Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
File: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft (raw, json)
Hash identifier: WWKkmdvLGnvuYfTrz/5nGexp4waYcxpl0+FniA1QF1w=
Subject key identifier: 17:33:0B:85:17:D5:25:A8:71:E4:65:35:93:6E:4C:43:45:22:15:39
Authority key identifier: DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
Certificate issuer: /CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Certificate serial: 01A13DB839F779C9A6C2FCB58C1E86DB7EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
Manifest number: 1894
Signing time: Thu 15 Oct 2026 04:00:45 +0000
Manifest this update: Thu 15 Oct 2026 04:00:45 +0000
Manifest next update: Fri 16 Oct 2026 04:00:45 +0000
Files and hashes: 1: 2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl (hash: FFhNhJUhwWOSU4sj2ii/jOO7s21uz8JgLm8Vw5s68WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:39:f7:79:c9:a6:c2:fc:b5:8c:1e:86:db:7e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbf5bcb91c640a0a342905e5a51707528f5a33a1
Validity
Not Before: Oct 15 04:00:45 2026 GMT
Not After : Oct 16 04:00:45 2026 GMT
Subject: CN=17330b8517d525a871e46535936e4c4345221539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:77:f8:ae:aa:04:47:8b:08:0f:f9:1d:b7:86:
51:e9:05:ca:03:32:fc:e0:a6:b9:1b:13:32:b7:af:
03:f2:81:89:22:ef:ae:89:8c:02:a4:58:aa:e8:c0:
79:61:a0:4f:51:d7:58:e1:c5:d5:10:d8:88:21:f7:
77:6d:f1:70:00:97:65:99:06:95:07:88:51:cd:4d:
3e:01:e2:bc:4f:df:d5:1f:45:d8:e2:fd:c2:38:a0:
43:67:2c:09:80:a4:a9:35:ba:33:6b:79:a1:c7:5a:
9b:3f:45:01:ec:79:8c:6a:5a:9f:27:c2:4f:9d:86:
61:6b:fb:f0:3c:c7:28:d1:87:13:a3:70:7b:d4:3e:
b4:56:ea:c1:ee:8d:c6:07:7e:fa:8f:9c:be:52:18:
10:db:ed:75:60:64:f2:8b:9a:ba:42:18:7a:35:43:
6d:a5:87:37:ca:14:3c:7d:7c:43:40:04:0e:5b:f3:
d5:16:18:1e:49:ae:ac:f0:2c:40:0a:0f:9b:1b:ad:
2e:f9:f8:58:b8:d2:a2:ed:a4:31:da:c0:53:00:68:
76:71:94:7b:65:27:e2:2e:85:e1:5c:50:bb:4d:d9:
71:42:35:d1:7f:c0:e7:26:41:00:5b:89:98:2a:16:
48:77:ab:33:55:43:b7:05:75:3e:2f:f4:35:e5:bb:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:0B:85:17:D5:25:A8:71:E4:65:35:93:6E:4C:43:45:22:15:39
X509v3 Authority Key Identifier:
keyid:DB:F5:BC:B9:1C:64:0A:0A:34:29:05:E5:A5:17:07:52:8F:5A:33:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2_W8uRxkCgo0KQXlpRcHUo9aM6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/27ed2d-07c7-41d8-9c24-12b4ebc41451/1/2_W8uRxkCgo0KQXlpRcHUo9aM6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:53:12:5a:30:78:87:1a:0b:f2:af:a8:0d:65:b9:d0:62:fa:
2c:e5:22:13:f9:c0:86:73:8c:73:97:53:f3:5c:19:b8:96:e9:
16:87:fe:a4:76:11:4d:20:ac:e3:a4:60:66:4a:3d:bc:53:15:
13:92:bf:c8:c2:25:23:f8:b2:c2:68:8f:14:1f:a9:7e:04:9f:
37:cd:d5:6f:a5:e8:c2:b3:c8:33:19:cb:ed:ef:0d:7c:97:04:
c7:3b:73:96:e8:76:83:e6:80:2d:cb:21:13:ce:86:90:9f:fc:
ba:04:c1:88:e6:6c:50:3d:60:36:21:8d:13:59:e7:ff:af:66:
de:9e:ea:4d:b6:b3:8b:5e:95:69:34:9f:99:83:2a:9a:c1:53:
d5:ee:3b:c9:4e:b4:18:1a:b7:18:a2:cb:28:56:88:fb:ca:dc:
df:4d:50:d8:67:02:c3:dc:40:32:39:30:2f:f9:b9:17:e8:b2:
26:21:07:a0:b0:a3:c3:d5:54:c7:86:f8:62:f8:d2:fd:74:4f:
8d:68:90:9c:27:7f:03:e0:1c:24:0a:58:c8:76:b1:dc:19:df:
a9:db:66:ff:4d:65:55:0e:51:79:e1:c3:eb:bd:95:9c:2c:55:
53:65:80:54:cb:73:bd:52:2e:a3:ee:eb:52:09:eb:b0:a6:0d:
d7:77:60:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uDn3ecmmwvy1jB6G237nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZjViY2I5MWM2NDBhMGEzNDI5MDVlNWE1MTcwNzUyOGY1
YTMzYTEwHhcNMjYxMDE1MDQwMDQ1WhcNMjYxMDE2MDQwMDQ1WjAzMTEwLwYDVQQD
EygxNzMzMGI4NTE3ZDUyNWE4NzFlNDY1MzU5MzZlNGM0MzQ1MjIxNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXf4rqoER4sID/kdt4ZR6QXKAzL8
4Ka5GxMyt68D8oGJIu+uiYwCpFiq6MB5YaBPUddY4cXVENiIIfd3bfFwAJdlmQaV
B4hRzU0+AeK8T9/VH0XY4v3COKBDZywJgKSpNboza3mhx1qbP0UB7HmMalqfJ8JP
nYZha/vwPMco0YcTo3B71D60VurB7o3GB376j5y+UhgQ2+11YGTyi5q6Qhh6NUNt
pYc3yhQ8fXxDQAQOW/PVFhgeSa6s8CxACg+bG60u+fhYuNKi7aQx2sBTAGh2cZR7
ZSfiLoXhXFC7TdlxQjXRf8DnJkEAW4mYKhZId6szVUO3BXU+L/Q15bs6eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBczC4UX1SWoceRlNZNuTENFIhU5MB8GA1UdIwQY
MBaAFNv1vLkcZAoKNCkF5aUXB1KPWjOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQt
MTJiNGViYzQxNDUxLzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yN2VkMmQtMDdjNy00MWQ4LTljMjQtMTJiNGViYzQxNDUx
LzEvMl9XOHVSeGtDZ28wS1FYbHBSY0hVbzlhTTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFMSWjB4
hxoL8q+oDWW50GL6LOUiE/nAhnOMc5dT81wZuJbpFof+pHYRTSCs46RgZko9vFMV
E5K/yMIlI/iywmiPFB+pfgSfN83Vb6XowrPIMxnL7e8NfJcExztzluh2g+aALcsh
E86GkJ/8ugTBiOZsUD1gNiGNE1nn/69m3p7qTbazi16VaTSfmYMqmsFT1e47yU60
GBq3GKLLKFaI+8rc301Q2GcCw9xAMjkwL/m5F+iyJiEHoLCjw9VUx4b4YvjS/XRP
jWiQnCd/A+AcJApYyHax3Bnfqdtm/01lVQ5ReeHD672VnCxVU2WAVMtzvVIuo+7r
UgnrsKYN13dgrQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:36:23 2026 by rpki-client