Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: yYhQjaXwbAUXt37whmP7/W/JuHvv+79DFofSv5Ny+9Q=
Subject key identifier: 64:01:21:7E:8E:08:62:AE:4D:BC:BA:68:03:77:E8:5A:D0:69:CC:0B
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 01A0005D33552003660BFE2D8B2DCDC3B957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 13:01:42 +0000
Manifest this update: Fri 14 Aug 2026 13:01:42 +0000
Manifest next update: Sat 15 Aug 2026 13:01:42 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: tQOQksefw4x4apo66U5lLBmn9EXUfWbjTzGAVbKy3rg=)
2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:33:55:20:03:66:0b:fe:2d:8b:2d:cd:c3:b9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Aug 14 13:01:42 2026 GMT
Not After : Aug 15 13:01:42 2026 GMT
Subject: CN=6401217e8e0862ae4dbcba680377e85ad069cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:a7:a1:ec:84:ae:e3:47:70:18:68:54:5c:
bb:cc:04:e5:1c:ac:6a:ed:05:cc:9f:72:d0:63:06:
61:85:e9:9d:12:4f:eb:7e:b8:fb:a8:a5:27:97:8f:
ad:33:08:aa:76:fd:bc:19:25:0c:a0:b9:f7:89:cf:
51:94:c8:9d:2d:8f:53:17:7d:60:22:a0:e7:05:37:
19:ae:33:ab:c8:be:6a:4c:60:8b:5f:96:f9:b3:25:
84:a2:1b:a4:66:b9:24:b1:b5:cb:5a:a5:d3:f6:0f:
e7:de:3a:ee:39:80:4a:33:2c:f8:0e:57:f4:eb:13:
5c:c9:59:d1:1d:99:f3:80:47:2e:9e:5f:99:cc:9c:
8b:fa:24:8f:4f:4a:ea:0e:cf:75:87:d2:eb:fa:39:
b1:eb:72:f9:ad:e3:f0:89:3a:87:6a:f8:c2:f3:3b:
a4:b1:d8:3a:87:14:8c:72:f5:ad:75:02:8c:14:5a:
0f:7c:24:59:91:b2:24:72:8b:b0:43:68:45:32:4d:
a7:7b:87:09:fa:67:4f:51:04:80:60:b8:f1:85:69:
07:98:1c:83:12:eb:b9:fe:40:36:cc:a7:15:26:41:
50:a7:d8:ed:3a:05:ff:b0:2a:8f:85:e6:1e:bd:52:
db:c0:c9:40:d3:3a:66:49:ec:18:66:75:a6:4d:f2:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:21:7E:8E:08:62:AE:4D:BC:BA:68:03:77:E8:5A:D0:69:CC:0B
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7d:71:2b:f5:a8:33:70:8f:6b:85:54:7a:2f:e9:0c:ad:f6:
78:7d:cf:dd:5a:bf:4a:65:dd:af:f0:ce:46:3c:9d:8f:b3:f9:
cf:85:c2:65:3f:91:92:ae:de:e7:0a:35:a8:22:39:b8:e9:6f:
76:d6:b7:7f:72:3e:4a:a1:01:34:b0:c7:8c:5e:dd:75:50:91:
50:b3:98:97:16:50:93:6b:24:e9:a1:9a:4c:84:9f:ea:a0:23:
32:8a:b1:a5:d9:93:c5:97:b8:ea:60:c2:98:bd:0a:aa:ff:99:
55:4c:7d:e3:9e:14:05:08:15:b8:bd:da:82:2a:9a:b2:2c:4d:
f4:ea:20:74:5b:47:9f:22:fc:04:1f:7e:bc:5d:b4:7b:d5:95:
2a:f6:1f:74:ea:5a:ce:38:98:04:da:ab:db:d3:b5:ff:ec:72:
90:67:5d:fe:8e:13:5d:b2:fd:c1:5d:40:16:2c:f1:2a:e3:88:
77:a2:4f:41:8b:43:0e:54:4a:57:00:1d:fd:9c:28:a8:f9:4f:
3b:07:3e:8f:cf:5b:1e:3c:d2:7b:6d:fe:26:91:91:d0:54:45:
1e:f2:22:9f:3b:32:de:10:b3:c5:ca:6f:14:2c:c7:b0:d3:69:
c0:47:95:6b:26:39:d8:0f:fb:45:75:5c:c0:46:50:78:06:4c:
19:22:b5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:06 2026 by rpki-client