Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: DZtcPeDyM3d78updE2tPcz86Orp1w8Ks5sRxgNvEcLQ=
Subject key identifier: AB:60:F8:2E:19:4B:1A:10:B8:A1:21:AD:DA:3A:9C:0B:99:EA:87:04
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019EB6C4E82F23074E8C9B04A436C94BAA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 016D
Signing time: Thu 11 Jun 2026 13:00:18 +0000
Manifest this update: Thu 11 Jun 2026 13:00:18 +0000
Manifest next update: Fri 12 Jun 2026 13:00:18 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: hOEOak3lzsA06uNg2uS83HZRiDMmD5SQ0Yjp4XLRig4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:e8:2f:23:07:4e:8c:9b:04:a4:36:c9:4b:aa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Jun 11 13:00:18 2026 GMT
Not After : Jun 12 13:00:18 2026 GMT
Subject: CN=ab60f82e194b1a10b8a121adda3a9c0b99ea8704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:0c:83:3d:d0:89:28:af:62:7e:57:25:87:
dd:ea:eb:c1:80:35:e8:24:1a:89:f3:2b:a3:b0:96:
ce:42:28:ea:24:0a:6b:e3:b2:b8:a0:b3:f9:4e:ea:
71:94:33:48:5f:f8:72:90:23:ab:90:d7:35:5d:fc:
b1:f7:2b:1d:f7:f1:74:54:33:3b:ab:4a:dc:96:d3:
12:9c:1b:a7:80:5f:68:f1:bb:fc:8f:05:0b:b9:b1:
e5:25:73:00:22:5e:5b:a2:bc:35:e5:9d:bb:c0:46:
95:9a:6d:ee:4b:89:cc:7b:99:ff:1f:59:26:7a:99:
b0:5e:cf:87:7d:f1:ae:a7:b7:14:a0:2d:bc:a1:16:
98:68:1a:96:9d:5c:14:ce:c5:01:42:2f:c6:a5:5f:
97:89:db:d2:3a:d2:85:24:ed:01:df:7d:f5:ca:40:
f7:a7:ba:eb:54:8d:81:9e:80:4f:e4:3e:80:65:d1:
56:a8:d4:61:55:1e:bb:5a:93:7c:fd:da:3f:63:14:
54:9a:db:fb:60:63:eb:d8:4d:57:09:5e:3f:6e:51:
b9:02:b7:bf:30:0a:71:84:e7:43:91:0c:2e:f7:72:
72:a2:56:11:de:9d:64:42:50:2b:aa:b8:43:31:5a:
ba:82:d0:ca:ad:73:77:9a:c0:5e:5c:3a:1d:8c:f3:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:60:F8:2E:19:4B:1A:10:B8:A1:21:AD:DA:3A:9C:0B:99:EA:87:04
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:45:da:04:3c:04:52:8f:38:03:f7:6b:c5:24:3b:85:7e:d4:
dd:31:ac:d4:70:01:18:43:c6:e9:50:24:44:8e:60:f5:cd:69:
ef:39:50:0f:38:86:a1:2d:cb:25:4e:85:0c:84:33:0f:42:90:
a2:11:fc:1d:96:3f:0d:b2:ce:51:99:a9:81:58:65:e0:d3:3d:
d3:34:5c:2c:28:18:59:29:71:8f:1e:b7:d4:d0:c0:73:62:43:
ba:a6:61:a5:b5:03:0e:d1:d7:29:33:0c:4a:8b:7f:32:fa:4a:
60:6c:1f:6b:1d:61:3a:dd:d8:72:93:eb:e6:9c:24:47:68:d2:
0c:58:56:c3:ca:cc:91:48:cc:62:a9:2b:72:63:49:66:65:6b:
93:19:41:07:28:0b:60:05:45:d0:ee:85:cb:64:50:85:26:66:
01:4e:03:27:2a:df:88:12:00:62:1c:f8:14:95:e6:ad:9f:19:
a1:6c:06:f8:82:c4:32:36:0d:ec:b7:a9:df:b3:08:f7:45:05:
72:dc:7c:70:42:46:76:26:9e:f1:3d:89:24:fd:25:23:8f:83:
2d:94:7b:07:fb:1a:d1:e9:a7:07:09:11:80:b9:69:f5:cd:dd:
f6:9e:38:56:72:72:fa:34:d1:f8:51:25:da:9a:5f:5c:a7:d6:
1f:1c:ab:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:17 2026 by rpki-client