Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: gz/Vi6NqrwgzE2csYMFogo4jsyj1iSL0fgZpxN4DGVs=
Subject key identifier: 6F:54:AD:92:16:0E:3D:D8:4A:E9:77:1C:58:F7:CE:92:8F:81:56:94
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 01A001A685C03ABC0A6DD609BB3C4AFBA186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 137A
Signing time: Fri 14 Aug 2026 19:01:25 +0000
Manifest this update: Fri 14 Aug 2026 19:01:25 +0000
Manifest next update: Sat 15 Aug 2026 19:01:25 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: d5XgWiZ3zhMCYwfMz2FbN5K42U9BkOadNrPJ62PUIOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:85:c0:3a:bc:0a:6d:d6:09:bb:3c:4a:fb:a1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Aug 14 19:01:25 2026 GMT
Not After : Aug 15 19:01:25 2026 GMT
Subject: CN=6f54ad92160e3dd84ae9771c58f7ce928f815694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:68:d2:e3:21:67:57:4a:51:ea:e7:1b:7c:
99:31:05:c3:81:8c:63:64:14:3e:b9:ae:17:9f:19:
92:42:15:42:2a:a7:4b:a8:1a:ea:ff:fc:4a:d0:ee:
1c:f9:15:36:47:66:35:54:4e:e5:18:eb:82:9c:22:
08:4b:f9:16:23:6e:50:0c:f4:66:02:7b:0a:de:ae:
c4:86:5d:59:8f:a1:28:66:a1:ef:45:a1:fa:dc:2f:
39:07:51:9c:44:0b:83:03:25:26:53:f7:73:70:d6:
8f:39:0a:8a:fb:2d:94:24:22:71:dc:52:ce:89:6e:
5a:a7:26:eb:c6:49:7a:be:3f:c6:b4:b9:d9:17:63:
fe:d8:66:99:e6:31:52:e4:66:fa:91:77:df:24:3f:
f9:3b:a9:ea:d7:3a:89:69:c7:d1:3a:1a:7c:72:3a:
d3:8f:c8:c4:08:4e:3d:bb:16:13:73:f1:da:11:3e:
53:e0:86:ce:66:e9:5f:ac:b4:44:a0:4b:62:f8:02:
e5:39:24:af:c4:65:e4:33:04:68:f7:3f:27:d1:81:
31:df:ec:a8:6c:a9:c9:d1:b0:c6:0a:81:d7:72:df:
9b:ad:46:9a:05:b6:49:49:ca:2b:5a:08:97:92:c2:
59:3c:2e:22:01:e5:94:82:52:1d:f5:ad:14:fc:7c:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:54:AD:92:16:0E:3D:D8:4A:E9:77:1C:58:F7:CE:92:8F:81:56:94
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8a:9b:9b:e9:06:d3:6b:ad:13:d3:7e:8f:71:89:d1:db:b9:
53:f7:ae:92:10:c3:ec:ed:7d:cc:96:d7:1d:fa:87:d2:76:15:
c2:39:e7:e7:73:85:40:62:dc:d6:15:38:01:61:76:12:11:bb:
35:36:9a:b5:9f:28:20:39:10:cc:b8:02:20:d6:81:56:8f:23:
82:8e:a8:a5:a3:7c:c4:d9:e8:43:d8:6d:75:46:2a:11:49:4b:
8c:5b:d0:52:2f:90:83:4e:2f:d9:c9:29:4b:c5:bd:32:6b:c8:
60:85:6f:1d:6c:f8:2d:b9:5c:c5:e9:83:63:62:00:64:78:5c:
e7:0c:bd:04:42:40:86:4d:2e:89:eb:0b:4b:9f:25:54:31:aa:
bf:a8:25:96:37:d9:23:3b:eb:fc:6a:5d:e7:ac:68:40:4f:9b:
28:8b:64:3e:e2:44:08:01:2d:ad:c2:d7:11:ad:04:c4:40:41:
64:42:23:69:dd:9f:3f:8e:6f:96:97:f7:6d:84:3b:b3:0b:d5:
ef:95:ea:77:43:18:24:05:16:83:0c:99:f6:0f:c7:c6:16:d2:
87:b6:bf:69:04:d2:4f:61:d3:92:6a:90:1a:48:8d:2a:48:5e:
09:2e:71:d3:06:7e:23:64:48:e8:53:3d:9d:cb:00:05:cd:aa:
dd:42:b6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client