
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: uPg9itzCXdCwxtvD860SNQE5S2OTFdiVatUnLXcb35I=
Subject key identifier: EB:E5:EB:57:BE:C8:C0:A6:3B:71:17:59:4B:87:2B:05:B4:04:72:64
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019F183041E6013AF5AEE126007F9C5CCF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 1479
Signing time: Tue 30 Jun 2026 11:00:43 +0000
Manifest this update: Tue 30 Jun 2026 11:00:43 +0000
Manifest next update: Wed 01 Jul 2026 11:00:43 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: EnRJEO3UNDFOiBjqvqPjccz3x7wHG4AYO/5s8AaZs84=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:41:e6:01:3a:f5:ae:e1:26:00:7f:9c:5c:cf:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jun 30 11:00:43 2026 GMT
Not After : Jul 1 11:00:43 2026 GMT
Subject: CN=ebe5eb57bec8c0a63b7117594b872b05b4047264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:4f:b6:70:33:72:fc:83:2b:34:21:09:cd:
fb:44:1c:f8:b2:60:e6:0b:62:c0:e7:83:83:2f:14:
64:f2:f1:18:4b:38:90:c2:2e:b7:5d:6c:5e:c7:84:
c7:0e:73:70:36:59:cc:8c:e6:ae:9f:b8:42:29:d3:
ad:13:b9:60:26:4f:91:6e:6d:40:74:ab:f0:3c:4c:
f2:b8:63:8a:db:10:83:85:2b:d8:4d:a9:da:5f:51:
7c:5f:5e:74:d5:61:57:9c:bd:6e:cf:36:e2:f5:f1:
2e:04:e1:3d:2e:3b:38:2e:9b:f9:e5:4a:5d:97:33:
eb:34:a6:35:cf:65:20:e2:bc:07:30:84:64:3c:16:
6d:68:2d:7a:d1:59:8d:f2:e3:81:79:c3:7b:f8:a9:
fa:d1:61:e2:89:e6:2f:b4:f9:c4:bb:38:7d:5f:15:
78:01:ea:f8:88:c9:f9:03:e5:7c:3b:47:97:93:3e:
1b:0b:59:9e:4d:f4:c1:e5:5b:41:d7:f4:cc:1a:39:
4d:23:95:c4:bb:0e:21:cb:ee:f9:ab:f3:8e:54:9f:
83:21:0c:e5:cb:59:b9:ba:5c:f2:63:8a:95:51:64:
4d:34:f3:db:88:c3:11:fd:b0:45:cc:59:16:ef:44:
91:71:46:97:e3:c1:18:ed:fe:b0:f6:63:74:53:df:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E5:EB:57:BE:C8:C0:A6:3B:71:17:59:4B:87:2B:05:B4:04:72:64
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1d:f2:a1:a1:eb:cb:82:54:3b:07:ed:74:34:4f:c1:07:11:
df:21:cf:7e:b6:9e:52:eb:fd:55:34:35:e2:bc:ee:e0:a6:8c:
50:bc:e9:15:85:7f:83:b2:3c:07:5e:19:6d:9a:56:d1:81:07:
ee:87:18:8f:49:e5:09:64:06:1a:8b:3a:3e:6d:3b:25:29:ba:
53:78:ef:0a:ab:dd:34:4b:be:9c:87:b6:da:e4:11:09:21:6c:
6e:3e:2f:33:52:6f:48:9e:61:54:92:0e:d4:dd:d6:87:5b:a0:
4c:57:62:63:df:df:6e:28:17:c9:a2:26:f1:9a:95:5c:f0:a6:
2f:b9:cd:97:68:a0:55:f4:b1:66:c3:cb:c6:b8:12:e5:3e:32:
ff:92:10:94:63:b0:33:92:59:7a:1f:d5:3b:63:28:fa:f5:f1:
f9:42:b6:c9:83:15:ac:66:97:80:d6:3a:56:82:73:90:0a:e4:
24:a2:e4:44:a3:13:e2:58:5c:8e:24:6b:66:17:f4:75:4e:a8:
07:b6:d2:92:b6:26:ee:b6:5d:5e:f5:e0:5b:05:1d:0a:3e:8a:
79:e6:55:36:7d:6c:83:c5:76:1a:aa:50:5e:29:62:8e:03:63:
3d:a5:16:9a:c9:21:b8:50:84:14:2d:ee:61:83:7a:9d:de:7f:
32:59:18:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMEHmATr1ruEmAH+cXM8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjYwNjMwMTEwMDQzWhcNMjYwNzAxMTEwMDQzWjAzMTEwLwYDVQQD
EyhlYmU1ZWI1N2JlYzhjMGE2M2I3MTE3NTk0Yjg3MmIwNWI0MDQ3MjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u1PtnAzcvyDKzQhCc37RBz4smDm
C2LA54ODLxRk8vEYSziQwi63XWxex4THDnNwNlnMjOaun7hCKdOtE7lgJk+Rbm1A
dKvwPEzyuGOK2xCDhSvYTanaX1F8X1501WFXnL1uzzbi9fEuBOE9Ljs4Lpv55Upd
lzPrNKY1z2Ug4rwHMIRkPBZtaC160VmN8uOBecN7+Kn60WHiieYvtPnEuzh9XxV4
Aer4iMn5A+V8O0eXkz4bC1meTfTB5VtB1/TMGjlNI5XEuw4hy+75q/OOVJ+DIQzl
y1m5ulzyY4qVUWRNNPPbiMMR/bBFzFkW70SRcUaX48EY7f6w9mN0U9+gKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvl61e+yMCmO3EXWUuHKwW0BHJkMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsR3yoaHr
y4JUOwftdDRPwQcR3yHPfraeUuv9VTQ14rzu4KaMULzpFYV/g7I8B14ZbZpW0YEH
7ocYj0nlCWQGGos6Pm07JSm6U3jvCqvdNEu+nIe22uQRCSFsbj4vM1JvSJ5hVJIO
1N3Wh1ugTFdiY9/fbigXyaIm8ZqVXPCmL7nNl2igVfSxZsPLxrgS5T4y/5IQlGOw
M5JZeh/VO2Mo+vXx+UK2yYMVrGaXgNY6VoJzkArkJKLkRKMT4lhcjiRrZhf0dU6o
B7bSkrYm7rZdXvXgWwUdCj6KeeZVNn1sg8V2GqpQXilijgNjPaUWmskhuFCEFC3u
YYN6nd5/MlkYEQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:19 2026 by rpki-client