Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: IQI4sBn7hqIZsEPdknTTPdqqR9Ky7m1KF/8q66T8ZJc=
Subject key identifier: 1F:B2:8B:92:97:90:EE:76:A8:76:5A:D9:79:FF:11:94:71:EA:7D:3C
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019FA071CFEB37BA225512EFE5AB67D027AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 01E6
Signing time: Sun 26 Jul 2026 22:00:41 +0000
Manifest this update: Sun 26 Jul 2026 22:00:41 +0000
Manifest next update: Mon 27 Jul 2026 22:00:41 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: g34iZk4pA+VC8nInjunEdnkjRdtGVieTfAczF/3zwY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:cf:eb:37:ba:22:55:12:ef:e5:ab:67:d0:27:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Jul 26 22:00:41 2026 GMT
Not After : Jul 27 22:00:41 2026 GMT
Subject: CN=1fb28b929790ee76a8765ad979ff119471ea7d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:6c:1d:10:9d:56:46:f3:01:79:83:dd:0d:
8e:12:b7:f5:b7:77:dc:f0:8a:df:89:3c:8d:bd:03:
2f:ef:ff:c3:b2:d7:03:4d:53:a6:31:9c:e7:e2:0f:
85:60:13:bb:ab:1d:61:b2:bd:c2:36:af:76:f5:ec:
5f:60:1b:53:7b:06:e7:6c:f6:50:d0:4d:a6:6c:7b:
65:5a:d0:81:5d:e6:64:02:12:42:3a:75:ba:1b:82:
8e:d1:0c:cc:d1:7f:50:bc:0a:b3:57:0c:72:7d:fd:
46:8c:f6:a7:2f:b1:90:9a:1c:14:10:13:bc:b5:e3:
31:4a:b0:b6:ec:33:be:c2:ea:0a:92:65:6a:8e:a9:
a9:5e:22:29:f5:3c:59:af:b5:a2:95:d0:6c:62:b2:
95:b2:14:50:87:1a:0d:79:2b:24:ef:9a:b5:f1:fc:
7b:84:8d:b9:16:b2:60:ed:35:35:4c:42:94:29:49:
6a:75:33:38:7a:52:91:46:87:02:f9:e7:2c:6a:1c:
72:ba:9b:ad:29:d6:56:fe:6c:40:45:52:7d:af:ca:
95:4e:0b:1f:45:da:3f:eb:07:dc:b5:f6:4b:d7:7a:
3e:b8:54:19:5b:0a:3e:6c:26:54:63:fd:f5:e3:6a:
34:d6:fc:a3:c2:9e:f2:e5:16:b7:2e:e2:ef:64:7b:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B2:8B:92:97:90:EE:76:A8:76:5A:D9:79:FF:11:94:71:EA:7D:3C
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fb:fb:7e:54:46:c0:99:74:c4:34:68:2a:44:1a:bc:69:37:
2b:05:a9:91:22:43:b6:b3:bf:f2:32:ef:c3:c9:e7:a5:bd:29:
60:81:6b:d7:7f:4f:a3:bf:7a:8b:f6:76:1f:a3:fd:d8:84:3d:
a6:b6:84:a0:ad:fd:b2:ba:b4:5e:34:f1:81:69:15:1b:f9:12:
70:e8:6f:e6:09:57:54:32:37:1d:9a:5d:9c:4b:f3:bd:15:c2:
17:2c:71:b4:fc:5d:08:33:21:79:eb:c2:fc:af:da:31:da:d1:
4f:4d:a1:60:5b:61:0c:20:1a:6d:0b:d1:47:77:e8:8d:9f:01:
83:c8:f7:b9:91:a0:8c:fd:0c:e5:a3:eb:5b:34:70:d6:a5:13:
47:e9:49:7c:a9:c3:bb:d2:39:25:d2:5a:19:a7:e6:02:ab:63:
76:af:a6:6f:69:aa:b5:98:7e:e5:d0:3b:cb:92:30:0a:0d:59:
9e:cd:10:43:36:fe:b2:56:54:ae:35:7f:85:10:32:90:bd:f1:
18:bf:07:80:a5:8f:6c:49:be:97:82:bc:44:15:a9:50:3b:ce:
7b:8b:c6:37:d2:d2:d3:8e:22:87:cf:27:58:f0:ee:a0:0f:75:
4f:fc:ed:75:6a:7b:ee:9b:2b:f7:6b:98:ac:33:a9:1a:66:e4:
62:50:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:36 2026 by rpki-client