:0d:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Oct 15 19:01:40 2026 GMT
Not After : Oct 16 19:01:40 2026 GMT
Subject: CN=a3d3cdb031f775efea4e981374ca4952ee34f680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:94:62:b9:6a:68:fc:20:75:7f:2e:8a:95:
57:89:64:21:49:da:58:f5:ff:15:f0:e8:65:fd:63:
a4:1a:a3:ed:c7:fb:4f:bf:80:76:79:6d:be:3d:03:
4b:b9:47:a2:83:7f:d6:e3:f3:d3:1d:b0:fd:1a:ce:
7c:f3:eb:cd:6d:43:1a:c6:5f:ce:b8:8c:d1:ff:e4:
c4:b1:58:5d:ed:29:e8:b7:72:aa:b8:2a:cb:00:df:
45:54:b2:ab:ed:4c:1f:af:6c:53:7a:b2:7d:d0:da:
98:6e:79:10:f6:f2:f5:f6:de:6e:94:30:e1:bf:16:
b9:2b:94:0a:35:30:6f:25:56:03:64:c1:ef:f3:48:
10:5e:93:8b:3b:6f:9a:2d:1a:37:d6:31:97:43:54:
14:8d:b3:8b:22:1f:84:40:d1:ac:15:e0:a8:5d:24:
58:59:3a:3c:db:e2:6a:ba:1e:a6:7b:47:8f:f9:8c:
2b:d2:1a:db:5f:a0:31:b7:82:34:8b:e7:db:c2:5a:
7e:67:e1:d7:60:f1:23:0f:92:2f:13:c9:56:d4:1f:
9c:2e:46:13:b3:32:cb:d8:64:15:88:e4:82:cf:1b:
e3:c7:e7:8e:ae:31:85:5d:9b:fc:4c:5d:dd:bf:0a:
db:5e:d9:18:e2:6f:df:8d:1f:c9:d3:7f:4a:cc:cf:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:CD:B0:31:F7:75:EF:EA:4E:98:13:74:CA:49:52:EE:34:F6:80
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:37:e9:d2:de:07:4f:b8:ba:ad:86:14:0d:0e:f7:a0:6e:
6f:fb:62:f2:31:ad:31:ca:bd:34:f2:b8:fe:d4:38:bb:89:ee:
32:f8:3d:80:c3:3d:be:a8:d3:35:00:b0:38:6b:61:3f:96:4b:
6c:09:1d:3b:ed:8b:c9:93:00:f4:9f:c3:61:c8:69:97:43:1e:
1a:ae:c6:32:a5:b2:70:4a:49:79:32:97:e7:88:79:96:76:da:
7b:92:bb:cc:c2:66:d2:ba:41:a5:90:6a:52:9a:f4:27:a5:30:
e6:a6:94:76:ad:1a:f1:64:80:2d:e0:6b:4e:96:3b:29:e4:ea:
ac:09:b4:25:1f:a9:48:f4:a5:7d:30:83:b9:1c:29:56:2e:64:
56:9a:d6:73:a4:8c:bf:b4:71:6b:3b:ef:1e:e0:19:1e:3a:96:
03:74:42:c3:11:96:65:58:71:2f:cc:fb:53:fb:bb:1d:37:4a:
64:0a:49:e2:a4:18:dd:62:f2:90:70:d0:a0:c9:c9:a4:25:1c:
d9:8a:1a:0e:ee:e9:e7:07:11:4e:a1:24:5b:4c:e9:a9:19:31:
00:ab:ba:1e:08:c7:3b:f4:a8:69:c3:cf:4a:53:e5:89:30:b8:
1c:7b:8c:64:64:a2:4b:d3:6a:3b:75:9f:fe:bd:8d:18:f0:f4:
a5:f3:3d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8QinBkAkmW7t6jCbDQXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcxZmUxNTdlNzdlNTYyODRjNTRkNTJlMmRmMGQ3ZmUz
YWQzZDkwHhcNMjYxMDE1MTkwMTQwWhcNMjYxMDE2MTkwMTQwWjAzMTEwLwYDVQQD
EyhhM2QzY2RiMDMxZjc3NWVmZWE0ZTk4MTM3NGNhNDk1MmVlMzRmNjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFGUYrlqaPwgdX8uipVXiWQhSdpY
9f8V8Ohl/WOkGqPtx/tPv4B2eW2+PQNLuUeig3/W4/PTHbD9Gs588+vNbUMaxl/O
uIzR/+TEsVhd7Snot3KquCrLAN9FVLKr7Uwfr2xTerJ90NqYbnkQ9vL19t5ulDDh
vxa5K5QKNTBvJVYDZMHv80gQXpOLO2+aLRo31jGXQ1QUjbOLIh+EQNGsFeCoXSRY
WTo82+Jquh6me0eP+Ywr0hrbX6Axt4I0i+fbwlp+Z+HXYPEjD5IvE8lW1B+cLkYT
szLL2GQViOSCzxvjx+eOrjGFXZv8TF3dvwrbXtkY4m/fjR/J039KzM+f8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPTzbAx93Xv6k6YE3TKSVLuNPaAMB8GA1UdIwQY
MBaAFNhnH+FX535WKExU1S4t8Nf+OtPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83NjhiNzItMmE3Ny00MmI5LThiMGMt
MWVhYmZmYWFmZjE5LzEvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83NjhiNzItMmE3Ny00MmI5LThiMGMtMWVhYmZmYWFmZjE5
LzEvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGQ36dLe
B0+4uq2GFA0O96Bub/ti8jGtMcq9NPK4/tQ4u4nuMvg9gMM9vqjTNQCwOGthP5ZL
bAkdO+2LyZMA9J/DYchpl0MeGq7GMqWycEpJeTKX54h5lnbae5K7zMJm0rpBpZBq
Upr0J6Uw5qaUdq0a8WSALeBrTpY7KeTqrAm0JR+pSPSlfTCDuRwpVi5kVprWc6SM
v7RxazvvHuAZHjqWA3RCwxGWZVhxL8z7U/u7HTdKZApJ4qQY3WLykHDQoMnJpCUc
2YoaDu7p5wcRTqEkW0zpqRkxAKu6HgjHO/SoacPPSlPliTC4HHuMZGSiS9NqO3Wf
/r2NGPD0pfM92A==
-----END CERTIFICATE-----
Generated at Fri Oct 16 04:02:58 2026 by rpki-client