Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: XgVaP4FI6kxp9apzoq9j5tj9y0SYefGg9ppZ4tOPJ7Y=
Subject key identifier: AF:F1:22:D2:4F:AD:2B:99:E7:DB:6F:7B:F3:EF:02:00:30:17:AC:EC
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019CE36C46785EA25C39C39C981562573D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 7B
Signing time: Thu 12 Mar 2026 19:00:49 +0000
Manifest this update: Thu 12 Mar 2026 19:00:49 +0000
Manifest next update: Fri 13 Mar 2026 19:00:49 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: Xsdn4bdfkd2bnnWIU7wzjoyG8pAJGzfFqIx2pKiLUSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6c:46:78:5e:a2:5c:39:c3:9c:98:15:62:57:3d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Mar 12 19:00:49 2026 GMT
Not After : Mar 13 19:00:49 2026 GMT
Subject: CN=aff122d24fad2b99e7db6f7bf3ef02003017acec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:ee:93:66:9c:47:03:e2:9e:14:4c:34:a4:
d2:53:74:a8:59:81:f7:34:4b:62:76:9d:b3:94:f6:
a8:95:59:cb:a8:a2:51:e4:5d:97:2b:05:f8:14:c3:
40:4d:06:fe:d7:8b:f5:c9:09:5e:b4:4a:95:58:b7:
2b:23:c4:05:02:56:80:e0:a6:73:0c:ea:ff:b2:ad:
2d:4f:62:f2:5a:03:9c:7f:f1:40:3e:cb:28:21:88:
6e:84:74:06:9a:c1:43:87:16:ca:3f:a9:03:a9:17:
25:05:02:2f:52:e5:99:3d:c3:04:89:c7:ac:d4:91:
f6:fd:bf:9e:b9:a1:3e:d6:8c:c1:a7:91:29:84:f5:
fa:45:f3:c9:e3:92:67:d4:04:69:06:50:c6:64:a5:
d2:57:42:b0:79:ec:b6:b9:46:05:78:32:68:46:31:
bf:2d:89:a2:5e:08:ec:cc:f9:29:9e:a7:02:b4:58:
25:ae:5e:96:9c:9c:79:53:71:d1:a5:05:2e:ec:eb:
82:64:bb:61:f7:0c:f2:bf:66:db:b4:e6:b4:01:46:
f2:71:ec:fa:b9:38:09:cb:99:00:ad:f7:b1:5d:dc:
a2:ce:d9:f6:0b:6c:ad:55:10:f3:1f:fb:a9:00:a2:
cc:9a:78:52:ac:74:44:4e:81:e3:ff:9c:62:a9:44:
bb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F1:22:D2:4F:AD:2B:99:E7:DB:6F:7B:F3:EF:02:00:30:17:AC:EC
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4a:57:78:0e:95:19:97:d8:be:eb:b9:6c:64:09:df:55:76:
d3:d3:88:95:00:02:12:57:7b:15:21:d0:d6:19:d2:e7:c1:ea:
20:cb:ac:b3:c2:ef:7e:b2:2f:61:f4:34:7a:c2:08:4b:35:6c:
78:c7:8e:1f:d6:35:c1:40:b1:a0:d9:03:1e:b2:38:7d:f8:bc:
81:9c:dc:1f:8a:ff:a5:fd:5c:b0:65:6f:96:a3:7a:57:38:95:
4c:b0:f9:2f:c1:98:a1:9f:27:61:44:8d:24:5d:9f:08:33:4f:
a0:bd:69:c1:2d:63:34:f6:5a:f4:9d:d6:95:06:3a:51:ad:58:
6f:78:37:29:dd:66:84:cb:dc:e3:81:99:82:3c:d6:1d:df:4f:
d2:b6:60:bc:9a:86:69:45:fd:4d:6a:1f:3e:9f:e4:26:93:39:
6a:ab:79:5d:c8:60:c8:d7:1f:4a:29:79:bf:6a:34:2c:e6:be:
a6:dc:c6:b5:e2:ba:50:42:f6:43:49:0d:06:1c:a9:e8:fb:35:
9c:5c:59:0b:f1:63:dc:a2:df:0f:7a:d1:4e:95:ee:3b:22:35:
ed:50:6d:a3:53:39:86:b5:72:be:4d:80:a2:dc:a8:2d:2e:3f:
3f:ce:58:e0:1f:c6:ae:eb:c6:9e:d5:56:2a:b1:34:fe:fc:45:
49:bc:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:30 2026 by rpki-client