Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: /LTzc2gagWfzWJVJceHwYD8+WklXmgEGkg9NNftYz0Y=
Subject key identifier: 15:4A:84:12:C3:80:2D:FB:BB:99:4F:FA:A7:07:88:93:8D:67:57:2D
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 019E3185299B67F087CE09C3C421D21D7F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1700
Signing time: Sat 16 May 2026 16:01:10 +0000
Manifest this update: Sat 16 May 2026 16:01:10 +0000
Manifest next update: Sun 17 May 2026 16:01:10 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: OwG9CdfT0NKLhYjHxo3yFEPdmP0xvaw88f1vpOltQ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:29:9b:67:f0:87:ce:09:c3:c4:21:d2:1d:7f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: May 16 16:01:10 2026 GMT
Not After : May 17 16:01:10 2026 GMT
Subject: CN=154a8412c3802dfbbb994ffaa70788938d67572d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:71:94:fa:ef:20:65:0a:64:81:b6:ce:4d:
8f:f0:9c:06:e2:43:65:b5:15:10:2f:32:b2:48:77:
5c:cd:89:59:d4:76:9e:fb:30:6a:4c:b1:8a:a7:7b:
f1:85:eb:0b:1e:e0:95:d0:48:eb:48:b3:4b:e8:73:
ad:99:a8:81:8d:72:27:76:9b:5f:18:c7:18:75:8e:
1b:40:f5:56:aa:9d:7c:60:e9:bb:e1:a3:82:99:8e:
fe:10:8f:27:39:b4:74:12:f6:50:fb:b8:87:71:cd:
cb:6b:3d:98:2a:48:6f:fa:77:e0:4c:12:0a:37:85:
57:74:6d:91:63:99:ea:1f:e3:ed:c7:c8:4b:e5:df:
26:e3:a8:df:3c:77:00:78:54:63:91:c3:18:7b:78:
2a:96:56:3a:74:91:9b:43:bb:b8:4b:f6:2f:d4:61:
7a:0b:8c:30:92:19:c3:b3:f5:dc:8c:54:b5:52:da:
15:dc:f7:e4:f6:0f:5a:15:a2:e7:b0:b4:c3:7b:94:
f4:e8:8f:be:22:ab:89:ca:87:4f:0e:c6:7b:fc:6d:
d1:f4:2d:18:83:6f:95:e1:63:73:21:2c:63:91:d1:
e7:b5:38:6c:b0:ca:1d:eb:8b:ec:fd:28:e4:66:fc:
f9:b0:d2:e9:6a:d0:75:b0:47:4f:76:16:2b:48:f5:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:84:12:C3:80:2D:FB:BB:99:4F:FA:A7:07:88:93:8D:67:57:2D
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a2:6b:9d:56:71:b2:fa:11:19:fd:56:2d:a0:b4:e6:67:4f:
67:73:0e:7d:67:ed:aa:73:a3:22:19:ea:39:b5:65:c0:8b:cc:
ce:b4:64:69:85:c4:1b:91:45:0b:aa:8e:1c:29:45:43:df:ca:
f0:e9:2b:4d:97:f7:12:83:7e:41:41:55:de:47:1b:24:30:21:
a8:19:a7:e9:f0:d3:32:1f:bf:af:c6:ae:17:32:52:4b:3a:f0:
1a:f2:37:9d:db:6a:80:9e:ce:86:00:1d:a6:7f:fe:ec:f4:b0:
9e:47:65:5a:20:2c:ef:9e:87:15:d6:38:49:c9:a0:1f:a4:0a:
04:66:d7:4b:39:37:8d:4f:e8:21:2c:0e:31:c1:dd:0f:78:32:
3b:72:27:da:63:e6:1f:59:83:73:5e:69:23:60:ed:63:52:f4:
47:80:d3:88:20:ad:52:2e:7d:4d:03:1d:e4:62:5e:f5:f9:aa:
45:65:3d:bf:d2:71:c1:f5:d5:36:66:bf:90:14:c3:5f:13:bb:
c9:ca:49:76:80:9c:6b:1a:66:d0:18:15:15:ae:a1:0d:05:51:
ca:e4:c4:7c:9e:44:91:0b:4e:0f:40:c5:75:34:24:32:57:5f:
b1:7d:28:c2:9b:d8:f2:b4:1d:46:83:ff:44:fe:cc:e5:df:87:
83:5e:08:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhSmbZ/CHzgnDxCHSHX8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZjViY2I5MWM2NDBhMGEzNDI5MDVlNWE1MTcwNzUyOGY1
YTMzYTEwHhcNMjYwNTE2MTYwMTEwWhcNMjYwNTE3MTYwMTEwWjAzMTEwLwYDVQQD
EygxNTRhODQxMmMzODAyZGZiYmI5OTRmZmFhNzA3ODg5MzhkNjc1NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZBxlPrvIGUKZIG2zk2P8JwG4kNl
tRUQLzKySHdczYlZ1Hae+zBqTLGKp3vxhesLHuCV0EjrSLNL6HOtmaiBjXIndptf
GMcYdY4bQPVWqp18YOm74aOCmY7+EI8nObR0EvZQ+7iHcc3Laz2YKkhv+nfgTBIK
N4VXdG2RY5nqH+Ptx8hL5d8m46jfPHcAeFRjkcMYe3gqllY6dJGbQ7u4S/Yv1GF6
C4wwkhnDs/XcjFS1UtoV3Pfk9g9aFaLnsLTDe5T06I++IquJyodPDsZ7/G3R9C0Y
g2+V4WNzISxjkdHntThssMod64vs/SjkZvz5sNLpatB1sEdPdhYrSPUVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVKhBLDgC37u5lP+qcHiJONZ1ctMB8GA1UdIwQY
MBaAFNv1vLkcZAoKNCkF5aUXB1KPWjOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQt
MTJiNGViYzQxNDUxLzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQtMTJiNGViYzQxNDUx
LzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaJrnVZx
svoRGf1WLaC05mdPZ3MOfWftqnOjIhnqObVlwIvMzrRkaYXEG5FFC6qOHClFQ9/K
8OkrTZf3EoN+QUFV3kcbJDAhqBmn6fDTMh+/r8auFzJSSzrwGvI3ndtqgJ7OhgAd
pn/+7PSwnkdlWiAs756HFdY4ScmgH6QKBGbXSzk3jU/oISwOMcHdD3gyO3In2mPm
H1mDc15pI2DtY1L0R4DTiCCtUi59TQMd5GJe9fmqRWU9v9JxwfXVNma/kBTDXxO7
ycpJdoCcaxpm0BgVFa6hDQVRyuTEfJ5EkQtOD0DFdTQkMldfsX0owpvY8rQdRoP/
RP7M5d+Hg14IwA==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:05 2026 by rpki-client