Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: o5L9a7m0MMpMDIg+5rMi2NIZ2rqSEaidhqn/eak/hgw=
Subject key identifier: 49:EB:AF:EC:6B:4A:18:51:7D:5B:A9:26:6E:F5:C8:F7:FB:2F:17:57
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019D33759E6B4C00F8854AF211E031EE81B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 137E
Signing time: Sat 28 Mar 2026 08:00:39 +0000
Manifest this update: Sat 28 Mar 2026 08:00:39 +0000
Manifest next update: Sun 29 Mar 2026 08:00:39 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: rMt5NtHbJjPdk/2yNyNdqXgMBtZcItD88pgd+g9Ksgg=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:9e:6b:4c:00:f8:85:4a:f2:11:e0:31:ee:81:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Mar 28 08:00:39 2026 GMT
Not After : Mar 29 08:00:39 2026 GMT
Subject: CN=49ebafec6b4a18517d5ba9266ef5c8f7fb2f1757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:d6:b1:6b:2f:51:ea:8c:ab:21:41:b2:08:
49:4f:4a:f0:f6:54:d3:c6:b0:07:18:e8:f4:6a:cd:
02:76:f2:f9:71:e3:77:5c:84:2f:12:36:fd:16:d4:
79:da:96:e2:58:20:bb:1c:70:0d:1f:a4:ae:d8:86:
40:6d:d1:74:85:d7:8c:dd:ee:88:09:93:4a:a8:ce:
73:30:5d:42:99:65:1e:7b:1b:90:ca:60:e9:83:31:
8b:4d:7c:e0:be:97:59:53:84:42:d5:3b:93:7d:8e:
ae:28:49:e2:55:77:e2:cb:d4:3d:45:12:7c:4d:a9:
6b:7f:71:76:3a:98:93:2a:04:7f:75:f4:51:f6:b2:
45:91:b0:26:4f:aa:37:2d:9e:68:1a:e2:d8:cb:ff:
16:23:86:88:b5:22:0d:f8:40:e8:b9:75:da:05:7f:
ff:7a:77:c6:ef:ff:46:d5:bc:cc:a7:61:13:74:bc:
1d:4b:95:7c:f1:c4:73:40:ed:29:a3:85:27:ed:12:
ce:24:94:63:67:0a:8b:7e:45:49:f9:79:3d:71:df:
46:d8:90:e2:08:1e:50:2a:ef:c2:41:d9:4e:90:97:
50:de:59:46:7b:f6:05:7d:71:db:31:82:3f:50:32:
76:03:4b:cc:ba:63:fa:72:62:a5:82:7c:f4:1b:bd:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:AF:EC:6B:4A:18:51:7D:5B:A9:26:6E:F5:C8:F7:FB:2F:17:57
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:22:4e:a7:32:1c:39:33:f3:4a:5c:3a:4d:3c:56:15:3a:15:
69:bc:57:b2:98:e8:27:d1:e8:c3:8c:f7:c9:3d:f2:93:ff:d6:
29:77:12:d8:ce:ac:ad:74:a9:63:dd:86:d4:9f:cd:70:b0:b3:
bc:c9:f5:3b:bb:97:c1:22:58:79:2d:33:55:eb:12:b5:ec:63:
55:af:ca:9e:5f:d5:92:f3:b7:40:8f:5b:7e:06:fe:ac:1d:d3:
42:4c:e6:97:ac:58:41:c8:e0:ab:e9:b4:a1:51:c1:68:55:9a:
94:c3:dd:69:63:03:05:3d:f2:cc:f7:34:05:18:2b:69:d7:24:
64:40:31:3a:5e:81:6d:7f:dc:8e:ac:79:b8:b9:0d:3a:d2:67:
50:0e:2c:07:6c:0f:25:f3:8b:85:4c:d2:55:d7:51:a3:84:8a:
4b:ef:ea:33:ab:36:8f:e7:3e:34:79:01:5c:70:9a:c1:ac:4d:
2e:9a:3a:1f:6e:2f:7e:a8:ea:75:32:22:79:08:80:9c:48:d0:
9e:79:33:8b:64:a2:f9:bb:37:20:5e:80:f7:a6:e3:5f:9f:ad:
63:19:9c:5b:86:48:b7:d6:0f:06:26:93:bc:26:81:65:85:5e:
33:16:2c:3b:eb:09:5d:82:86:58:c3:6e:68:60:cf:1e:60:f2:
cc:8c:4c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:42:24 2026 by rpki-client