Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: JeR/8Kd7/T1L7lEB11BmJKsXmZmR8nx8j2+Pms6x6v8=
Subject key identifier: 55:D0:02:48:F9:CE:90:56:F8:BF:95:98:3F:33:DB:9D:E1:25:A4:A3
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019F829E70A94A76EAFC62CDEA876D2A5C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 02F0
Signing time: Tue 21 Jul 2026 03:00:49 +0000
Manifest this update: Tue 21 Jul 2026 03:00:49 +0000
Manifest next update: Wed 22 Jul 2026 03:00:49 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: zwieAZ6IsaMMSxkcdtEx730OaafYywrqCopEd9MFwMQ=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:9e:70:a9:4a:76:ea:fc:62:cd:ea:87:6d:2a:5c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Jul 21 03:00:49 2026 GMT
Not After : Jul 22 03:00:49 2026 GMT
Subject: CN=55d00248f9ce9056f8bf95983f33db9de125a4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:06:a4:8b:c9:a5:a8:43:3d:e4:7f:3e:f2:
1b:1e:b4:0f:a4:d0:7c:cf:41:e6:fe:24:4f:c7:82:
39:47:c0:18:e3:59:aa:96:0c:88:57:27:4a:d9:9c:
a4:c3:f4:67:ab:df:8f:a2:95:d2:d0:f7:fe:94:e1:
ad:86:1a:9f:0c:67:db:ad:7f:72:fb:45:77:79:6c:
9d:5d:e3:df:61:ea:31:6d:9e:b0:86:58:40:04:25:
74:9a:8a:cc:c9:64:f6:7a:35:c8:c6:ec:f8:38:12:
14:43:1b:8a:2b:4c:26:e5:34:7e:85:a7:2c:61:a5:
64:3c:65:e7:85:cb:ef:3c:92:44:c1:a7:11:3b:19:
ef:2c:4d:77:e1:f2:98:7d:b4:95:9f:2c:30:16:75:
5d:57:1d:d0:6c:76:1a:ea:dd:22:cd:ff:8c:bd:80:
36:e2:87:48:22:ec:d7:a1:3c:4b:3d:2c:42:5d:f5:
7b:44:3c:dc:92:9f:20:97:24:69:a7:b6:4d:44:4d:
01:ad:05:44:86:3b:82:0d:ba:6e:d3:51:44:94:97:
59:cd:0c:65:b1:2b:9b:52:eb:9c:a6:4a:c7:46:db:
5c:c7:22:f0:b6:c2:cf:2e:6f:89:ca:31:58:48:d2:
2f:4d:96:bf:42:93:70:68:b3:ec:91:f6:4e:2a:b4:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:02:48:F9:CE:90:56:F8:BF:95:98:3F:33:DB:9D:E1:25:A4:A3
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ff:33:74:14:76:0e:18:08:39:b5:7e:fa:9e:0b:57:eb:82:
b6:26:c7:58:28:46:e9:6d:6d:29:e8:7c:17:20:6d:47:c8:64:
37:3c:94:7a:fa:67:d4:5d:1d:51:09:9c:af:8a:ee:5e:9b:6e:
3b:58:dc:d0:ca:98:ad:c2:1d:b9:0c:61:93:72:76:12:53:45:
17:ba:6d:f3:c0:30:b3:5a:c1:93:66:af:b2:0b:91:d6:8d:a9:
06:5e:70:ad:25:a2:02:5d:56:73:b7:c1:9c:85:48:96:44:ba:
a9:63:53:af:3b:de:c0:ae:7f:d7:f0:0b:2b:80:11:95:4c:d8:
66:05:cf:af:00:2a:63:cd:65:18:3f:74:1e:88:2d:4d:af:64:
64:dc:dd:1e:f9:46:47:e9:d7:c5:61:49:49:80:ca:fe:75:4b:
cf:62:99:f9:83:a8:0e:5d:fe:79:d1:93:a3:6d:a6:28:20:d5:
c9:19:16:7e:dd:1e:dd:f5:2c:82:af:b6:77:5b:51:ad:71:31:
e3:0d:8d:bb:d5:8c:5f:a9:d0:93:ba:b1:38:b0:4a:f7:c0:50:
8e:f8:6b:05:2c:68:44:56:f3:92:e8:38:7b:50:88:37:5a:f0:
ec:ac:27:4c:b2:cc:e7:a2:91:e3:da:4b:d0:a8:44:4f:1b:db:
26:48:4c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:57:26 2026 by rpki-client