Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: dDhuKJM+8SnQUTjmy/eYex2I7XA6dm97HN5nK6drtus=
Subject key identifier: 31:37:20:5B:CD:8B:FE:CB:BA:A4:B7:7F:B8:FF:BC:25:92:93:55:6C
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 01A0878C0734CE143940374EB5EB7A82BF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 04CE
Signing time: Wed 09 Sep 2026 19:01:35 +0000
Manifest this update: Wed 09 Sep 2026 19:01:35 +0000
Manifest next update: Thu 10 Sep 2026 19:01:35 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: OwKc8FJZz8ya5nXZub7L7Bt9+MRWD9A8inb7Irqx66c=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:8c:07:34:ce:14:39:40:37:4e:b5:eb:7a:82:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Sep 9 19:01:35 2026 GMT
Not After : Sep 10 19:01:35 2026 GMT
Subject: CN=3137205bcd8bfecbbaa4b77fb8ffbc259293556c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3c:dd:52:59:6b:8e:77:ed:f7:71:f9:e1:78:
04:09:66:71:07:f3:f5:3c:fc:55:13:ad:f9:0a:81:
28:7d:a9:f7:ce:c4:17:b2:84:5b:5a:2f:ab:62:62:
c5:1b:41:21:5e:d8:fe:00:34:a2:6e:f4:b0:19:3a:
75:4a:9e:0b:fb:ec:5e:e1:ce:68:66:40:c4:89:ff:
9d:7e:36:1a:ba:43:43:20:43:93:1c:5d:d3:1d:60:
35:a1:19:06:5c:c9:2c:44:c2:e5:df:e8:b8:5c:2e:
bd:67:b0:86:ae:a4:1f:14:a2:a4:be:de:d6:c8:09:
26:18:b1:9a:e0:25:b5:50:7c:53:46:5d:95:0d:4b:
67:29:3d:11:82:e5:23:41:c8:80:7e:a4:0e:cd:68:
df:ee:49:ca:1f:3d:58:10:1c:c7:aa:d6:91:93:2e:
bd:03:25:20:e0:fe:51:da:9e:67:f7:33:b4:55:65:
d2:fc:07:09:c6:82:96:06:7e:5f:5a:ce:5c:8c:08:
44:4b:2d:c1:64:62:21:c6:60:83:be:70:d0:f8:99:
14:ec:60:69:54:87:22:51:8a:a7:4c:31:f8:a3:d0:
cb:f1:9c:87:5b:cf:15:aa:91:a8:42:54:54:02:6b:
4b:7f:5e:b2:9c:43:a2:18:5a:59:ee:32:35:e4:81:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:20:5B:CD:8B:FE:CB:BA:A4:B7:7F:B8:FF:BC:25:92:93:55:6C
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2b:d8:0c:c7:36:df:ca:18:70:08:e2:82:5e:96:74:54:43:
61:58:a3:fa:5a:ee:d8:0f:96:91:e8:e2:72:26:b1:4f:df:4d:
f4:15:51:8a:82:98:a0:dd:98:cd:5b:ac:ea:a4:ef:d4:9c:56:
f5:6e:ae:8a:52:63:fd:e3:fc:f1:1d:93:eb:b2:e9:e5:9b:63:
36:e3:a4:6f:1f:5d:bd:96:e3:1e:9b:a7:9e:b0:c5:d2:56:c8:
cc:af:f3:10:ab:8c:1b:45:38:29:92:3b:4d:c6:6f:bb:0f:55:
70:c6:0b:d8:b8:e0:80:67:20:f1:10:a2:ba:08:98:37:84:6b:
fe:bd:c1:e6:38:de:fd:96:aa:36:ab:69:cc:38:f1:c5:e6:04:
c5:05:ca:7f:a7:5a:7b:5d:07:b5:29:0b:9a:59:6f:06:2c:b3:
ed:9c:e0:3c:5c:c7:b4:3d:ed:6a:94:1e:eb:46:2a:30:ec:30:
f0:13:4c:11:c0:4b:42:d5:e7:d4:28:4b:80:43:04:3e:44:00:
14:1c:8d:da:79:d5:40:d4:3a:7f:44:a5:4d:94:77:8d:ad:da:
04:c5:5b:c3:f2:20:a2:59:d6:20:3c:89:81:27:71:62:f5:29:
34:a3:13:a7:ac:da:76:a4:3e:8d:fd:d7:36:1c:d8:6c:3d:22:
2c:8e:b1:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCHjAc0zhQ5QDdOtet6gr86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMDUzNjBlOTg3MzgyNWY3NWQ2NzFkYWYxNjI0YTUyZTk4
NTM5MGMwHhcNMjYwOTA5MTkwMTM1WhcNMjYwOTEwMTkwMTM1WjAzMTEwLwYDVQQD
EygzMTM3MjA1YmNkOGJmZWNiYmFhNGI3N2ZiOGZmYmMyNTkyOTM1NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TzdUllrjnft93H54XgECWZxB/P1
PPxVE635CoEofan3zsQXsoRbWi+rYmLFG0EhXtj+ADSibvSwGTp1Sp4L++xe4c5o
ZkDEif+dfjYaukNDIEOTHF3THWA1oRkGXMksRMLl3+i4XC69Z7CGrqQfFKKkvt7W
yAkmGLGa4CW1UHxTRl2VDUtnKT0RguUjQciAfqQOzWjf7knKHz1YEBzHqtaRky69
AyUg4P5R2p5n9zO0VWXS/AcJxoKWBn5fWs5cjAhESy3BZGIhxmCDvnDQ+JkU7GBp
VIciUYqnTDH4o9DL8ZyHW88VqpGoQlRUAmtLf16ynEOiGFpZ7jI15IEh+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE3IFvNi/7LuqS3f7j/vCWSk1VsMB8GA1UdIwQY
MBaAFNsFNg6Yc4JfddZx2vFiSlLphTkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2Ut
ZDYyZDIyNGUzY2FmLzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84ZmMxZTItNDFkNy00ZjM1LWExM2UtZDYyZDIyNGUzY2Fm
LzEvMndVMkRwaHpnbDkxMW5IYThXSktVdW1GT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOivYDMc2
38oYcAjigl6WdFRDYVij+lru2A+WkejiciaxT99N9BVRioKYoN2YzVus6qTv1JxW
9W6uilJj/eP88R2T67Lp5ZtjNuOkbx9dvZbjHpunnrDF0lbIzK/zEKuMG0U4KZI7
TcZvuw9VcMYL2LjggGcg8RCiugiYN4Rr/r3B5jje/ZaqNqtpzDjxxeYExQXKf6da
e10HtSkLmllvBiyz7ZzgPFzHtD3tapQe60YqMOww8BNMEcBLQtXn1ChLgEMEPkQA
FByN2nnVQNQ6f0SlTZR3ja3aBMVbw/IgolnWIDyJgSdxYvUpNKMTp6zadqQ+jf3X
NhzYbD0iLI6x1Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 04:34:11 2026 by rpki-client