Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
File: 2PWmbP0hpcrXopuOtc2SqkYDIMM.mft (raw, json)
Hash identifier: hUdH8HESjyD6IFDTIf/yQc/AcZlz7GwmAFBIuLfilFs=
Subject key identifier: 37:04:58:26:5E:77:2C:4A:EF:D7:16:FB:B5:EA:6E:7B:B5:06:11:EC
Authority key identifier: D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
Certificate issuer: /CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Certificate serial: 01A001014C72CD70635742E06F12F1C30D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 16:00:57 +0000
Manifest this update: Fri 14 Aug 2026 16:00:57 +0000
Manifest next update: Sat 15 Aug 2026 16:00:57 +0000
Files and hashes: 1: 2PWmbP0hpcrXopuOtc2SqkYDIMM.crl (hash: BsonyzZq29k4Z1KtsFAVUuiDix8UsoJ9YI2cDOn6AXw=)
2: hSitky1wYRTLv14NEnwV-zxWb_o.roa (hash: PA0bbeChQyvoxmLwu2ifsRmhbm5WEw0zyVf1Uu/ZDBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4c:72:cd:70:63:57:42:e0:6f:12:f1:c3:0d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f5a66cfd21a5cad7a29b8eb5cd92aa460320c3
Validity
Not Before: Aug 14 16:00:57 2026 GMT
Not After : Aug 15 16:00:57 2026 GMT
Subject: CN=370458265e772c4aefd716fbb5ea6e7bb50611ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:52:f0:d9:b3:42:36:8d:d8:b5:ba:79:c0:f0:
13:2c:6a:f6:a2:93:b6:9c:0c:64:62:06:cb:a4:ea:
2b:c8:fa:fc:6a:8b:19:c3:62:2e:49:83:d1:f4:0c:
ce:f0:aa:f9:5e:4e:c2:67:ca:c1:37:9f:98:82:c3:
8c:a9:e3:b6:94:3f:51:1e:b5:4f:96:30:f3:2d:4a:
89:aa:34:86:09:88:f1:68:b2:cf:fe:f8:21:8d:cb:
ba:90:14:9c:6a:7d:00:0b:5b:d0:35:ff:c6:61:16:
cc:f0:57:b6:42:9c:3f:2c:97:e7:90:68:5b:90:c5:
b5:20:b2:10:99:f4:39:67:65:13:3f:46:95:0e:53:
1d:f0:24:ed:6c:b0:50:de:e1:32:f9:b1:dd:28:79:
8b:e1:ad:a5:69:57:aa:89:0a:1b:d9:4f:2a:ec:74:
7e:95:71:ad:41:53:90:09:cb:9f:ff:14:cd:6f:97:
fe:78:43:62:f2:ab:98:35:2d:80:d9:de:28:8e:c6:
27:ed:01:b8:b1:10:b6:08:e6:16:e0:85:04:2c:44:
2e:7b:5d:74:a5:c1:5e:6c:bd:a7:c3:f9:60:66:91:
ca:b4:c6:d0:c5:ef:5c:d0:bf:18:a0:04:e2:2e:34:
14:c2:b0:bb:5e:fc:6e:57:46:71:17:0e:8f:46:13:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:04:58:26:5E:77:2C:4A:EF:D7:16:FB:B5:EA:6E:7B:B5:06:11:EC
X509v3 Authority Key Identifier:
keyid:D8:F5:A6:6C:FD:21:A5:CA:D7:A2:9B:8E:B5:CD:92:AA:46:03:20:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PWmbP0hpcrXopuOtc2SqkYDIMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/fe20ff-6590-4fb0-b657-8210db7049b1/1/2PWmbP0hpcrXopuOtc2SqkYDIMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:9c:17:b0:47:56:9b:17:cf:c0:61:7f:09:1c:35:e5:3b:
6b:b2:f9:ee:d0:a2:f2:50:75:86:22:8f:91:12:48:e1:0d:9f:
84:a4:79:0f:bf:44:03:5d:4a:32:97:6a:09:fe:d2:d2:c6:8f:
bc:18:25:f1:7d:ac:2b:05:f1:e0:b5:8c:31:db:18:9b:9b:67:
0b:ce:8b:96:52:6d:ac:7d:2c:66:98:34:3b:ea:a5:68:25:14:
26:9f:66:c9:2c:68:5c:4d:7e:7d:23:be:e7:42:ff:04:f7:f1:
ee:42:95:64:88:9d:ec:bd:4e:25:df:f8:a4:74:cd:99:d0:e2:
96:7a:a7:b2:9e:83:e3:12:46:8a:e0:5d:c9:62:a4:bc:00:a6:
a3:90:9b:e7:dc:46:6d:d7:50:26:3e:25:e0:d6:42:a5:d1:7d:
d2:fd:b7:20:1f:7a:84:13:b1:51:84:34:39:e3:90:2f:07:7b:
36:42:96:4e:18:fe:64:48:58:e0:10:44:f9:74:29:7d:f6:2e:
a4:15:53:1e:d6:26:9f:a1:1d:a8:cd:d2:f3:e8:fa:af:51:04:
ee:89:83:0d:17:7d:27:82:6c:0d:df:b4:5f:7a:1a:c4:78:dd:
32:57:7a:98:91:27:3b:9f:05:98:84:b5:52:b6:6f:82:b6:83:
6b:55:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:30 2026 by rpki-client