Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
File: 2Wlif_vvXFPoF9KyJSX1smnGs74.mft (raw, json)
Hash identifier: 9lVz2cGoXoGx2c3GrR34fCgIq2abEmdy+KUovfJJWUY=
Subject key identifier: 35:F8:BB:29:B8:9E:75:61:E8:5B:01:51:D7:84:F8:6A:B3:CD:B8:58
Authority key identifier: D9:69:62:7F:FB:EF:5C:53:E8:17:D2:B2:25:25:F5:B2:69:C6:B3:BE
Certificate issuer: /CN=d969627ffbef5c53e817d2b22525f5b269c6b3be
Certificate serial: 019F90C7C3D1622475A6BAC6FF594E10B438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
Manifest number: 8B
Signing time: Thu 23 Jul 2026 21:00:38 +0000
Manifest this update: Thu 23 Jul 2026 21:00:38 +0000
Manifest next update: Fri 24 Jul 2026 21:00:38 +0000
Files and hashes: 1: 2Wlif_vvXFPoF9KyJSX1smnGs74.crl (hash: IPAgJNOBDe/4ADXN73WkK7fOgJdaBzsmrkuC0jrcAdI=)
2: Y6zU4dq35A6akp4dhFzMYlhqKXo.roa (hash: rVUXwS6FszQxiwh17zvndXLoO0j35z3Lpl7zGp2dcJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:c3:d1:62:24:75:a6:ba:c6:ff:59:4e:10:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d969627ffbef5c53e817d2b22525f5b269c6b3be
Validity
Not Before: Jul 23 21:00:38 2026 GMT
Not After : Jul 24 21:00:38 2026 GMT
Subject: CN=35f8bb29b89e7561e85b0151d784f86ab3cdb858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:a2:ab:8b:5d:7b:d3:77:0e:70:75:1f:ab:
22:df:30:1b:7c:1e:ad:a4:ed:89:e8:ad:87:ed:4e:
46:60:11:32:d3:7f:ed:3e:b5:14:17:40:b6:c4:e8:
d3:a1:f5:5f:49:b1:50:d3:69:ef:a6:63:c1:2a:ae:
d6:54:77:4a:14:51:4b:64:22:84:2a:6a:68:15:a8:
4d:b8:a2:04:1e:be:fa:90:49:a6:01:86:f8:92:59:
65:9e:3e:5d:b1:5b:5e:83:30:1f:9e:02:fd:4e:12:
ec:ca:c2:23:22:02:95:ec:b4:cf:2a:7b:ea:f7:f6:
3e:e1:2e:01:64:a6:44:1e:0c:1a:8b:a4:61:28:84:
30:ba:35:44:a4:a0:5c:cb:94:3b:10:5b:b2:50:56:
16:64:66:10:95:73:97:1d:b0:8c:8f:e6:a2:1f:e1:
8a:0d:d9:cd:60:f0:aa:59:8e:2f:34:16:85:e0:6b:
d9:00:8b:f7:76:66:12:47:4a:94:02:97:37:05:44:
3f:ac:d0:4c:48:26:91:03:48:3a:3c:42:5e:aa:ec:
8d:4f:15:a6:25:fb:89:86:bb:c8:1e:71:1c:41:12:
8f:b4:d3:f1:39:7d:3e:bf:b5:e4:6a:aa:27:bd:b1:
0b:c4:d6:e5:5d:a9:43:91:07:61:eb:fb:ca:6f:6e:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:BB:29:B8:9E:75:61:E8:5B:01:51:D7:84:F8:6A:B3:CD:B8:58
X509v3 Authority Key Identifier:
keyid:D9:69:62:7F:FB:EF:5C:53:E8:17:D2:B2:25:25:F5:B2:69:C6:B3:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Wlif_vvXFPoF9KyJSX1smnGs74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6794ce-0358-4264-8015-5588c8687902/1/2Wlif_vvXFPoF9KyJSX1smnGs74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9c:a5:c2:9f:a3:14:0b:d5:ab:72:4d:3b:6a:bc:38:9a:5c:
8e:97:fe:43:a9:57:bf:b1:2e:d2:36:54:cc:4e:50:7c:bc:b9:
e3:6c:b6:75:f2:38:76:d2:af:b8:92:67:83:fb:a9:dc:b4:ae:
fe:bb:5c:55:32:10:4e:be:90:db:02:87:fe:06:af:e4:10:fd:
76:28:1d:18:f3:d6:3b:a4:7a:02:52:8f:6f:a0:ce:c3:f4:3c:
ff:93:a8:86:4f:f5:63:b6:21:c7:d0:2a:42:88:02:da:49:e7:
9d:55:2d:cd:3e:88:39:50:cb:bd:f3:b0:f5:6c:a1:da:a2:5a:
a2:c1:6a:05:b6:32:b2:a6:0c:9d:13:aa:9b:10:f9:05:c4:cf:
c3:5b:ea:f8:a8:54:3a:ba:d5:8e:07:bd:07:4c:0d:19:cc:4e:
77:26:c1:e3:7c:cd:bc:b9:10:36:e4:5a:dd:5b:d6:23:34:fa:
e0:33:9a:b5:42:db:70:ee:b3:68:19:ff:93:10:ea:3d:81:4d:
c2:b8:b2:15:23:1b:08:e5:8a:6d:b8:e4:44:f7:3b:8b:55:63:
9e:8b:12:f1:5c:8e:63:eb:3a:dc:e2:8d:92:59:8d:69:01:ec:
79:86:de:85:0e:f6:e8:be:52:8b:31:21:14:77:e9:0b:dc:f8:
31:21:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:34 2026 by rpki-client