
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
File: 2wy7NfYw1Aytd1B_2r03_e3BIQM.mft (raw, json)
Hash identifier: tseaVkgejF7hsyObl1KXcud051gWf3K1MdbNE4NZsVQ=
Subject key identifier: 1D:B1:5B:C6:F9:D8:AB:F0:2C:18:5B:FE:A1:87:C3:1E:7D:A4:9F:BB
Authority key identifier: DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
Certificate issuer: /CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Certificate serial: 01A040BCC3D9F03626E8CA919DB45EACE30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
Manifest number: 04D5
Signing time: Thu 27 Aug 2026 01:01:47 +0000
Manifest this update: Thu 27 Aug 2026 01:01:47 +0000
Manifest next update: Fri 28 Aug 2026 01:01:47 +0000
Files and hashes: 1: 2wy7NfYw1Aytd1B_2r03_e3BIQM.crl (hash: 1DZ/53OquDgCKhDuduMelID7J9ZyvQAeC3/CBbeQ130=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:c3:d9:f0:36:26:e8:ca:91:9d:b4:5e:ac:e3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0cbb35f630d40cad77507fdabd37fdedc12103
Validity
Not Before: Aug 27 01:01:47 2026 GMT
Not After : Aug 28 01:01:47 2026 GMT
Subject: CN=1db15bc6f9d8abf02c185bfea187c31e7da49fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:9e:85:aa:0b:25:b2:ab:b1:c1:fd:ef:38:
d3:7f:0f:b0:45:55:a0:47:2c:d9:c1:95:cf:f2:82:
eb:cc:76:f1:5c:c6:e9:e0:3a:bb:ca:29:bf:4d:46:
00:ad:bf:b0:fa:8d:3e:be:10:0e:c8:7d:9f:fe:ea:
54:93:1a:59:59:30:4c:70:f3:ab:a2:5a:06:f3:b1:
8f:25:06:b9:89:51:16:f6:27:f8:4b:77:07:fe:8a:
5c:84:a9:9f:b5:cc:db:d9:a9:40:19:4d:51:55:74:
18:64:85:b8:67:32:22:40:16:51:87:0c:e7:5a:99:
62:96:46:41:bb:68:c2:f8:4f:66:4e:7e:e7:d6:09:
77:82:d9:57:9a:71:a7:cd:e8:0e:4a:ed:2b:f4:38:
b1:64:23:8d:cc:91:00:7b:ef:2f:b1:3f:ce:76:f4:
26:32:3c:6e:6e:28:10:1b:9e:f6:8c:cc:eb:c1:f8:
6a:35:cf:3d:04:19:e3:6e:00:13:8d:88:bf:40:aa:
84:30:4a:b6:34:be:2c:82:c2:c8:5e:b1:7d:0b:29:
88:e5:0b:8d:d5:66:94:a0:1b:f0:c2:0d:6c:43:b9:
ad:84:72:ec:13:3f:6d:e1:99:45:b3:82:89:2e:e6:
9c:4e:53:d0:12:1c:c1:20:52:18:73:ae:41:e9:e2:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B1:5B:C6:F9:D8:AB:F0:2C:18:5B:FE:A1:87:C3:1E:7D:A4:9F:BB
X509v3 Authority Key Identifier:
keyid:DB:0C:BB:35:F6:30:D4:0C:AD:77:50:7F:DA:BD:37:FD:ED:C1:21:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wy7NfYw1Aytd1B_2r03_e3BIQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/414e43-02e1-474c-86b4-2c8e0b497380/1/2wy7NfYw1Aytd1B_2r03_e3BIQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:87:5f:c9:c8:0c:ed:56:d3:da:aa:e9:2c:66:58:ba:3b:
a9:0a:c1:36:a4:b8:ce:89:7c:e1:97:2a:4b:20:1b:97:fb:59:
a6:51:ca:a8:a9:78:26:06:a1:4d:45:5e:b7:f2:fa:f4:f0:1f:
67:07:53:be:05:d8:f4:f8:ec:93:81:4d:06:a1:e9:30:15:52:
2a:fb:56:b4:39:9f:0f:69:70:80:fc:27:a4:67:3d:1d:ea:9e:
e5:9c:35:16:dd:eb:42:be:90:6f:11:01:58:4b:85:9d:1e:31:
d4:b3:15:72:be:17:3a:cf:98:f1:c5:02:0a:41:4d:1c:e1:21:
d2:ea:e9:e5:91:18:1f:af:e1:48:0c:67:b8:71:c4:e5:8f:9a:
eb:ee:d7:28:91:31:bd:84:71:cd:b4:33:20:da:f8:40:17:2f:
85:72:92:2b:f8:6a:6b:67:e2:34:5d:6f:df:8e:f5:c9:bc:d8:
38:dc:c2:a2:36:8f:ae:cc:e2:d0:b2:5b:1b:5f:ac:d2:cf:52:
fb:66:c9:f8:d6:94:15:cf:bf:df:7c:a1:a9:36:3e:ab:e0:56:
b0:4b:88:36:21:cb:93:e1:c2:a9:9f:aa:33:07:56:5a:56:7a:
b2:5c:1c:04:a6:d0:16:1d:11:f4:72:84:22:ef:47:50:33:98:
a5:3d:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:28 2026 by rpki-client