Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: TTbz09aGmbVCgVPc3103LqzNLv0oJ4NTKw+57O80+lI=
Subject key identifier: D0:18:B4:F1:63:F1:04:EE:7C:1F:DC:31:92:5B:17:2C:25:03:70:B2
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019EB6205CF9C44A6084535F1C00A5313C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 03DD
Signing time: Thu 11 Jun 2026 10:00:34 +0000
Manifest this update: Thu 11 Jun 2026 10:00:34 +0000
Manifest next update: Fri 12 Jun 2026 10:00:34 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: kIWKsDSnyrzWryYOiFaoQZhwyY0tDu2wGGhbE/L6VAs=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:5c:f9:c4:4a:60:84:53:5f:1c:00:a5:31:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jun 11 10:00:34 2026 GMT
Not After : Jun 12 10:00:34 2026 GMT
Subject: CN=d018b4f163f104ee7c1fdc31925b172c250370b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:c5:68:44:a9:d8:03:95:91:13:89:4b:9d:
a1:9c:02:9a:6a:33:f8:23:42:c9:42:5c:ed:d9:3e:
6e:12:2e:e0:77:70:ae:24:59:65:9d:b3:1a:16:cd:
67:18:76:93:9b:ee:e3:0f:a4:9c:59:0a:de:97:f6:
ad:67:77:2a:bc:dd:3c:44:bb:8e:67:3f:91:44:41:
84:86:e0:41:ef:e6:49:55:74:0f:f7:a4:8e:b7:30:
62:a3:76:df:da:c2:48:19:de:2e:13:01:16:d0:74:
92:00:8a:ee:53:08:c2:8a:3e:c2:b2:72:4a:62:b5:
fb:a2:a9:bb:a7:68:46:67:ce:96:cb:d6:c1:ce:65:
8b:c1:ce:f9:4b:12:65:26:7c:8d:1f:fc:b6:d7:6b:
e5:3b:79:68:a1:53:89:10:e0:5f:87:74:fe:7c:94:
7b:d1:e1:54:c6:49:84:1c:88:75:c4:da:cc:7a:1c:
41:49:2e:9e:ea:12:8b:8f:5d:71:3c:5a:1d:2f:01:
31:bc:9f:01:87:66:49:4e:3f:73:70:10:e1:09:43:
f0:f9:ce:2c:0f:cc:e3:0a:7d:69:31:6b:de:b6:92:
9d:e3:49:b2:53:f0:3c:8d:c6:b6:86:90:3c:d0:4f:
b8:a2:5d:13:e1:31:d9:8e:b1:2e:53:51:02:e7:b7:
cc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:B4:F1:63:F1:04:EE:7C:1F:DC:31:92:5B:17:2C:25:03:70:B2
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b4:2e:6c:b8:57:2b:a6:e4:2f:7d:13:de:b4:65:7a:9e:16:
c9:fd:0d:7c:e4:18:75:90:3e:94:58:50:f9:3d:33:79:b8:b9:
1c:59:e1:84:04:b6:42:29:f0:4c:74:e4:a4:60:04:8a:d1:6e:
30:d9:67:fb:cd:48:97:f7:ce:62:12:7e:03:69:3f:c1:04:fb:
6f:a8:35:d3:b6:98:c3:48:89:26:fa:d2:21:8e:54:73:88:2c:
c3:4e:8f:ca:02:84:4c:1a:71:a1:f0:7d:d6:08:53:93:ef:eb:
34:56:01:d1:b8:6e:ac:40:81:00:d4:e5:70:f3:7e:9a:17:42:
d6:05:13:e4:ca:df:40:04:a2:56:41:d9:5f:b3:0f:e1:d7:cc:
86:30:ff:0d:0a:52:ee:82:cc:29:4f:86:ce:71:5a:e6:15:96:
3d:e7:d7:25:02:2b:b7:8c:88:55:f4:77:b7:18:82:2b:ef:c7:
d4:8c:35:74:12:57:75:99:a2:9c:03:0e:e3:c3:cd:1f:c8:aa:
ae:25:da:31:c0:88:c0:d3:bf:24:a3:de:39:8a:cb:89:2c:8a:
ec:62:f6:dd:c1:5c:3e:35:3b:8e:72:53:e4:b1:aa:43:50:cd:
80:57:a1:84:07:a1:a3:ba:f2:5b:fd:54:69:fb:30:32:df:49:
53:7c:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:01:15 2026 by rpki-client