Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: ucxLUFe3t+4jSY/ukXdDVkeQhuZq1D39I9uedXLJQkE=
Subject key identifier: 93:2D:DE:B5:E6:16:4B:6A:C8:DD:A1:4B:A8:00:91:7F:DB:4A:33:20
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019E1D22DBDA99F45858928B90FA924DC5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 13F7
Signing time: Tue 12 May 2026 17:01:23 +0000
Manifest this update: Tue 12 May 2026 17:01:23 +0000
Manifest next update: Wed 13 May 2026 17:01:23 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: SJsVOAlxK2GFqQKwGWBzA6peidEH86toZGnYHRyjCQY=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:db:da:99:f4:58:58:92:8b:90:fa:92:4d:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: May 12 17:01:23 2026 GMT
Not After : May 13 17:01:23 2026 GMT
Subject: CN=932ddeb5e6164b6ac8dda14ba800917fdb4a3320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:df:c4:9e:04:57:ba:e2:48:b9:69:18:67:02:
40:cf:37:0b:ec:c8:47:32:88:20:59:37:95:fc:ed:
17:de:66:7a:0c:a5:71:81:50:c4:0e:8a:5d:b9:da:
23:b5:8d:ba:21:c8:ed:8d:0d:f6:57:41:a7:63:da:
67:cc:be:b2:d7:c4:ab:e6:30:d0:62:20:e3:94:f3:
29:46:4f:95:1c:0b:4a:b2:2e:a1:c8:4b:eb:e4:6f:
53:79:8d:c4:2f:87:3c:e6:de:ca:c9:43:5f:4d:85:
a8:c4:56:72:c1:d3:d6:d8:5b:b0:4a:76:9e:42:6a:
2a:43:6e:d6:5b:ef:df:0c:ce:99:b6:4a:10:bd:f4:
80:cb:af:b9:af:f7:79:1b:70:00:a1:0c:06:c7:2f:
be:09:96:fe:7c:a7:62:87:34:d8:e9:c3:2d:8d:97:
40:50:95:ca:ff:a4:e5:8a:7b:46:7d:14:fc:57:fa:
d1:8a:1f:51:a2:a8:74:76:a6:02:2e:43:5b:9d:85:
c3:15:8a:82:b5:f3:f0:12:5c:c4:26:bf:4c:54:93:
a9:d3:30:c6:d5:06:22:2c:39:35:a3:31:8d:8c:8f:
46:98:9c:e7:3d:bd:7c:9d:4b:17:a6:a1:45:e7:7a:
99:bb:55:60:32:85:f5:8a:e0:34:3e:c3:21:9d:3c:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:DE:B5:E6:16:4B:6A:C8:DD:A1:4B:A8:00:91:7F:DB:4A:33:20
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:1c:56:f6:1a:9c:ef:d0:aa:0c:99:94:e0:b7:dc:32:3e:b3:
63:53:d8:fc:69:bc:b7:96:10:26:de:f0:9d:98:a2:90:92:8f:
93:d7:8e:9b:87:62:7d:a5:10:5c:a6:be:53:df:e9:cf:e0:74:
c0:09:a0:15:78:bb:24:85:e9:e4:b3:64:10:54:f1:c5:ec:68:
61:94:de:c0:d6:aa:7a:9b:e1:06:95:55:e5:53:7d:b3:9d:42:
e0:a2:81:d6:82:0f:47:ca:16:1f:4c:cc:0e:52:bb:25:a5:3e:
aa:27:c1:32:66:5e:46:fe:64:44:e1:7e:b5:81:d6:a1:4c:02:
d7:81:ca:d5:de:54:73:4c:c6:2c:44:ff:4c:da:3c:d4:e1:e0:
35:e2:87:64:8b:e4:ff:4d:39:3a:a8:61:04:ec:61:32:c6:b8:
15:ca:21:65:9a:d5:4a:3b:7a:78:6a:31:f1:51:a9:8a:ef:1c:
23:4b:20:00:8a:ea:df:75:5b:a9:f9:25:45:31:07:b4:f1:47:
2c:1e:1d:86:8d:c6:ef:2a:2f:61:9d:5a:ab:f9:18:7a:bb:c4:
06:9c:ba:bb:d4:f0:8c:13:79:74:34:7e:c0:63:c8:3f:d5:e7:
74:0e:c5:52:77:0f:24:13:df:26:48:03:ed:f9:0d:90:e6:f0:
56:d6:8a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dItvamfRYWJKLkPqSTcXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjYwNTEyMTcwMTIzWhcNMjYwNTEzMTcwMTIzWjAzMTEwLwYDVQQD
Eyg5MzJkZGViNWU2MTY0YjZhYzhkZGExNGJhODAwOTE3ZmRiNGEzMzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9/EngRXuuJIuWkYZwJAzzcL7MhH
MoggWTeV/O0X3mZ6DKVxgVDEDopdudojtY26IcjtjQ32V0GnY9pnzL6y18Sr5jDQ
YiDjlPMpRk+VHAtKsi6hyEvr5G9TeY3EL4c85t7KyUNfTYWoxFZywdPW2FuwSnae
QmoqQ27WW+/fDM6ZtkoQvfSAy6+5r/d5G3AAoQwGxy++CZb+fKdihzTY6cMtjZdA
UJXK/6TlintGfRT8V/rRih9Roqh0dqYCLkNbnYXDFYqCtfPwElzEJr9MVJOp0zDG
1QYiLDk1ozGNjI9GmJznPb18nUsXpqFF53qZu1VgMoX1iuA0PsMhnTx8EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMt3rXmFktqyN2hS6gAkX/bSjMgMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExxW9hqc
79CqDJmU4LfcMj6zY1PY/Gm8t5YQJt7wnZiikJKPk9eOm4difaUQXKa+U9/pz+B0
wAmgFXi7JIXp5LNkEFTxxexoYZTewNaqepvhBpVV5VN9s51C4KKB1oIPR8oWH0zM
DlK7JaU+qifBMmZeRv5kROF+tYHWoUwC14HK1d5Uc0zGLET/TNo81OHgNeKHZIvk
/005OqhhBOxhMsa4FcohZZrVSjt6eGox8VGpiu8cI0sgAIrq33VbqfklRTEHtPFH
LB4dho3G7yovYZ1aq/kYervEBpy6u9TwjBN5dDR+wGPIP9XndA7FUncPJBPfJkgD
7fkNkObwVtaKaQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:34 2026 by rpki-client