Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: uDTwo2TdCqbbgPRLClYEfwb76qsVFZnELJDsU0N4UdE=
Subject key identifier: EB:FF:85:38:15:37:A6:23:86:35:1B:32:0E:E6:F2:96:4A:5A:01:4C
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019E1E360BE70F832B369DC43D87D79CA2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 011E
Signing time: Tue 12 May 2026 22:01:58 +0000
Manifest this update: Tue 12 May 2026 22:01:58 +0000
Manifest next update: Wed 13 May 2026 22:01:58 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: EHFaGaYLKowCVM/xH/uqFhSqTYjmuBtBKKfdYOx9iq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:0b:e7:0f:83:2b:36:9d:c4:3d:87:d7:9c:a2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: May 12 22:01:58 2026 GMT
Not After : May 13 22:01:58 2026 GMT
Subject: CN=ebff85381537a62386351b320ee6f2964a5a014c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:a7:58:42:a8:c9:29:4e:73:65:33:93:0a:
93:5e:b2:f8:2f:5e:c1:ec:2a:60:2f:90:67:41:8d:
49:f7:b4:c5:3e:13:aa:9a:45:23:8b:70:c8:7a:16:
c4:c5:de:48:fd:b3:bd:72:4c:89:89:59:ea:ce:40:
51:f4:6e:d9:3a:6c:03:68:e6:38:aa:cd:52:da:bc:
18:49:bc:25:ba:40:05:69:2f:3f:37:77:a4:af:0b:
0c:b6:38:4d:b0:69:83:2d:be:1d:f5:eb:70:33:3d:
42:39:63:c3:97:65:85:9b:b9:02:25:ba:d1:83:67:
42:fb:3b:d6:45:97:18:95:6c:19:a4:f4:50:51:cf:
ae:fa:7a:68:8c:95:70:f6:21:a1:91:60:7b:04:f7:
06:f2:ff:23:25:48:b7:81:56:d8:ab:da:10:b9:6e:
8d:82:a4:33:99:42:1d:ec:0e:1b:59:86:f7:32:ec:
e8:6e:6f:c0:2b:f8:3c:d3:be:32:e3:c0:15:58:d3:
ca:86:b1:a1:4d:bb:00:5c:52:3a:87:a0:f9:7f:8c:
df:12:a6:c8:94:24:46:87:d6:e6:49:e3:94:c7:b4:
1c:52:60:61:17:9c:20:e9:90:c3:32:ed:e0:30:fc:
3a:af:7a:a6:58:2c:d3:31:72:a8:0e:35:be:d2:6b:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FF:85:38:15:37:A6:23:86:35:1B:32:0E:E6:F2:96:4A:5A:01:4C
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:e2:68:05:34:9a:27:21:a8:a4:d3:19:32:99:9b:19:d1:
c1:52:a0:10:8e:47:58:f3:20:20:1f:fb:3b:fc:d0:c4:ce:e9:
e5:4f:d4:bc:69:af:ac:93:d9:32:f8:bb:0d:7d:2d:24:a5:0e:
a5:e9:b8:b2:2c:28:58:c0:ef:83:6d:f5:7f:c3:1e:11:51:50:
d3:4d:9c:71:9f:90:55:52:6e:e3:1b:5c:1b:f3:13:80:e0:31:
45:fe:0a:92:13:86:d8:26:d5:25:df:86:cb:d1:f2:8f:04:92:
6b:f9:58:2f:6f:b6:16:37:2a:4d:0c:25:ea:92:52:77:68:0e:
10:c0:d8:1f:b2:ab:aa:68:13:63:28:b2:98:74:0d:97:41:02:
1f:10:8c:23:ae:1a:cf:5d:80:87:a3:12:e3:f2:33:70:c3:bf:
23:81:bd:c7:f7:06:3e:e6:b2:75:d0:2b:2c:84:54:41:25:d2:
59:8a:f0:13:4d:4d:17:e8:b1:be:67:a1:9c:e7:33:5b:65:17:
67:8e:06:e1:69:50:cd:83:e4:fd:4e:f0:50:99:a8:e7:80:67:
de:f6:d2:cf:53:e3:09:a9:dc:9e:d0:26:6a:17:8f:92:40:a2:
e0:91:af:c1:eb:f6:bb:d2:e4:03:af:57:33:08:eb:1a:02:ca:
23:ea:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:15 2026 by rpki-client