Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
File: 2Hwy4kled0lvwgKzAxZLpAjl0SI.mft (raw, json)
Hash identifier: Yj7i35LJxhSo9T3Qn7yMRAnwJ8/uBq3tcjEaAP2P1TY=
Subject key identifier: F4:B6:E5:23:16:3D:19:EA:67:F1:6D:C0:92:99:B0:E5:0F:CB:86:52
Authority key identifier: D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
Certificate issuer: /CN=d87c32e2495e77496fc202b303164ba408e5d122
Certificate serial: 01A152F6A1EF1B1C8BB64E468E169F6EAD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
Manifest number: 19AA
Signing time: Mon 19 Oct 2026 07:00:57 +0000
Manifest this update: Mon 19 Oct 2026 07:00:57 +0000
Manifest next update: Tue 20 Oct 2026 07:00:57 +0000
Files and hashes: 1: 2Hwy4kled0lvwgKzAxZLpAjl0SI.crl (hash: Fmo3r/ItaNpMKRwmHaDhYtlldmXNZZOqbVLoa+K6/fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:f6:a1:ef:1b:1c:8b:b6:4e:46:8e:16:9f:6e:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87c32e2495e77496fc202b303164ba408e5d122
Validity
Not Before: Oct 19 07:00:57 2026 GMT
Not After : Oct 20 07:00:57 2026 GMT
Subject: CN=f4b6e523163d19ea67f16dc09299b0e50fcb8652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:db:48:98:2d:d5:29:16:47:70:97:5c:d0:
46:25:5e:a9:1c:f1:6d:c3:08:c7:8f:e1:fe:aa:b9:
6f:e4:1c:79:e8:61:98:86:1c:84:14:54:ff:54:f0:
8f:c9:c2:7a:e6:3d:95:61:6f:f8:b4:20:16:f8:e0:
73:e8:bd:3a:ea:7d:b9:63:25:63:40:ba:fb:94:13:
23:f6:39:90:0a:7a:1b:cb:fa:ea:48:4e:49:ad:91:
8f:1b:28:40:a0:41:bc:ac:dd:46:b8:3b:89:90:90:
42:e4:44:05:13:e7:d8:94:fd:b2:25:ae:e8:c2:b5:
5f:52:dc:16:ef:77:fb:d7:8c:34:6a:11:c4:d7:10:
46:fb:58:19:7b:fc:87:0d:4e:41:bc:e3:38:71:1e:
e9:25:c8:f6:40:e6:0c:0d:00:8c:65:15:7e:d5:20:
f8:50:c9:c0:a3:55:03:af:56:28:ff:a2:9a:cc:11:
66:6b:8b:d6:60:1f:e3:a6:33:b1:43:e5:b5:ed:ae:
79:ea:f3:03:ba:9c:06:3f:10:ea:4a:0d:25:5d:3e:
e5:be:39:d6:f1:9b:d0:18:ab:36:cd:23:04:b5:5b:
cb:c9:8a:3f:2e:58:88:0d:b9:26:ed:8c:01:3f:7c:
bf:eb:4d:ce:55:75:33:5d:c1:f0:f1:ba:99:8b:7d:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:E5:23:16:3D:19:EA:67:F1:6D:C0:92:99:B0:E5:0F:CB:86:52
X509v3 Authority Key Identifier:
keyid:D8:7C:32:E2:49:5E:77:49:6F:C2:02:B3:03:16:4B:A4:08:E5:D1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hwy4kled0lvwgKzAxZLpAjl0SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1e191e-113c-4433-aef0-7243b984a615/1/2Hwy4kled0lvwgKzAxZLpAjl0SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:82:0a:2a:0b:7d:db:5e:7d:a7:86:65:8e:f3:f7:56:48:3f:
