Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: IxXfL+lzqzn072mSDICJBWQmcISOTVI8c7lLNjyEX/Y=
Subject key identifier: 6D:1D:A2:7D:6F:16:5C:8C:39:18:FA:5D:D9:6C:55:A1:A7:C4:D5:E4
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 01A140828D04D0688037EC0F01FE5EEF304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 1597
Signing time: Thu 15 Oct 2026 17:00:59 +0000
Manifest this update: Thu 15 Oct 2026 17:00:59 +0000
Manifest next update: Fri 16 Oct 2026 17:00:59 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: 7TmOuJrP/qukiCImTHvCT4j3mSVA+IPRxxwAvnBSSGU=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:8d:04:d0:68:80:37:ec:0f:01:fe:5e:ef:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Oct 15 17:00:59 2026 GMT
Not After : Oct 16 17:00:59 2026 GMT
Subject: CN=6d1da27d6f165c8c3918fa5dd96c55a1a7c4d5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:9e:24:26:07:87:73:67:a9:04:82:30:9e:
cd:6b:af:cc:f2:91:ab:a7:b2:ed:f9:a7:dd:7b:bd:
4e:54:70:50:94:f4:8b:d9:5a:8f:cc:e7:06:49:59:
51:27:5e:61:d0:f0:a9:98:20:45:bf:35:fc:1d:f4:
f8:15:49:84:18:93:84:56:4d:4d:e6:a6:2d:4b:e0:
1b:54:a6:9b:8d:18:28:cd:74:14:c8:cc:09:74:2a:
f8:a7:91:66:b2:d1:72:7a:b4:5d:fb:ee:f8:9d:cd:
fb:a5:bc:58:c2:ac:11:d3:e8:43:38:24:de:e9:81:
e2:62:a6:d4:e4:0b:56:86:a2:e5:3d:96:26:a7:a8:
5c:f0:89:5c:8b:4f:97:4c:e1:79:77:61:53:64:d4:
dc:68:e1:ad:f7:b9:72:12:f2:14:72:35:a9:7d:52:
78:52:7f:87:0e:94:24:18:dd:08:cc:c3:db:f7:82:
ad:17:7b:bd:ee:82:80:40:b8:da:b7:e9:12:cd:a1:
48:22:25:3b:3b:7a:c2:1c:c2:ba:5b:14:29:36:8a:
3d:35:5f:20:2f:ec:f2:ed:93:56:dc:f2:5f:9e:5a:
27:f5:e6:9a:22:7d:17:89:d2:ee:1f:61:c0:17:1f:
db:ef:07:9e:3c:45:ed:d9:21:57:0a:5e:84:f9:fe:
41:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:A2:7D:6F:16:5C:8C:39:18:FA:5D:D9:6C:55:A1:A7:C4:D5:E4
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:fd:60:52:0e:09:e2:14:bd:62:1a:fa:3c:c3:58:ef:3f:18:
f6:c6:13:bc:ee:0d:3b:5b:f1:9e:64:6b:3d:c4:e1:34:ee:9f:
a4:54:77:54:dc:0e:ae:a2:0f:c9:9e:96:f6:b6:21:07:12:dd:
23:c7:ab:b1:ba:ce:0a:19:af:63:3d:9e:7b:b1:20:97:5e:71:
e1:24:39:a3:11:98:b5:53:85:02:5d:1b:ac:18:12:eb:41:b2:
3a:f5:06:ab:52:a9:70:0c:c3:f3:28:95:c6:66:01:bc:63:a7:
a7:b2:b7:db:99:bc:de:83:6c:ff:a0:c7:24:41:85:27:74:7b:
94:b5:d6:50:9e:10:b7:3c:35:78:05:8a:2f:80:e7:e9:55:2e:
9b:c5:d2:44:4e:1d:01:d6:98:97:ab:15:bd:e5:5b:75:d8:81:
53:62:6d:a7:df:74:49:f0:7a:1c:96:9b:4c:a3:e8:c2:60:12:
65:b6:ff:21:ba:e6:c0:5a:bd:b1:22:ba:77:ad:12:8b:19:92:
1c:0f:05:e0:61:bd:b8:eb:c1:ae:45:f9:0b:7e:a8:01:fb:66:
4b:fa:9e:3e:fe:a4:ea:00:31:2e:c8:74:fb:1b:f3:dd:c6:62:
5b:19:68:c8:a0:21:c2:df:9e:bb:68:4e:cd:63:ff:ec:f7:72:
5f:b6:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:40 2026 by rpki-client