Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: IBEoRTGI9KE68qtUZIvfuLRFmqakw3IvwXMdCyil8Dc=
Subject key identifier: 3D:89:65:47:1F:55:60:7D:C2:80:CE:42:3E:CA:AF:6E:42:CF:96:02
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019E8D5BBE3C149C4303B2CCE86BED64A530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 0271
Signing time: Wed 03 Jun 2026 12:01:00 +0000
Manifest this update: Wed 03 Jun 2026 12:01:00 +0000
Manifest next update: Thu 04 Jun 2026 12:01:00 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: PhlBiumcALJg6Qf2HGLR0yKMbODbyP+3xXPjExaFGPc=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:5b:be:3c:14:9c:43:03:b2:cc:e8:6b:ed:64:a5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Jun 3 12:01:00 2026 GMT
Not After : Jun 4 12:01:00 2026 GMT
Subject: CN=3d8965471f55607dc280ce423ecaaf6e42cf9602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:2c:ae:b1:63:7b:6b:ab:7c:72:ac:fe:ce:
f5:a1:b3:59:64:af:41:4f:fc:20:85:2b:f3:9e:35:
8c:b2:1d:25:0b:4d:d9:e0:8e:98:59:4e:64:3e:d7:
66:f3:4a:15:a9:e0:a8:70:ce:96:4a:e8:06:59:a1:
98:db:d6:3d:ee:fd:7b:29:eb:5a:72:b1:7d:47:2c:
fc:7e:c0:b6:bd:57:1a:94:b6:32:cd:ae:07:b1:a3:
b2:a6:50:80:16:e6:fc:49:ea:e8:64:85:f9:cd:a5:
43:ce:a6:ea:9a:23:23:ac:f5:b4:33:87:db:ca:a1:
57:41:a6:51:1a:4e:30:e7:a0:45:2f:27:e9:f1:54:
8a:ad:77:81:19:a6:52:92:69:aa:3f:c9:69:93:b6:
bf:7f:be:71:16:06:31:9f:01:e2:26:2c:20:a5:a0:
e6:ef:27:59:0c:b6:ec:f8:00:61:ca:1f:b4:5f:79:
42:e8:26:2d:98:6e:55:fa:84:a9:73:40:19:67:5a:
0a:ab:0d:c6:77:dd:5b:9b:24:b7:b2:35:ac:c9:f7:
6f:d9:bb:b5:f2:49:7a:07:55:19:a3:0f:61:37:2b:
4c:0b:ad:4f:f0:75:03:1f:8f:f4:a9:67:6c:9b:a5:
60:ec:80:3a:f4:a0:03:0b:6a:f1:cb:bb:6c:3f:22:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:89:65:47:1F:55:60:7D:C2:80:CE:42:3E:CA:AF:6E:42:CF:96:02
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8d:ea:2e:31:37:66:41:d8:97:0f:ed:45:3c:db:f7:0f:d9:
ca:2a:fe:52:32:52:48:d2:4c:f6:c3:bf:e6:17:f2:5c:e3:b7:
ed:94:ac:fa:1a:05:dc:63:5b:8b:ac:26:11:12:ef:88:87:ee:
3c:af:69:18:2f:38:e2:1d:8d:fc:3a:1b:45:9c:e0:a3:a6:53:
4a:20:a5:81:0c:45:77:19:2d:29:61:94:82:1e:1d:8b:70:fa:
35:e1:e4:cf:39:d7:66:cb:da:53:59:4a:b1:2f:85:84:13:9d:
ca:64:b3:42:b6:5d:07:72:fb:80:1a:8e:26:68:a3:af:6d:32:
22:5f:23:0b:54:94:68:be:c7:88:a3:01:3b:af:ac:ba:b6:7f:
f2:eb:dd:d0:03:00:b2:e1:66:0e:ca:c4:8f:49:de:4a:b4:64:
bb:6a:af:1c:56:ff:ef:e7:68:cb:bf:c0:1e:30:c6:67:90:f3:
8c:2a:e0:80:5b:ac:5a:89:e7:97:48:17:31:50:fe:ac:0e:ef:
53:34:3d:04:a3:6d:b6:c2:29:8d:65:fb:77:4e:2d:da:7d:17:
27:1a:d1:31:14:51:6c:75:13:ef:ba:ab:ed:53:d6:f7:f0:7e:
c4:b5:d5:a4:2e:4a:61:a6:13:77:0f:ca:15:c4:4a:ca:b1:50:
4d:98:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:42 2026 by rpki-client