Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
File: 2GkQtETemfqBw5NVDJfkoyC86BI.mft (raw, json)
Hash identifier: wVEjKsR0eXvVpGhWl36IkeOZP1XnJHaPc6OiKmNfyJk=
Subject key identifier: 86:02:C3:70:59:37:E0:D3:AE:A6:92:BC:94:EC:0B:32:21:0B:15:B5
Authority key identifier: D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
Certificate issuer: /CN=d86910b444de99fa81c393550c97e4a320bce812
Certificate serial: 01A00138855BC9E46D36775FE2F3C698879A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
Manifest number: 1108
Signing time: Fri 14 Aug 2026 17:01:16 +0000
Manifest this update: Fri 14 Aug 2026 17:01:16 +0000
Manifest next update: Sat 15 Aug 2026 17:01:16 +0000
Files and hashes: 1: 2GkQtETemfqBw5NVDJfkoyC86BI.crl (hash: TzIyq5bN0KldjfI4YpsBUhVh5VB3o86xTyxoGjXXHa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:85:5b:c9:e4:6d:36:77:5f:e2:f3:c6:98:87:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d86910b444de99fa81c393550c97e4a320bce812
Validity
Not Before: Aug 14 17:01:16 2026 GMT
Not After : Aug 15 17:01:16 2026 GMT
Subject: CN=8602c3705937e0d3aea692bc94ec0b32210b15b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ac:ef:ac:26:12:59:69:1b:da:36:ad:bd:82:
91:3d:2b:2c:19:95:cc:fc:f8:88:9d:ca:a9:44:6e:
ed:16:20:37:19:ea:d4:51:23:23:49:04:b1:b2:97:
31:64:23:d4:ee:6d:aa:2d:55:c0:af:38:6f:38:75:
46:4b:bd:c5:8e:60:06:8d:bd:b0:34:ca:2d:5b:f7:
de:77:01:f1:59:ac:66:fc:f3:0d:d7:27:15:53:b6:
a8:d9:d9:52:c4:1f:ac:2a:0c:dd:ff:0e:ee:9a:1d:
37:d9:f2:26:72:d4:4c:72:1d:be:20:4a:bc:33:66:
83:7f:08:b8:22:52:84:88:7c:58:c4:59:8f:7d:bd:
52:d3:31:50:25:b0:51:37:79:78:0f:9b:46:ba:70:
3d:3e:d1:5c:fd:7b:7d:bb:61:91:17:39:7c:d9:36:
66:1d:97:43:83:20:11:50:0b:e5:4a:4e:9c:57:7c:
0c:70:24:96:15:66:f0:74:b5:55:01:86:e9:54:32:
65:a7:05:43:7e:72:1d:d8:fb:7f:60:a8:a1:fd:8f:
31:2b:1a:a9:ec:8c:c1:ec:d3:8e:28:f3:bb:a0:e3:
79:e6:c7:30:6d:4b:fc:be:00:63:7d:2d:d5:3d:03:
0f:76:fc:b0:9e:06:41:25:25:4b:9f:c6:cb:8d:0a:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:C3:70:59:37:E0:D3:AE:A6:92:BC:94:EC:0B:32:21:0B:15:B5
X509v3 Authority Key Identifier:
keyid:D8:69:10:B4:44:DE:99:FA:81:C3:93:55:0C:97:E4:A3:20:BC:E8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GkQtETemfqBw5NVDJfkoyC86BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4f2563-2e82-478e-8f60-86931bfe3eea/1/2GkQtETemfqBw5NVDJfkoyC86BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:58:18:69:42:ed:af:0a:4c:5a:09:57:bb:a9:a4:f9:23:0b:
