Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: skCXOWIZnP45DiPVn9aoNxB9bk5mOKeXXCx7N9hdXpg=
Subject key identifier: 9A:7E:6E:0B:80:A6:8C:52:FA:34:07:31:B4:21:93:D2:0E:22:04:B1
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019F38982312BC97D3DA7423082D62A1D228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 1872
Signing time: Mon 06 Jul 2026 18:02:02 +0000
Manifest this update: Mon 06 Jul 2026 18:02:02 +0000
Manifest next update: Tue 07 Jul 2026 18:02:02 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: G6cFFwieYsyd3RQJzlg+JZFIRxGvq576OyGoy1f3uno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:98:23:12:bc:97:d3:da:74:23:08:2d:62:a1:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jul 6 18:02:02 2026 GMT
Not After : Jul 7 18:02:02 2026 GMT
Subject: CN=9a7e6e0b80a68c52fa340731b42193d20e2204b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:23:0f:f3:4e:c6:41:d4:ef:00:40:26:6f:
79:13:e7:8b:7c:9d:85:14:12:85:eb:da:06:83:da:
f9:7d:33:2e:42:98:62:d5:01:eb:e5:67:6d:82:bb:
d9:0a:1c:15:f2:e0:f8:51:29:39:d0:9e:27:61:e4:
63:3c:55:5e:f2:24:86:3a:ab:54:5a:4a:af:ea:99:
e1:e9:83:67:03:27:11:f8:78:23:fe:51:bb:44:5e:
ca:54:ca:ea:a7:86:f3:d8:66:1d:4f:09:34:2d:39:
59:bf:a7:4d:72:da:26:2a:c3:fd:28:c2:2e:3c:82:
66:55:e5:c1:f2:b6:52:1e:1d:96:42:ec:2d:88:09:
2b:2c:72:9f:0b:eb:24:66:63:03:01:a1:b5:2a:9a:
f4:4a:29:65:0b:63:ca:f7:80:f4:4a:77:94:87:7b:
26:38:2c:21:e1:a1:fc:28:03:19:0b:39:d6:94:66:
ec:44:d4:d9:10:17:73:b4:df:a7:a9:89:81:64:2d:
fd:a3:0e:11:12:68:0e:d0:ad:75:29:51:cd:fe:cf:
aa:25:3d:59:ac:e4:96:54:bd:25:81:bd:5a:fd:c9:
fa:08:f6:c2:e4:c3:2c:ef:2f:2d:6a:d7:55:88:bc:
d2:8c:5a:6c:bf:fe:ba:c1:61:cd:3d:f7:af:e0:ef:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7E:6E:0B:80:A6:8C:52:FA:34:07:31:B4:21:93:D2:0E:22:04:B1
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:19:4d:8c:4d:6b:86:0f:47:f7:47:63:96:1a:68:be:c6:
e0:3a:f6:d7:79:a2:40:51:0b:46:03:d5:2b:f7:c1:12:bc:1c:
a7:06:fe:4c:d7:bc:50:c4:22:06:40:a1:95:1e:51:ad:cd:bd:
e3:9e:66:69:02:be:2e:cf:3b:11:c5:5f:a6:c6:17:b6:9d:f3:
82:68:45:0b:8a:13:d1:0c:8f:4d:61:4d:a5:76:79:aa:ef:dc:
c7:1e:79:46:bf:06:2f:eb:b6:a2:9f:f0:82:e9:eb:d1:20:02:
e1:78:a3:d2:d4:df:09:87:df:e1:1d:d3:7a:fc:c7:49:1b:96:
57:a8:7f:5d:ad:ca:c8:dc:ba:81:d1:b0:47:f0:83:3e:59:de:
ea:9c:95:28:49:e0:f2:9f:57:bc:1c:bb:cb:51:91:6c:d9:af:
48:82:9f:3f:dc:1b:01:31:7d:13:11:9c:44:28:ae:8d:d1:bf:
2e:45:01:53:54:23:56:e8:74:c9:d6:4e:c0:52:47:7a:43:49:
81:27:52:f1:07:48:8f:a5:c4:23:df:9f:b0:49:00:aa:b9:ee:
a4:33:dc:94:f0:df:fc:aa:29:48:a2:06:fe:49:63:27:99:75:
73:70:65:2d:79:95:a3:bf:c5:75:a6:77:7d:e0:b3:fc:2c:33:
61:41:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:20:39 2026 by rpki-client