Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: iCa8hJfweqXKJjg8dchpvGgpBBXsvKmzyABRYaoDHFQ=
Subject key identifier: FE:77:A5:8F:AB:8E:86:95:99:59:5E:FE:7D:96:46:FA:7C:EB:23:33
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019F90FE69E527DDD41C26DD4207B8455152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 01DE
Signing time: Thu 23 Jul 2026 22:00:20 +0000
Manifest this update: Thu 23 Jul 2026 22:00:20 +0000
Manifest next update: Fri 24 Jul 2026 22:00:20 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: ZkeL5zwZ3wH+yivtx22JABONIHCAZCQoHdQA5g+fm/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:69:e5:27:dd:d4:1c:26:dd:42:07:b8:45:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Jul 23 22:00:20 2026 GMT
Not After : Jul 24 22:00:20 2026 GMT
Subject: CN=fe77a58fab8e869599595efe7d9646fa7ceb2333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:0f:c5:17:5f:65:35:34:dd:73:da:f0:95:
20:4a:ec:07:bb:18:5d:31:34:63:29:6d:f7:03:86:
e6:cf:79:7a:b8:47:4e:00:ba:c5:79:25:c3:45:87:
0e:3f:33:bb:79:81:b5:70:0c:53:53:01:f8:8d:c2:
74:f8:81:f9:e7:63:45:ce:86:de:82:a4:ad:62:44:
ee:b1:26:66:d4:34:72:53:de:3b:f5:23:ea:a4:98:
65:ad:4e:88:5f:9f:c3:79:7e:f6:24:3c:27:c8:3e:
45:35:00:33:99:c5:ec:cb:7e:a0:8e:f2:7a:72:03:
88:09:5d:75:6a:4a:94:a2:a7:b8:1e:b7:da:d1:0e:
ff:50:a3:1e:97:6c:cf:2f:ed:ea:9c:7e:96:c8:c1:
a7:eb:d9:9e:9f:6b:84:88:9b:ca:fa:b4:cf:44:be:
f6:a9:ad:56:b3:d6:be:ca:03:94:0f:6d:ec:11:5b:
89:c0:74:5d:72:c5:96:71:85:92:9b:15:86:31:77:
58:5e:28:33:30:d5:fb:43:b1:61:83:34:df:7b:35:
1e:06:5a:52:81:2c:67:e1:0c:80:39:cd:14:16:8c:
81:0a:70:5c:8f:c8:37:31:19:0c:87:bf:5f:4b:2e:
c2:8a:89:57:0e:66:eb:b9:fc:bd:4a:0f:80:a7:ac:
da:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:A5:8F:AB:8E:86:95:99:59:5E:FE:7D:96:46:FA:7C:EB:23:33
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:be:4d:2b:03:54:5a:68:9a:55:d7:37:bc:36:2e:22:a3:a1:
ab:02:2e:5e:db:11:36:0e:b0:7a:5d:3b:00:06:93:62:22:30:
17:7f:83:64:ef:ec:4c:4c:7d:4b:1d:38:0c:f1:c9:e5:89:74:
0a:0e:e9:58:b8:09:8e:18:d9:6f:be:0f:eb:7d:05:e2:96:37:
c9:7d:0c:9c:36:a0:84:a2:49:74:00:8a:3d:ec:e4:d6:86:71:
3d:39:89:69:95:90:9b:37:2b:27:3c:b3:d7:c7:17:01:70:7c:
de:f1:2a:2e:03:5c:2b:7f:08:78:ce:31:7a:33:03:76:be:46:
c7:20:a0:86:45:e5:bd:53:6a:c3:11:7d:78:74:1a:e0:4b:61:
a5:fd:cb:94:2c:6b:87:54:31:da:09:7e:c0:a2:fc:c4:e0:3e:
dc:46:34:36:65:2a:90:c6:33:2a:ec:e4:4d:37:3f:ae:ed:37:
ab:09:b6:91:80:cc:5e:40:3c:47:6f:ab:bc:a8:ef:84:f3:b7:
b2:7a:b5:b2:f1:da:35:5e:39:e2:65:65:0a:52:11:b6:bf:33:
88:af:bc:9a:13:b5:46:92:b8:cc:b8:c2:96:1f:a4:bb:dc:68:
aa:6d:2a:2f:9d:41:56:28:9c:2f:27:73:5f:f4:8c:16:84:67:
ae:18:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:53 2026 by rpki-client