d8:d8:b7:f6:fa:5a:d1:43:a1:6c:49:bf:b0:7a:bc:da:cb:fa:
f0:35:b0:3e:01:be:95:c5:66:61:99:c3:ae:16:20:0e:9f:58:
e4:2c:a4:84:3e:fa:52:7a:b1:95:1a:85:0c:fe:c7:5e:21:b0:
c7:fa:88:72:b5:f7:11:2c:45:c8:e9:95:ae:d7:08:e2:e1:e0:
bf:d4:70:a6:1e:0d:9e:f4:92:bf:b8:a1:ec:cb:5f:63:78:8c:
03:d3:94:ec:17:62:13:09:f9:34:08:56:00:a9:fd:79:3c:ab:
0d:90:47:a2:56:b3:ac:70:c7:58:5f:ea:ee:7a:8c:f8:e9:71:
31:60:f3:4c:70:59:54:a0:e7:c9:e7:bb:5f:6d:b5:67:dd:f1:
bd:3c:6a:87:4c:de:8d:b3:c1:29:c5:c5:54:a5:89:47:10:47:
9f:fc:84:da:75:50:af:06:a8:21:d2:05:26:d1:04:bb:b9:e5:
c7:74:19:52:3a:67:49:e6:8a:13:59:19:34:b7:ea:eb:35:9e:
02:22:ff:8b:0c:e0:d3:02:c7:3f:a3:2c:b3:a1:19:fc:8d:34:
cf:13:75:26:8c:e9:ac:a1:85:d7:cf:db:ab:95:c4:16:87:ec:
c5:1e:a2:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOIVbyeRtNndf4vPGmIeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjkxMGI0NDRkZTk5ZmE4MWMzOTM1NTBjOTdlNGEzMjBi
Y2U4MTIwHhcNMjYwODE0MTcwMTE2WhcNMjYwODE1MTcwMTE2WjAzMTEwLwYDVQQD
Eyg4NjAyYzM3MDU5MzdlMGQzYWVhNjkyYmM5NGVjMGIzMjIxMGIxNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36zvrCYSWWkb2jatvYKRPSssGZXM
/PiIncqpRG7tFiA3GerUUSMjSQSxspcxZCPU7m2qLVXArzhvOHVGS73FjmAGjb2w
NMotW/fedwHxWaxm/PMN1ycVU7ao2dlSxB+sKgzd/w7umh032fImctRMch2+IEq8
M2aDfwi4IlKEiHxYxFmPfb1S0zFQJbBRN3l4D5tGunA9PtFc/Xt9u2GRFzl82TZm
HZdDgyARUAvlSk6cV3wMcCSWFWbwdLVVAYbpVDJlpwVDfnId2Pt/YKih/Y8xKxqp
7IzB7NOOKPO7oON55scwbUv8vgBjfS3VPQMPdvywngZBJSVLn8bLjQqiFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYCw3BZN+DTrqaSvJTsCzIhCxW1MB8GA1UdIwQY
MBaAFNhpELRE3pn6gcOTVQyX5KMgvOgSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80ZjI1NjMtMmU4Mi00NzhlLThmNjAt
ODY5MzFiZmUzZWVhLzEvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80ZjI1NjMtMmU4Mi00NzhlLThmNjAtODY5MzFiZmUzZWVh
LzEvMkdrUXRFVGVtZnFCdzVOVkRKZmtveUM4NkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1gYaULt
rwpMWglXu6mk+SML2Ni39vpa0UOhbEm/sHq82sv68DWwPgG+lcVmYZnDrhYgDp9Y
5CykhD76UnqxlRqFDP7HXiGwx/qIcrX3ESxFyOmVrtcI4uHgv9Rwph4NnvSSv7ih
7MtfY3iMA9OU7BdiEwn5NAhWAKn9eTyrDZBHolazrHDHWF/q7nqM+OlxMWDzTHBZ
VKDnyee7X221Z93xvTxqh0zejbPBKcXFVKWJRxBHn/yE2nVQrwaoIdIFJtEEu7nl
x3QZUjpnSeaKE1kZNLfq6zWeAiL/iwzg0wLHP6Mss6EZ/I00zxN1JozprKGF18/b
q5XEFofsxR6iow==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:12 2026 by rpki-client