Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
File: 2hvwCCS2KL9iY7t03ndK3fmZD8k.mft (raw, json)
Hash identifier: +ucSOBikTd8rMQj8B1VWmluiMxlKHAKaLT5uolxVmIE=
Subject key identifier: F4:06:66:C6:E9:19:1A:31:79:6E:AF:42:1A:4E:95:E1:DD:DE:BE:78
Authority key identifier: DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
Certificate issuer: /CN=da1bf00824b628bf6263bb74de774addf9990fc9
Certificate serial: 01A148A9B2FD30022CE64FB541DF550E0CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
Manifest number: 182D
Signing time: Sat 17 Oct 2026 07:00:43 +0000
Manifest this update: Sat 17 Oct 2026 07:00:43 +0000
Manifest next update: Sun 18 Oct 2026 07:00:43 +0000
Files and hashes: 1: 2hvwCCS2KL9iY7t03ndK3fmZD8k.crl (hash: RR18Tq+56G34ZhdBRiTEwUpsd4g3xnSxHOr8uzDGTLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:a9:b2:fd:30:02:2c:e6:4f:b5:41:df:55:0e:0c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1bf00824b628bf6263bb74de774addf9990fc9
Validity
Not Before: Oct 17 07:00:43 2026 GMT
Not After : Oct 18 07:00:43 2026 GMT
Subject: CN=f40666c6e9191a31796eaf421a4e95e1dddebe78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:57:a0:67:9e:14:f4:a0:65:2d:14:ed:84:
11:98:29:6a:2d:23:19:f7:55:f9:a8:9d:f4:71:2c:
79:09:a5:9d:10:53:3d:e5:74:2d:22:06:54:06:96:
0f:91:4c:22:6e:a6:92:a8:a9:9f:b1:27:0c:87:03:
dc:30:25:47:7d:47:ea:86:9b:d4:d0:65:30:40:61:
f0:89:57:56:a9:de:9b:0a:08:fb:18:92:ec:6d:01:
ef:8d:1e:d5:08:4d:19:19:22:5d:8e:2c:c0:7b:94:
d4:ad:c8:85:60:4c:fb:14:92:cc:f9:4b:3a:73:fe:
c8:82:f2:67:6e:ad:37:1c:1a:55:fd:ea:a3:12:1d:
4d:d8:ac:39:ce:1e:fa:1a:cc:df:20:45:d3:2b:b3:
1b:87:f3:b7:07:9b:9d:56:84:68:53:41:da:c5:f2:
47:e8:4d:6c:11:b5:23:9b:62:89:73:20:c8:3d:6b:
14:73:aa:4e:f9:bc:4f:ed:dc:fe:f8:06:56:49:34:
6c:12:b0:fc:0c:f6:6b:58:6e:a0:15:29:c2:89:90:
34:21:76:02:b9:40:3a:54:16:e7:db:1f:c0:59:0e:
e1:27:87:43:7f:eb:dc:b6:2b:bb:1b:24:a6:ef:3e:
96:80:fe:25:fb:8b:81:50:b5:7d:e4:86:4c:23:ba:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:06:66:C6:E9:19:1A:31:79:6E:AF:42:1A:4E:95:E1:DD:DE:BE:78
X509v3 Authority Key Identifier:
keyid:DA:1B:F0:08:24:B6:28:BF:62:63:BB:74:DE:77:4A:DD:F9:99:0F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hvwCCS2KL9iY7t03ndK3fmZD8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/0248cc-c768-46c1-823c-d6c62142f7e3/1/2hvwCCS2KL9iY7t03ndK3fmZD8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1e:0f:fe:a1:3e:bc:f1:99:1a:69:b1:34:13:73:95:67:93:
ed:15:a6:90:9d:5b:3b:f9:32:2d:08:34:cc:e1:59:7e:af:cf:
74:c3:62:f9:be:aa:8c:9c:8c:85:6d:c1:9c:c9:76:64:73:04:
e9:e7:a2:39:11:75:5c:a7:bd:f6:5e:7b:f5:81:32:20:50:a8:
b2:a7:de:9e:3c:fa:72:c1:13:fc:bd:7f:38:b7:b9:a3:14:f4:
b6:76:9a:73:90:cb:20:a2:44:d4:b8:88:ba:18:f1:d7:40:2e:
84:cb:1d:1f:2b:d7:af:bd:10:a2:20:cf:ec:c8:9d:95:de:ac:
f1:9a:57:98:8d:cc:a4:eb:40:4a:e6:6c:07:1e:7d:5c:f6:34:
ab:d1:e3:e6:3a:10:35:c1:09:59:13:02:05:db:d2:55:76:36:
dc:3c:73:22:0a:6d:18:aa:8a:58:b4:d1:53:a4:ec:78:64:fe:
7d:b1:91:1c:e8:e5:f2:8d:51:49:11:7a:02:52:41:b4:82:e4:
e7:62:02:e1:c3:fb:32:ca:5a:35:83:51:e4:ac:f6:71:56:da:
45:50:8f:04:cf:aa:23:26:66:e9:a2:dd:09:53:cd:2e:9c:6a:
2c:45:57:c1:e3:64:2a:6d:40:a2:a2:c8:66:ac:7a:5a:3f:52:
ca:f1:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:12:28 2026 by rpki-client