Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: t2HWKUi7FgoPb7exxPN0tKm3bz6EhpofudX/tWoOaDo=
Subject key identifier: DC:DB:A4:73:2D:65:05:7F:6C:AF:48:3F:86:B6:18:95:25:E5:1E:1D
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019F8FECC29B558EB64E8B247829E5854DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 14B7
Signing time: Thu 23 Jul 2026 17:01:25 +0000
Manifest this update: Thu 23 Jul 2026 17:01:25 +0000
Manifest next update: Fri 24 Jul 2026 17:01:25 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: 9f8pTPLnBu9hAa+ZJZ0SbfxkkHtYNz45miyilOMpwmM=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:c2:9b:55:8e:b6:4e:8b:24:78:29:e5:85:4d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jul 23 17:01:25 2026 GMT
Not After : Jul 24 17:01:25 2026 GMT
Subject: CN=dcdba4732d65057f6caf483f86b6189525e51e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:5b:1e:c3:21:85:84:7f:95:a7:a2:fe:3f:
d3:7d:95:3f:eb:0e:1a:b3:84:99:11:2a:0c:11:41:
5f:81:c3:3c:47:90:01:22:ed:70:00:65:0d:51:0d:
fc:ea:83:f5:f9:87:3b:a5:61:cc:84:b0:a9:1f:8b:
1e:94:15:a5:b8:f7:b0:1f:cf:ed:88:6d:27:db:03:
5c:14:96:ba:48:a4:4c:23:8a:75:78:06:ce:80:51:
8e:05:2e:8b:d4:3f:6a:6b:1a:3b:e1:dd:74:76:71:
94:ea:c3:f2:2f:85:97:65:09:94:9e:4e:09:7e:d0:
23:41:2f:02:6b:40:50:9b:d6:7a:f4:bf:f9:22:07:
9e:28:4d:4e:bc:af:14:f5:37:2a:a2:02:64:63:b7:
50:77:23:dd:d9:26:31:04:b0:43:46:78:c2:46:ab:
78:10:8c:d8:01:c2:5e:4e:7d:86:39:74:c9:81:3b:
8a:8d:e7:4c:6b:90:e0:03:c0:fa:9c:b1:74:47:d3:
d7:63:56:65:e4:15:ac:94:b8:de:69:8b:01:cd:14:
2c:81:d1:02:5c:90:f0:70:40:d2:1c:b0:5c:d3:b8:
02:26:d7:54:b5:49:10:00:69:01:c8:54:aa:0b:6d:
a5:2c:03:bf:a6:d2:56:e9:c8:8a:98:93:14:b7:c8:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:A4:73:2D:65:05:7F:6C:AF:48:3F:86:B6:18:95:25:E5:1E:1D
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:75:32:a9:f7:f9:75:15:e5:1d:e5:7a:bf:77:85:73:09:51:
e5:14:65:fd:fe:32:28:a5:8b:40:c0:e6:b7:90:84:b4:5e:42:
49:fb:81:2f:59:dc:4b:ae:41:af:26:d1:0d:c5:35:0e:2e:f8:
6a:48:1b:4c:74:f2:c5:ec:6d:e6:68:ff:91:a1:15:67:b9:4d:
3f:77:31:3c:24:92:3d:8d:91:42:d7:8b:a1:5e:07:c3:5d:5a:
38:b2:ed:2c:83:1a:e1:d7:72:38:6f:e6:96:7f:9b:73:50:f0:
8f:87:76:1b:12:f0:9d:4c:a2:83:cb:c9:d8:21:6f:d4:9b:91:
6d:a8:d2:d6:81:47:7e:2e:a2:f6:2f:ee:02:4b:6e:b4:7c:bd:
a0:6f:77:fc:bb:ab:a6:48:8e:46:30:76:a0:b1:22:7d:8c:cd:
12:54:c7:9d:d0:ef:02:56:3e:f6:05:11:9f:5b:5d:ac:12:5c:
5c:4d:83:b7:85:d4:b6:76:bb:29:5e:0d:74:42:a2:6d:6e:12:
b5:56:96:52:77:97:39:18:f0:ce:62:55:b0:61:9f:63:59:3e:
bf:a8:85:ed:96:fd:46:7e:21:ac:84:eb:24:b3:2a:ba:76:90:
33:68:09:37:bd:fe:5c:62:50:4e:6a:6d:4c:23:2d:03:c7:41:
a1:94:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:59 2026 by rpki-client