Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
File: 2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft (raw, json)
Hash identifier: FhZp/HalNiPg8WxRX+HzwoRzBBXxbb+G3wfucMVbs9E=
Subject key identifier: B3:15:05:30:04:09:1C:F7:3E:8E:E9:23:96:69:21:6F:2D:73:BA:1B
Authority key identifier: DA:4C:9E:6B:83:85:01:5D:11:72:FB:79:CF:90:A8:13:FB:AF:FB:20
Certificate issuer: /CN=da4c9e6b8385015d1172fb79cf90a813fbaffb20
Certificate serial: 01A04161237A8C3558FAA4B6C08E3D5DB75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
Manifest number: 4E
Signing time: Thu 27 Aug 2026 04:01:20 +0000
Manifest this update: Thu 27 Aug 2026 04:01:20 +0000
Manifest next update: Fri 28 Aug 2026 04:01:20 +0000
Files and hashes: 1: 2kyea4OFAV0Rcvt5z5CoE_uv-yA.crl (hash: GPGvMgao1w5CodjHSN2C3bMbqL54b2YopFwPDqK3F/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:61:23:7a:8c:35:58:fa:a4:b6:c0:8e:3d:5d:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4c9e6b8385015d1172fb79cf90a813fbaffb20
Validity
Not Before: Aug 27 04:01:20 2026 GMT
Not After : Aug 28 04:01:20 2026 GMT
Subject: CN=b315053004091cf73e8ee9239669216f2d73ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:4e:d5:fa:fe:66:a7:0d:6a:4c:f5:0f:ea:
bf:dc:f9:b3:2f:c1:fa:29:7b:ea:3e:5c:43:28:94:
b1:3e:94:74:b4:d3:ca:88:4c:b2:95:bc:51:3b:6a:
a3:8e:f0:5e:b3:a3:a7:a2:c2:13:56:46:a8:9e:70:
b2:28:ba:a7:5c:63:b4:0b:15:2d:5c:21:62:42:95:
ea:0f:62:03:3f:8b:d1:af:36:8e:ab:10:aa:69:ff:
1e:ce:78:f9:66:8a:30:b3:a4:7f:5e:30:87:c4:72:
c5:d8:b3:c2:44:8c:fd:36:b2:9e:33:ba:72:9f:07:
a4:fe:ae:52:32:ed:b4:21:f1:b7:24:2b:12:b0:f9:
28:0e:68:dc:6b:eb:6a:11:67:55:c9:ef:da:20:db:
cc:48:11:6c:fe:3e:d7:48:ed:84:66:cb:dc:48:d0:
73:ab:66:cf:70:d4:c7:b7:d3:e3:e8:1e:20:ca:8d:
1a:e0:f2:d7:dd:b8:60:3a:5a:3f:40:98:f6:3e:10:
ca:58:b2:3b:a7:6d:f9:0d:82:92:69:d4:a8:85:01:
7b:4d:c2:38:70:a8:0f:0b:28:d3:58:49:8e:95:d1:
90:12:c1:15:ca:98:fb:14:e1:3e:3b:0b:60:ef:b3:
ec:d3:10:91:a1:4f:b8:6e:e0:cd:3b:eb:eb:b7:e5:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:15:05:30:04:09:1C:F7:3E:8E:E9:23:96:69:21:6F:2D:73:BA:1B
X509v3 Authority Key Identifier:
keyid:DA:4C:9E:6B:83:85:01:5D:11:72:FB:79:CF:90:A8:13:FB:AF:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2kyea4OFAV0Rcvt5z5CoE_uv-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/407ffa-bd82-429b-9f17-62c49c7dbcb7/1/2kyea4OFAV0Rcvt5z5CoE_uv-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:86:33:00:45:c1:55:7b:3d:a0:3c:4d:43:fd:52:8f:6f:
