Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: CC4Yaja2eTHtio/nBQH7wTkV4evg2Dxg7Y05zxE18xM=
Subject key identifier: F6:F2:1F:00:2E:0C:57:BE:B2:14:65:BD:8F:FE:2D:79:04:FD:EB:93
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 01A001DCF4E4651589829B985D9D17F50E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 14F2
Signing time: Fri 14 Aug 2026 20:00:52 +0000
Manifest this update: Fri 14 Aug 2026 20:00:52 +0000
Manifest next update: Sat 15 Aug 2026 20:00:52 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: 0CrTOPWDiCpTh+OIcVLJATGjAtbXZpBlZmgqpyec+CE=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:f4:e4:65:15:89:82:9b:98:5d:9d:17:f5:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Aug 14 20:00:52 2026 GMT
Not After : Aug 15 20:00:52 2026 GMT
Subject: CN=f6f21f002e0c57beb21465bd8ffe2d7904fdeb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:73:69:de:cd:76:ec:09:3f:94:a6:f6:c5:82:
22:d9:a4:a3:95:07:37:23:4b:5d:85:e1:8d:27:42:
ce:54:4b:b1:30:48:70:32:ea:a4:d3:9a:7b:12:ab:
71:db:e0:3c:19:ec:c2:06:af:fa:f9:81:fb:d9:c8:
c8:9e:91:1d:09:a5:43:8d:89:56:a0:c1:b5:14:60:
cb:4f:aa:d9:84:6a:ee:3b:3b:8a:97:5e:3c:23:17:
ec:e1:3b:61:4c:03:06:a4:70:61:4a:44:f4:07:cb:
33:91:1b:53:ef:82:44:7c:69:24:f6:9b:8b:e4:a8:
66:bd:8f:73:1d:2f:e6:e1:87:8b:c2:3e:32:57:46:
b1:29:c7:10:af:e3:f1:c4:25:c2:c5:f7:7d:dc:27:
55:4d:f4:c0:34:de:25:66:1c:7e:38:8d:6e:81:69:
82:30:ce:dd:af:ff:8e:11:40:58:50:dc:68:23:39:
33:2a:ac:03:5d:f5:c7:70:2e:c0:b5:3b:9c:3e:9c:
0a:33:6c:90:fb:f9:15:9e:a0:a8:16:b7:7e:21:be:
75:ab:4e:33:c9:b5:1f:0f:ed:f6:28:1e:59:c4:ea:
95:77:19:de:f1:06:e8:79:72:50:39:4b:ef:f3:07:
ee:cc:3f:b4:90:5d:6b:9a:25:11:af:6b:25:57:e8:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F2:1F:00:2E:0C:57:BE:B2:14:65:BD:8F:FE:2D:79:04:FD:EB:93
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4d:bb:b6:b8:e9:0e:b1:5e:bc:b9:1f:df:cc:2b:64:5b:ae:
9f:a6:47:29:a2:8b:75:a3:6a:87:e6:e8:7c:72:60:c8:65:8b:
1c:a0:6d:42:1e:86:ef:de:45:57:c1:bf:48:f9:62:94:89:d0:
8b:fe:51:cb:31:f3:06:90:04:a8:56:7c:f7:ab:5f:d7:9c:1c:
6f:76:2d:51:d4:4a:f2:cb:fb:c6:83:5f:a9:bc:ba:95:63:d2:
de:bb:5f:7a:2f:41:fe:82:db:b9:ac:82:6d:1a:b7:80:5a:7a:
6e:8f:e4:70:f5:9b:a2:74:2f:47:d1:90:e7:f6:8d:07:16:f4:
1d:29:c6:58:67:88:3b:42:f4:5c:7e:47:77:ac:3b:31:cb:48:
d6:f0:cb:97:6c:0d:a7:e4:b6:0e:45:15:7c:b7:7b:1d:c2:61:
96:0d:0a:a7:e8:d1:2f:a1:82:9c:92:57:84:e3:41:c8:78:eb:
40:6f:0c:02:06:b3:b2:1d:6f:cb:0d:4d:68:c5:82:95:08:cf:
9c:7e:65:ca:d9:c3:9b:97:97:ad:21:d0:95:d7:52:bd:09:af:
d9:f7:6b:92:1f:05:78:e3:c2:23:33:fa:d8:93:b6:1d:d2:7d:
8c:8f:d6:37:6f:08:82:87:99:2d:e3:67:9c:d6:16:90:a3:f0:
dd:33:d2:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3PTkZRWJgpuYXZ0X9Q6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjYwODE0MjAwMDUyWhcNMjYwODE1MjAwMDUyWjAzMTEwLwYDVQQD
EyhmNmYyMWYwMDJlMGM1N2JlYjIxNDY1YmQ4ZmZlMmQ3OTA0ZmRlYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznNp3s127Ak/lKb2xYIi2aSjlQc3
I0tdheGNJ0LOVEuxMEhwMuqk05p7Eqtx2+A8GezCBq/6+YH72cjInpEdCaVDjYlW
oMG1FGDLT6rZhGruOzuKl148Ixfs4TthTAMGpHBhSkT0B8szkRtT74JEfGkk9puL
5KhmvY9zHS/m4YeLwj4yV0axKccQr+PxxCXCxfd93CdVTfTANN4lZhx+OI1ugWmC
MM7dr/+OEUBYUNxoIzkzKqwDXfXHcC7AtTucPpwKM2yQ+/kVnqCoFrd+Ib51q04z
ybUfD+32KB5ZxOqVdxne8QboeXJQOUvv8wfuzD+0kF1rmiURr2slV+gXmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbyHwAuDFe+shRlvY/+LXkE/euTMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH027trjp
DrFevLkf38wrZFuun6ZHKaKLdaNqh+bofHJgyGWLHKBtQh6G795FV8G/SPlilInQ
i/5RyzHzBpAEqFZ896tf15wcb3YtUdRK8sv7xoNfqby6lWPS3rtfei9B/oLbuayC
bRq3gFp6bo/kcPWbonQvR9GQ5/aNBxb0HSnGWGeIO0L0XH5Hd6w7MctI1vDLl2wN
p+S2DkUVfLd7HcJhlg0Kp+jRL6GCnJJXhONByHjrQG8MAgazsh1vyw1NaMWClQjP
nH5lytnDm5eXrSHQlddSvQmv2fdrkh8FeOPCIzP62JO2HdJ9jI/WN28IgoeZLeNn
nNYWkKPw3TPS6A==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:45 2026 by rpki-client