Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: S2V9fQMtLLFJFW+bbuOnFpXrAIyRN2wbWI/tMbQ9QZw=
Subject key identifier: 44:30:38:02:AB:AF:51:20:30:6E:DC:BC:92:4E:22:0D:52:6B:0E:C0
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019D3940B6944602F7B1A627636E8EED3A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 1381
Signing time: Sun 29 Mar 2026 11:00:35 +0000
Manifest this update: Sun 29 Mar 2026 11:00:35 +0000
Manifest next update: Mon 30 Mar 2026 11:00:35 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: nkBUMLgyyUfGQnDZUgVwUW+h2eEJZHnTuVXlyTUlFSc=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b6:94:46:02:f7:b1:a6:27:63:6e:8e:ed:3a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Mar 29 11:00:35 2026 GMT
Not After : Mar 30 11:00:35 2026 GMT
Subject: CN=44303802abaf5120306edcbc924e220d526b0ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:7c:25:b2:90:ff:a4:9f:32:de:ee:ba:23:
d0:f8:b3:ba:0d:e8:3a:a9:b5:65:0f:b9:72:bb:8c:
b4:0c:99:26:c5:6c:ed:87:a1:91:92:62:c3:35:cf:
7a:04:51:79:f9:d9:39:d0:be:05:d9:82:aa:94:fc:
28:05:68:a7:33:a1:c5:38:44:2b:18:35:bd:b1:1b:
c8:f9:a8:bb:2c:79:76:e7:07:b3:15:77:35:51:cf:
64:06:e8:b4:5e:a9:38:92:20:7e:7c:d9:ef:cc:17:
e8:21:58:b3:b6:04:40:15:34:79:c1:b7:93:6b:a4:
f0:a9:69:a0:e5:ec:2a:d2:f9:e2:e8:99:d4:e3:f0:
54:27:5d:9e:cc:40:d1:ab:e2:f9:2b:6d:77:21:13:
82:77:b2:6f:64:c9:06:b0:9e:a1:61:51:05:07:99:
27:06:54:52:d4:b3:2c:e0:bf:80:71:17:e6:9e:a3:
6e:2b:9d:a5:94:32:46:f6:33:6f:c1:8c:8d:99:67:
ef:61:ac:7e:ca:29:97:5d:4e:ae:a6:67:98:38:0a:
00:25:3e:f2:57:0f:74:28:7d:c5:16:f5:03:8c:ac:
8c:28:cc:ca:6b:45:d1:38:49:dd:e9:62:07:18:42:
ad:73:ec:35:36:4b:8b:5b:b3:32:61:1b:e4:22:55:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:30:38:02:AB:AF:51:20:30:6E:DC:BC:92:4E:22:0D:52:6B:0E:C0
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b2:55:46:75:de:80:c9:90:aa:10:a2:3e:aa:85:2a:53:4f:
ff:69:75:49:da:cf:58:71:6c:ca:fd:6e:ac:b6:0a:31:7d:86:
fa:06:15:77:84:eb:26:ec:a3:10:60:b7:88:82:5b:bc:6a:fe:
48:b4:01:ee:20:73:b9:62:f4:bd:e3:3e:5a:ba:78:85:08:39:
bd:95:00:fd:e4:f3:25:3c:c5:42:8c:1a:03:a9:bf:ee:b0:7f:
30:ee:ba:6c:dd:7e:51:d1:a4:b3:af:c2:b4:3f:7e:e4:b4:04:
9d:28:f5:55:08:ed:f2:b7:2b:55:f5:0f:83:f3:7d:2a:d0:c4:
9f:93:f1:f6:86:23:b5:df:ca:e8:c2:3a:19:c0:6d:20:76:90:
9a:15:09:ec:47:ff:65:c2:c0:f0:c2:b3:13:06:20:8d:ba:b7:
7b:8c:b0:af:7a:cb:f7:a1:e9:da:f3:8a:e0:94:8a:af:07:1e:
25:7f:4e:8f:b8:5e:1b:43:87:ca:52:ae:49:79:28:c3:9a:00:
0a:b9:e3:72:f0:f3:8a:22:d1:4a:9a:07:76:f3:5d:db:cf:26:
64:6b:4b:c6:17:09:0a:80:76:02:29:7a:a1:b5:da:01:e8:e9:
59:3b:27:8d:91:ea:25:ea:7c:4c:95:a4:2d:48:65:70:38:71:
5c:13:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:24 2026 by rpki-client