Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
File: 2wy7NfYw1Aytd1B_2r03_e3BIQM.mft (raw, json)
Hash identifier: i1rieYuyd/G7utXUanI9C0cxPveh+VQnzFu4xQ6spqQ=
Subject key identifier: 43:15:C0:8A:E6:B2:70:FC:E7:29:E1:E8:FE:46:DC:ED:D3:C3:6B:A1
Authority key identifier: DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
Certificate issuer: /CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Certificate serial: 019F92ED6E70CECFF674D773D340BCDCEE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
Manifest number: 047B
Signing time: Fri 24 Jul 2026 07:01:01 +0000
Manifest this update: Fri 24 Jul 2026 07:01:01 +0000
Manifest next update: Sat 25 Jul 2026 07:01:01 +0000
Files and hashes: 1: 2wy7NfYw1Aytd1B_2r03_e3BIQM.crl (hash: n2cyklwJS79jlJwRN+YNSQ2lLYPJ51EcwLHPhO6Z0wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:6e:70:ce:cf:f6:74:d7:73:d3:40:bc:dc:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Validity
Not Before: Jul 24 07:01:01 2026 GMT
Not After : Jul 25 07:01:01 2026 GMT
Subject: CN=4315c08ae6b270fce729e1e8fe46dcedd3c36ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:60:6e:7d:f5:74:46:0c:99:2d:8e:a1:e5:
af:88:f1:54:97:ff:b9:20:93:80:f7:4d:45:27:9d:
13:de:48:fd:88:05:ba:86:72:7c:12:14:38:07:55:
fe:27:06:97:a8:c5:8e:c3:b5:bc:ad:ac:c8:c9:59:
2c:f1:b0:59:f5:b8:b8:13:3f:e6:73:8d:4d:f0:dc:
c5:e5:d4:cf:68:cc:82:87:ad:f4:33:a4:8b:fe:b5:
cf:04:3a:ee:11:21:1b:9d:ad:bc:78:ff:be:a2:fd:
64:7d:43:b9:46:25:b5:cd:14:aa:93:82:a9:be:49:
82:b7:22:a7:16:c6:af:0a:e7:ec:2c:4e:2d:e7:15:
ba:11:d4:43:d4:01:07:34:1b:80:e9:f8:c4:e4:38:
64:22:58:d4:bd:c4:62:6a:aa:3a:c1:d5:b6:17:8e:
fe:a3:1c:e1:a6:e4:9c:93:3f:aa:99:0d:e4:cb:1e:
fd:ac:f1:14:0d:d3:d2:96:c7:39:af:f7:79:44:af:
30:a3:25:33:1c:b9:a7:5e:78:09:6e:e0:87:dd:aa:
d0:d4:a7:5c:b5:0a:a7:69:b2:4c:9e:ab:6f:d4:10:
d4:59:6e:9c:22:4e:2f:b2:47:20:0d:15:4c:ff:74:
5f:6a:62:a8:3f:ca:a1:6a:9d:51:d2:c3:87:18:89:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:C0:8A:E6:B2:70:FC:E7:29:E1:E8:FE:46:DC:ED:D3:C3:6B:A1
X509v3 Authority Key Identifier:
keyid:DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:14:b6:1b:84:18:27:06:80:1f:78:75:28:dd:46:06:b3:7d:
6d:f5:cd:d6:35:20:fb:88:f8:2b:f4:bd:22:1f:39:85:87:1c:
73:22:10:36:e2:3d:0e:70:b6:96:a2:37:1f:92:b2:2b:6f:52:
65:e3:54:de:18:70:bc:b8:cf:be:c3:a1:ba:d6:f8:bd:2f:d3:
e0:54:69:c1:c2:ed:90:fc:41:c5:65:f5:70:87:10:a9:45:ab:
c0:23:05:ac:30:82:40:95:71:02:84:b7:8e:fe:d7:8d:b9:2d:
5d:fb:b3:e7:83:8f:e3:74:2b:c8:8a:8d:2f:70:7d:fb:6b:10:
25:9e:d7:01:80:a8:d8:bd:f3:e6:38:94:3d:5e:7c:d2:d7:b3:
f4:e4:8a:4a:b3:88:d1:d2:42:c8:67:34:00:a6:52:29:5a:54:
10:8e:45:9b:73:32:04:26:09:05:52:51:fc:d8:8b:b0:40:13:
db:ee:52:fa:4c:fd:d8:23:3e:b7:ed:53:69:1a:ef:b9:10:9b:
47:df:f1:5e:4e:7a:de:e0:85:02:c3:f3:59:2c:ad:36:26:ae:
c4:3c:f5:70:24:51:58:02:8a:af:37:7e:3e:3f:e5:75:1a:7e:
19:84:48:ae:1e:df:2f:b2:e1:3f:ce:21:b2:ca:b4:dd:c3:b8:
84:39:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:35 2026 by rpki-client