
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: Wk4JbgNoOEAw1MWn16rP54pp0Vs/yIO+eP78olQGAHk=
Subject key identifier: DC:7D:11:43:36:62:9B:7B:C2:0A:5E:40:0E:42:34:B9:0A:79:BC:5C
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019F905A70A3619C90DE67B7EEEB21A7AB3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 044E
Signing time: Thu 23 Jul 2026 19:01:13 +0000
Manifest this update: Thu 23 Jul 2026 19:01:13 +0000
Manifest next update: Fri 24 Jul 2026 19:01:13 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: 5sEddhUI0CdEu/OYI+xe5eTHcVijENg7wwiUW8CiLRI=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:70:a3:61:9c:90:de:67:b7:ee:eb:21:a7:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jul 23 19:01:13 2026 GMT
Not After : Jul 24 19:01:13 2026 GMT
Subject: CN=dc7d114336629b7bc20a5e400e4234b90a79bc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:c9:77:2b:54:69:53:c8:5b:3f:9a:79:b3:
e8:d9:37:fd:58:f2:bf:1c:01:69:ba:9a:a1:e7:d5:
9b:d8:fe:40:f5:0b:ac:ce:ab:ab:f7:f5:67:5c:8f:
a1:be:02:3f:8b:2c:46:8e:e0:6c:ae:8d:24:a2:d9:
2d:01:4b:be:bf:b8:4f:af:a8:f6:ef:0b:a2:cf:99:
25:22:d9:b9:3c:59:a2:0b:a0:f2:8a:a3:1a:6a:6d:
10:61:02:77:60:26:04:fd:38:ef:87:fd:96:ab:08:
c8:1b:05:63:0d:a7:22:00:ba:8d:fc:63:de:f2:2d:
a1:7a:10:ad:31:d8:2a:1e:8f:72:d9:cb:ba:dc:b8:
14:bb:ad:3f:90:12:cc:31:5a:6b:23:f6:66:15:26:
53:0c:14:3e:8f:8b:bf:19:a1:75:6d:46:41:fc:2f:
38:2e:d8:9f:7c:2f:15:8a:82:d8:2a:c3:3a:f6:7d:
2b:74:ef:13:88:fd:80:e8:40:34:25:25:8a:9f:9e:
e2:85:58:15:1f:37:54:87:0e:3f:48:eb:b4:76:3f:
bb:ff:0d:10:d9:3f:ba:91:3e:71:5e:8b:02:7e:0c:
53:57:e9:62:8e:ab:94:2e:60:c2:15:d8:47:cb:e0:
1e:6f:10:d9:d9:22:89:2b:96:d6:3a:4a:cb:a4:fc:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7D:11:43:36:62:9B:7B:C2:0A:5E:40:0E:42:34:B9:0A:79:BC:5C
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a6:c1:1d:84:84:e7:59:ff:ff:b2:fe:82:d9:cb:16:e4:24:
f7:81:12:49:77:b1:19:e6:b2:bd:ab:56:0b:3f:79:53:85:4c:
69:4d:53:e2:99:2f:61:ee:dc:ad:5d:f6:ce:fa:47:92:43:de:
6e:a1:53:33:f0:37:3f:c4:8b:f0:18:b1:c8:9b:19:4c:50:ea:
4d:26:44:0a:b3:6a:62:46:b8:c4:81:10:c8:65:c7:f1:d2:d0:
58:23:e2:14:7c:38:4b:2c:e3:75:2a:45:e9:82:06:2b:d6:67:
77:08:91:6c:94:1d:49:77:4c:54:e8:96:50:37:46:72:8e:f5:
ea:42:10:76:59:c9:e2:cc:55:ed:a2:54:cf:07:c1:d4:e1:7d:
4d:2b:50:56:56:5c:00:48:57:da:82:56:42:a9:44:72:6f:42:
c3:0c:e0:49:8c:2c:a1:2a:4c:46:9b:5d:33:cc:d6:4c:36:8a:
4d:f7:d9:04:20:74:d8:9f:0d:ff:fa:51:71:f3:3e:39:3b:70:
9b:e7:ab:ea:fd:a2:7e:5a:2f:07:15:e9:36:15:cc:9d:03:f3:
8d:fb:ea:6c:e5:42:42:19:fe:d9:5f:7b:dd:e0:50:8e:58:3b:
46:ec:eb:cf:70:41:82:26:21:ff:60:93:18:e3:36:46:30:f2:
fe:bd:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:39 2026 by rpki-client