Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: e9Nqlm1o84G5sBx6PlE3c3Dq3GzLHxts9IE421ha/r0=
Subject key identifier: FD:C9:7C:06:1E:80:1F:31:29:BA:96:D9:30:3C:DA:71:CD:5B:67:02
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019F9FCDB333C854F4F1C37A7B040FAE507C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 0456
Signing time: Sun 26 Jul 2026 19:01:25 +0000
Manifest this update: Sun 26 Jul 2026 19:01:25 +0000
Manifest next update: Mon 27 Jul 2026 19:01:25 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: RXW23DTUnfC5j0VmOeQXxsGZ+GrkfPFDrBjzVAjd4zs=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:b3:33:c8:54:f4:f1:c3:7a:7b:04:0f:ae:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jul 26 19:01:25 2026 GMT
Not After : Jul 27 19:01:25 2026 GMT
Subject: CN=fdc97c061e801f3129ba96d9303cda71cd5b6702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:5a:ea:d8:39:90:05:45:4c:2a:23:4b:49:
66:5e:a8:77:85:86:29:8c:59:ee:eb:06:b4:78:88:
66:7c:d8:87:bd:97:3b:a8:ee:d3:43:3e:6e:1f:99:
ef:7b:ec:0e:3e:e5:a1:d3:3e:69:69:fe:43:62:97:
7b:df:68:e2:26:f2:56:94:22:32:2a:af:e7:26:76:
ac:15:e6:4c:87:0e:d3:45:ae:8c:20:ff:d8:ed:69:
da:8a:ff:0c:ed:ba:8f:cc:4d:a5:c1:94:86:45:f3:
cc:3b:2f:95:83:7c:e7:f3:ff:5e:f0:bf:44:b5:49:
98:de:79:01:f4:ba:0e:de:81:29:aa:e3:d1:93:fe:
7a:f3:a9:43:d9:41:4d:65:b9:de:d2:64:82:13:c9:
21:4f:25:e1:d0:b1:b4:00:2e:91:63:d2:c2:53:a9:
28:dd:a9:e4:12:17:b9:3d:99:71:a7:c2:f0:d5:c4:
37:71:39:89:b5:e4:94:6c:15:c8:1d:27:a3:8a:cd:
cb:4d:75:65:72:0c:db:ed:ee:37:a6:4e:50:0b:3f:
f5:d9:8a:9b:09:93:61:22:a1:80:a9:f1:9e:f7:09:
ff:08:91:ca:3a:4f:4d:c0:e2:aa:72:19:59:c0:2c:
e9:9b:19:da:f1:b1:5c:d8:bf:42:45:9d:10:d6:a0:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:7C:06:1E:80:1F:31:29:BA:96:D9:30:3C:DA:71:CD:5B:67:02
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ec:dc:c9:d1:97:b4:7c:f6:8d:7c:0a:f4:3b:69:71:87:ac:
cd:73:ae:9e:ad:46:69:4e:68:00:ea:c7:ce:e8:89:17:a4:79:
61:38:75:c0:a0:69:dc:45:4a:f1:58:ca:6b:f7:6a:99:35:ba:
f8:f1:65:ba:d0:ef:6b:3d:0f:3a:4a:ba:f6:1a:47:42:0e:cb:
f8:d8:54:2e:75:88:5c:bf:fe:20:36:f0:2c:29:d6:04:bc:15:
b3:ed:79:9a:3c:8b:37:00:f0:d5:ac:53:0d:92:b3:8f:6d:96:
d8:f2:0f:e1:6b:b5:6e:ba:4c:89:83:ef:93:0a:ba:89:3d:10:
23:4a:f4:e0:5b:91:e3:f5:2f:47:3e:24:80:c2:da:7e:74:fa:
55:15:c9:2b:74:f4:33:cd:8d:49:24:1f:a1:d7:b8:b6:9c:23:
77:93:fe:b9:fe:d0:d3:0a:e8:28:d3:58:a0:f4:a1:6b:94:79:
45:4e:ab:85:08:3a:e6:37:fb:07:29:42:90:8d:46:2e:37:ce:
c0:24:e7:c8:c4:01:38:66:d5:03:b8:c3:e2:84:d5:4f:80:b6:
b4:41:b1:fd:e4:d4:38:c9:46:14:fb:0a:ae:c9:e1:25:9d:77:
ce:d5:77:79:0b:14:f5:19:cf:d5:1f:c8:24:5c:3b:4e:2e:a4:
ee:be:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:35:29 2026 by rpki-client