7e:c3:fa:a6:bb:49:7e:aa:f5:17:df:24:2a:a0:77:14:51:5c:
39:55:9f:e6:af:b8:64:dc:27:7a:8a:80:ca:20:51:b5:da:b2:
ae:24:44:e6:42:aa:fd:2a:eb:11:97:fd:32:c2:38:e7:3a:fc:
fc:79:88:9d:66:98:82:f3:99:f8:b0:46:20:a1:70:c9:c6:87:
91:34:5a:45:f4:61:05:e5:91:b0:b4:4a:d5:e7:ec:2e:94:1e:
b5:19:53:e2:b9:a8:83:55:6e:47:48:2b:1c:64:9b:97:6d:01:
fb:99:fb:39:0b:65:ba:d4:81:eb:89:7f:af:fa:85:d3:80:25:
5d:fa:71:8c:fe:7a:38:3d:7b:37:e9:b8:ff:04:46:ff:f0:bd:
67:2f:42:7c:e4:44:1f:20:38:79:7d:b1:47:4a:fc:25:74:e9:
30:c7:eb:5a:42:e1:42:4b:af:fb:ee:8f:91:b5:c0:02:8c:d1:
fa:df:5c:41:04:1b:77:1f:ab:db:15:6e:dd:00:4d:d3:23:45:
6c:ea:7c:c5:00:df:79:b8:69:05:a6:bb:74:53:29:ad:b0:79:
dc:29:19:13:76:33:e1:0c:03:ac:63:f5:71:03:e5:04:a0:59:
a7:6c:1b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFS9qHvGxyLtk5Gjhafbq0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4N2MzMmUyNDk1ZTc3NDk2ZmMyMDJiMzAzMTY0YmE0MDhl
NWQxMjIwHhcNMjYxMDE5MDcwMDU3WhcNMjYxMDIwMDcwMDU3WjAzMTEwLwYDVQQD
EyhmNGI2ZTUyMzE2M2QxOWVhNjdmMTZkYzA5Mjk5YjBlNTBmY2I4NjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vbbSJgt1SkWR3CXXNBGJV6pHPFt
wwjHj+H+qrlv5Bx56GGYhhyEFFT/VPCPycJ65j2VYW/4tCAW+OBz6L066n25YyVj
QLr7lBMj9jmQCnoby/rqSE5JrZGPGyhAoEG8rN1GuDuJkJBC5EQFE+fYlP2yJa7o
wrVfUtwW73f714w0ahHE1xBG+1gZe/yHDU5BvOM4cR7pJcj2QOYMDQCMZRV+1SD4
UMnAo1UDr1Yo/6KazBFma4vWYB/jpjOxQ+W17a556vMDupwGPxDqSg0lXT7lvjnW
8ZvQGKs2zSMEtVvLyYo/LliIDbkm7YwBP3y/603OVXUzXcHw8bqZi33LXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPS25SMWPRnqZ/FtwJKZsOUPy4ZSMB8GA1UdIwQY
MBaAFNh8MuJJXndJb8ICswMWS6QI5dEiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkh3eTRrbGVkMGx2d2dLekF4WkxwQWpsMFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xZTE5MWUtMTEzYy00NDMzLWFlZjAt
NzI0M2I5ODRhNjE1LzEvMkh3eTRrbGVkMGx2d2dLekF4WkxwQWpsMFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xZTE5MWUtMTEzYy00NDMzLWFlZjAtNzI0M2I5ODRhNjE1
LzEvMkh3eTRrbGVkMGx2d2dLekF4WkxwQWpsMFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4IKKgt9
2159p4ZljvP3Vkg/fsP6prtJfqr1F98kKqB3FFFcOVWf5q+4ZNwneoqAyiBRtdqy
riRE5kKq/SrrEZf9MsI45zr8/HmInWaYgvOZ+LBGIKFwycaHkTRaRfRhBeWRsLRK
1efsLpQetRlT4rmog1VuR0grHGSbl20B+5n7OQtlutSB64l/r/qF04AlXfpxjP56
OD17N+m4/wRG//C9Zy9CfOREHyA4eX2xR0r8JXTpMMfrWkLhQkuv++6PkbXAAozR
+t9cQQQbdx+r2xVu3QBN0yNFbOp8xQDfebhpBaa7dFMprbB53CkZE3Yz4QwDrGP1
cQPlBKBZp2wbDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:04:53 2026 by rpki-client