e7:e1:47:50:f8:69:88:72:d5:95:4e:55:d3:e9:f8:f0:1a:82:
b9:88:3d:2a:f1:97:dc:73:1b:b4:d3:2b:08:f7:64:32:1f:80:
dc:1c:5a:5c:0e:4b:89:15:6c:c2:46:f6:7a:88:7e:5b:be:e7:
7e:9d:04:63:31:91:9e:b1:53:ea:1a:92:6a:89:08:dd:84:de:
45:a6:34:8c:67:5b:fd:90:5b:a7:9f:a5:03:3f:ae:f5:b5:a3:
eb:4c:fe:4c:c9:c5:06:84:e4:ea:dd:ad:14:f0:48:64:c0:4e:
a6:20:37:d1:4f:f6:ef:3b:81:6b:21:99:ce:be:d0:66:a6:5b:
a2:ca:75:4c:1f:2a:68:90:13:e8:70:12:a6:6b:dd:0e:7d:78:
de:e7:e6:0b:6c:24:15:f9:74:44:66:b5:94:be:26:b5:a6:42:
5a:10:41:a8:3e:15:2f:d9:ac:0f:a3:34:66:c8:77:8e:fa:a9:
82:34:93:a3:dd:27:3c:a8:e5:45:5c:42:df:d9:68:e2:be:a9:
1c:b7:dc:b9:70:17:03:fc:b9:14:ad:fc:68:86:81:1a:11:0d:
88:e8:37:d2:fc:7f:a4:8b:6a:bb:88:d0:f5:0f:be:69:9c:86:
88:05:6c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBYSN6jDVY+qS2wI49XbdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGM5ZTZiODM4NTAxNWQxMTcyZmI3OWNmOTBhODEzZmJh
ZmZiMjAwHhcNMjYwODI3MDQwMTIwWhcNMjYwODI4MDQwMTIwWjAzMTEwLwYDVQQD
EyhiMzE1MDUzMDA0MDkxY2Y3M2U4ZWU5MjM5NjY5MjE2ZjJkNzNiYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZRO1fr+ZqcNakz1D+q/3PmzL8H6
KXvqPlxDKJSxPpR0tNPKiEyylbxRO2qjjvBes6OnosITVkaonnCyKLqnXGO0CxUt
XCFiQpXqD2IDP4vRrzaOqxCqaf8eznj5Zoows6R/XjCHxHLF2LPCRIz9NrKeM7py
nwek/q5SMu20IfG3JCsSsPkoDmjca+tqEWdVye/aINvMSBFs/j7XSO2EZsvcSNBz
q2bPcNTHt9Pj6B4gyo0a4PLX3bhgOlo/QJj2PhDKWLI7p235DYKSadSohQF7TcI4
cKgPCyjTWEmOldGQEsEVypj7FOE+Owtg77Ps0xCRoU+4buDNO+vrt+U9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMVBTAECRz3Po7pI5ZpIW8tc7obMB8GA1UdIwQY
MBaAFNpMnmuDhQFdEXL7ec+QqBP7r/sgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmt5ZWE0T0ZBVjBSY3Z0NXo1Q29FX3V2LXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDdmZmEtYmQ4Mi00MjliLTlmMTct
NjJjNDljN2RiY2I3LzEvMmt5ZWE0T0ZBVjBSY3Z0NXo1Q29FX3V2LXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDdmZmEtYmQ4Mi00MjliLTlmMTctNjJjNDljN2RiY2I3
LzEvMmt5ZWE0T0ZBVjBSY3Z0NXo1Q29FX3V2LXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKmGMwBF
wVV7PaA8TUP9Uo9v5+FHUPhpiHLVlU5V0+n48BqCuYg9KvGX3HMbtNMrCPdkMh+A
3BxaXA5LiRVswkb2eoh+W77nfp0EYzGRnrFT6hqSaokI3YTeRaY0jGdb/ZBbp5+l
Az+u9bWj60z+TMnFBoTk6t2tFPBIZMBOpiA30U/27zuBayGZzr7QZqZbosp1TB8q
aJAT6HASpmvdDn143ufmC2wkFfl0RGa1lL4mtaZCWhBBqD4VL9msD6M0Zsh3jvqp
gjSTo90nPKjlRVxC39lo4r6pHLfcuXAXA/y5FK38aIaBGhENiOg30vx/pItqu4jQ
9Q++aZyGiAVsdg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:31 2026 by rpki-client