Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: UTC7++jbmrjyEEj+KFcv/iV+S3bD+h+nIvbC1a7bEk0=
Subject key identifier: 90:3E:1E:4F:D1:95:E4:29:36:CC:50:4B:69:F4:A4:5D:92:F8:68:DC
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019D2704697D923173FEF6FC908E00480338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 9E
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: Y9yk0e5e5SatXrnFHNTW2YJei3BvrFR3fMawmdb3gsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:69:7d:92:31:73:fe:f6:fc:90:8e:00:48:03:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=903e1e4fd195e42936cc504b69f4a45d92f868dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:f6:13:49:79:16:29:8e:bd:f3:84:1a:30:
a2:34:1e:bb:97:40:e7:d7:93:aa:38:e0:9c:21:81:
be:2b:39:09:c5:b3:5a:3d:5e:0e:f2:ba:14:91:db:
4c:9f:4b:12:75:e4:be:78:cb:89:14:51:23:cd:0b:
ca:51:b5:57:3c:14:f5:fa:fd:0e:9b:25:0c:da:91:
9b:dc:29:c9:c6:0d:5d:2d:ab:ea:60:5a:b0:d2:8c:
2a:11:e0:3c:4c:42:6f:73:08:ea:e4:c6:cb:e3:4b:
9a:df:8b:5c:83:84:98:2f:dd:ad:a6:6f:fe:99:30:
ab:4a:db:7e:6a:c0:ed:e6:a5:1b:fa:60:44:41:76:
cf:e7:46:88:44:1f:72:11:4a:87:54:be:d5:8e:8e:
a3:d9:d1:a6:91:26:9c:d3:02:60:5a:0d:36:5e:eb:
5f:2b:99:1d:4a:98:62:1c:56:fe:e0:6e:53:ad:43:
f6:93:c2:75:ad:1e:76:c1:7b:c4:ec:27:6f:86:67:
c6:b4:ac:66:77:96:56:f8:7b:03:af:a0:71:0d:e1:
7f:ff:1c:f5:5b:e7:d5:fe:05:cb:80:ce:75:78:90:
a6:ba:df:8a:93:3f:c6:a0:8c:98:44:65:2f:15:2d:
17:61:d2:fd:03:3b:ca:43:3e:ba:48:14:08:22:bf:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:1E:4F:D1:95:E4:29:36:CC:50:4B:69:F4:A4:5D:92:F8:68:DC
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:53:c4:cb:42:80:0a:78:1d:31:84:7f:f0:c1:df:3e:f3:28:
2b:46:47:8d:35:85:2f:cb:94:dc:a6:62:87:de:58:ce:03:ec:
2a:19:2c:c4:9d:83:81:1a:6f:63:f4:35:70:a7:75:03:00:9b:
d8:6c:1f:9e:94:10:64:53:66:a5:d8:7b:b3:d8:63:90:ad:00:
a3:31:36:e3:e3:60:e0:8e:34:28:e2:ef:d2:8c:e6:44:b5:81:
85:2f:d0:a3:f7:c9:87:7f:75:8f:8d:b6:d4:e4:f5:d1:ec:a4:
ed:8e:ba:1b:5d:b2:46:10:5d:b4:e0:a3:14:4b:53:18:ea:15:
89:b8:a3:84:ca:aa:9c:63:fe:4c:03:61:f9:98:8f:ef:57:93:
d6:87:35:20:5c:c1:4a:90:8c:35:81:5e:96:5d:9a:1d:0d:1e:
70:88:9f:22:13:74:aa:2a:60:60:d7:72:2b:d2:b1:ba:68:3f:
43:d2:f9:94:ca:35:2f:74:00:89:9e:fc:1c:7f:ba:20:2b:fb:
d2:07:86:2b:7f:ad:c7:66:c6:dc:96:24:40:45:65:71:55:ee:
70:f2:b2:3b:c3:4e:77:2a:0b:46:5c:47:b1:7f:19:88:7f:3f:
c8:1f:52:e4:cf:09:9d:d1:33:6f:59:14:97:41:b9:59:7d:61:
d1:47:40:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:03 2026 by rpki-client