Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: Emsq1OI8l97bAnVDQj4ihPoZbC7+LnmqK3u+erRTd6M=
Subject key identifier: F8:8D:7A:E2:E0:1E:CF:C7:84:67:95:47:0B:68:00:5C:08:B0:8F:3E
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 01A08C0D221076CE0FC16298AA0A1F472885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 16:01:05 +0000
Manifest this update: Thu 10 Sep 2026 16:01:05 +0000
Manifest next update: Fri 11 Sep 2026 16:01:05 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: KgGoYpVHubY6HcXlmIg5dju2f8LTUTUYaQMkAN91fBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:22:10:76:ce:0f:c1:62:98:aa:0a:1f:47:28:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Sep 10 16:01:05 2026 GMT
Not After : Sep 11 16:01:05 2026 GMT
Subject: CN=f88d7ae2e01ecfc7846795470b68005c08b08f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:76:40:c1:db:16:9c:ec:54:dd:ca:0b:11:
0b:89:2c:24:b0:a0:25:4f:b8:cd:b5:0c:f6:c4:3e:
f9:75:50:ff:d2:68:9a:85:19:53:6f:ac:ee:99:ba:
64:d5:18:37:19:61:5b:5c:46:49:fc:29:ed:19:b8:
53:19:4a:3e:22:32:fd:f3:cb:57:13:3f:5a:da:21:
df:59:99:49:21:2a:f4:dc:5a:19:a2:a9:f9:b1:f3:
45:4b:c2:ab:79:bd:e0:f3:da:0c:ca:d1:b3:d9:c8:
03:12:bd:80:41:44:00:1e:c0:df:4f:7f:ec:df:d4:
b6:28:bd:03:a9:1d:fd:5c:62:5c:7d:2a:af:58:1f:
43:74:0d:58:05:af:4a:1c:db:c4:73:04:4a:3d:9f:
28:19:7d:37:9e:04:bd:a2:aa:7e:54:6b:c5:ad:a4:
a9:d1:9c:4d:60:b9:f2:ea:eb:f1:de:9d:2f:33:a9:
8e:f3:b7:96:da:1f:ab:95:63:76:bd:d8:0c:dc:c8:
a2:10:40:34:dd:c1:4d:3e:47:78:dc:73:89:ab:c7:
9a:6e:a7:65:c3:bc:c6:c6:c3:a2:80:07:bf:84:26:
03:ef:90:c8:e6:2e:04:71:66:c7:12:ef:61:da:23:
7a:32:af:f5:a3:d1:77:9e:48:98:9a:6b:72:61:e4:
4d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8D:7A:E2:E0:1E:CF:C7:84:67:95:47:0B:68:00:5C:08:B0:8F:3E
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:79:72:71:b3:29:6a:fb:e4:17:d9:0a:00:1c:36:27:5e:60:
c4:9e:db:9e:e3:9a:6c:c1:de:d5:dc:b5:28:1b:68:67:33:5e:
91:d8:b8:97:81:16:5e:cf:f5:72:bd:b0:f1:f0:68:b0:ab:ab:
88:de:6d:07:0b:b9:8f:27:8b:9e:3c:20:3b:99:9f:f1:fd:7e:
d0:f9:c5:e3:12:7d:08:9f:ac:d4:d3:00:e7:6f:a9:c1:25:8d:
85:68:f1:aa:29:bb:22:fb:77:dd:9b:aa:6d:ca:e8:44:bd:d9:
e6:57:ec:c1:29:56:79:df:23:fc:8f:91:c2:72:51:3b:c3:91:
9e:3c:79:4b:5f:b2:fe:2d:49:7f:e7:8e:aa:70:17:f3:bd:6b:
bb:f1:43:a4:89:09:0f:35:6a:fb:5d:5b:5c:25:b6:00:be:a5:
77:53:1f:bd:ac:e9:b9:35:74:18:2d:d3:5b:17:68:1e:7e:fc:
ed:8d:c2:00:87:3e:c4:02:c6:a3:c1:32:39:51:bb:91:4e:cb:
b2:e8:48:25:f2:ec:a4:ff:5a:e3:7f:51:15:16:a8:fc:18:54:
5c:97:03:71:ca:65:13:cf:53:0f:28:0d:b0:10:34:06:d0:b7:
b4:d3:b9:04:f1:10:a4:0c:f0:2f:d4:99:69:2f:9b:e0:86:d7:
93:dc:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:35 2026 by rpki-client