Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: dwzyBO8rFxSLwpW2nWLIpoAFtdi4SesadKtiYd86AcE=
Subject key identifier: 55:12:02:BA:B9:1A:F5:65:9E:1E:62:FC:BC:E0:AE:1B:9F:63:7F:A4
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 01A0D07FD6A827E5BF543A1B5D11212EC158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 155D
Signing time: Wed 23 Sep 2026 23:00:33 +0000
Manifest this update: Wed 23 Sep 2026 23:00:33 +0000
Manifest next update: Thu 24 Sep 2026 23:00:33 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: GoiLcVqXxneLDwMNdFAM6nFHvPacZo+ilumgJpLKZdo=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:d6:a8:27:e5:bf:54:3a:1b:5d:11:21:2e:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Sep 23 23:00:33 2026 GMT
Not After : Sep 24 23:00:33 2026 GMT
Subject: CN=551202bab91af5659e1e62fcbce0ae1b9f637fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:99:bd:53:3d:c9:1c:43:dd:44:54:93:72:ef:
b2:8c:29:75:85:50:44:4c:3f:7f:3d:4a:e4:1c:3d:
9c:ad:2d:ac:ad:8a:0d:31:6b:b3:11:b8:11:98:ac:
55:60:75:3d:0a:76:09:2e:03:43:32:86:21:61:5a:
ca:ad:b6:3b:f2:2f:58:06:6c:ff:4c:e9:33:54:ae:
82:11:e7:1e:6b:7d:7e:59:d1:a6:fb:de:5d:05:8c:
b4:e6:44:d0:c6:82:d9:7e:b3:7a:87:e7:94:93:1f:
2f:12:ce:ab:d7:7a:80:79:6b:31:50:d4:45:c8:8a:
7e:96:26:8d:38:5b:d7:14:ff:e5:7a:60:c6:6c:58:
0b:95:ad:74:71:3a:92:30:a9:f2:84:02:a4:29:f4:
4d:07:99:ad:eb:7f:df:62:5c:27:18:4e:84:14:77:
29:d0:54:a2:95:15:fd:58:08:8d:08:c9:6f:a1:d2:
18:f4:07:e3:42:4f:1b:2d:e2:ca:14:a7:0d:17:12:
bf:cb:fd:70:7c:77:48:41:e0:7d:37:1d:81:5a:ed:
15:77:02:c4:54:0a:15:00:14:25:0f:ac:60:f9:64:
db:f4:23:11:b0:f8:99:27:49:41:59:f5:21:aa:84:
bb:0e:46:b6:64:a7:48:dc:ca:b2:07:63:93:4c:67:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:02:BA:B9:1A:F5:65:9E:1E:62:FC:BC:E0:AE:1B:9F:63:7F:A4
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:5c:99:b5:20:a7:d6:1a:f7:aa:66:5c:58:9e:d4:94:8a:
3d:f9:d2:db:52:1e:39:b3:74:69:b6:51:d2:13:0b:94:68:80:
44:b7:01:d4:6f:3f:7e:79:8a:6f:f1:85:dc:ac:c0:23:1a:9d:
53:bd:bf:92:6e:e0:c5:ee:b0:ae:37:25:48:73:35:e6:fb:53:
67:ec:63:dd:6c:b1:94:3f:82:b5:63:3f:8a:92:46:51:9a:8a:
b1:c9:9c:3f:ea:f4:91:26:15:7e:4a:12:c0:b9:e4:0e:a8:b1:
f6:f2:72:53:74:df:74:3a:60:2c:e4:8c:db:cc:21:9c:b1:c4:
03:34:17:89:9b:8c:0f:c1:b6:cf:3f:ab:44:6b:a3:f5:81:b1:
81:bd:7e:f8:b5:73:df:d5:a4:a8:c1:c7:95:dd:86:8f:43:b0:
ec:5e:0c:f9:c7:03:1c:0c:20:a1:0c:f8:e2:42:7e:30:18:d5:
3c:40:dd:a7:f6:fe:bb:99:0a:41:96:83:ac:0c:43:2e:27:14:
4c:ec:d7:43:e8:49:1c:da:f8:84:5a:6b:10:90:9e:53:db:42:
87:cd:bf:12:27:71:86:a4:41:7e:1a:7a:71:80:14:de:75:eb:
e0:3b:b6:21:f9:16:50:89:b8:d9:3b:1c:81:6f:28:94:1b:e1:
75:66:a5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:43:24 2026 by rpki-client