Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier: Cc3n4DmK21XSbEEFcvnsMDC83ymzWrVrD+Nhd7AMChA=
Subject key identifier: 4E:F0:03:EB:BF:FF:46:B1:EE:CA:04:C9:3F:5D:09:BA:FB:B8:95:A4
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer: /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial: 019EBFC8F638650A0FF61D71E0216A6337BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:01:18 +0000
Manifest this update: Sat 13 Jun 2026 07:01:18 +0000
Manifest next update: Sun 14 Jun 2026 07:01:18 +0000
Files and hashes: 1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: QMbSD7KHIIiasoTUlb4mRZkkrAwXZUMY/HrPz2LFxe8=)
2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:f6:38:65:0a:0f:f6:1d:71:e0:21:6a:63:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Validity
Not Before: Jun 13 07:01:18 2026 GMT
Not After : Jun 14 07:01:18 2026 GMT
Subject: CN=4ef003ebbfff46b1eeca04c93f5d09bafbb895a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:9e:23:e4:75:9a:05:64:bb:8d:f5:7b:fe:
f5:b0:7b:8f:96:34:94:f0:65:58:54:d1:5b:bb:f7:
a1:29:a4:4f:5b:97:91:ba:8b:fd:db:51:2e:01:2d:
64:05:6f:6d:87:db:22:04:a2:b1:2e:05:00:f3:62:
1e:a2:03:b4:b0:9b:fd:a1:d2:7b:71:0e:49:56:c7:
b7:d6:c3:12:1a:1b:5f:45:24:9c:38:a0:65:77:91:
2e:68:c0:e0:4b:58:3c:4e:6a:26:ec:ee:5b:18:02:
d7:ee:01:17:8a:cf:bc:3b:b5:78:fa:f7:d4:6f:9f:
63:94:27:cd:23:88:21:4c:20:7b:99:a8:25:5f:80:
34:e6:1b:9d:da:3d:24:91:28:f3:32:22:97:ad:83:
28:01:36:01:38:33:bd:eb:6c:09:9d:4d:7f:f3:35:
33:b7:c3:e7:9f:d2:8d:f0:e1:7a:37:60:29:f5:80:
43:5e:e7:58:f9:4d:dd:5a:cf:8a:11:39:90:c6:b5:
d6:35:b6:87:27:74:7b:d4:64:b6:e7:fd:35:c6:9e:
66:c4:56:1d:70:a0:95:af:cf:9e:1e:c6:ba:60:68:
27:7e:d7:42:56:66:fd:80:ed:eb:08:f0:fe:41:d1:
99:cc:09:d6:98:f7:1b:c5:b7:0f:e7:0c:71:71:37:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:03:EB:BF:FF:46:B1:EE:CA:04:C9:3F:5D:09:BA:FB:B8:95:A4
X509v3 Authority Key Identifier:
keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bf:be:f5:9c:36:20:cc:6f:8e:19:4f:7f:34:37:7f:9d:5d:
32:ab:7b:60:c0:a4:a6:39:d5:5d:7e:08:e8:e8:3a:a6:a5:8f:
09:2f:11:be:c9:35:fd:f4:25:61:4d:a8:17:5d:ce:a7:38:51:
27:8e:b3:08:cd:0b:62:58:e8:1a:e1:0c:f0:43:28:d0:6a:24:
b0:94:8c:29:24:87:50:28:6d:8e:f1:38:f1:55:b8:11:04:b6:
48:2f:0d:5c:32:f5:63:25:2a:55:d9:4f:32:86:ba:90:d6:8a:
e5:1b:bd:e7:1e:09:11:57:eb:34:ab:a4:db:07:04:89:d8:5b:
1d:ee:5b:56:cd:46:1a:1c:49:8f:d2:dc:ef:81:7c:64:21:26:
b2:a7:28:b4:52:ab:d9:dc:28:11:7e:3e:03:07:cc:7b:2d:4e:
d0:65:81:2d:15:f4:06:d6:cb:83:54:29:3c:f4:87:55:75:ea:
c1:5c:23:2d:60:7a:ed:03:e7:9c:d2:28:14:f6:b8:d0:50:8d:
4b:9b:db:3a:aa:0b:fa:a4:ae:6b:fe:9d:3a:41:5e:a6:14:c8:
09:df:df:a5:31:9b:87:83:59:5a:07:1e:14:d2:9d:c4:c7:76:
13:fc:e7:7c:bd:74:48:72:a3:b7:55:d9:4a:4f:f0:ae:51:c8:
09:a2:9a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yPY4ZQoP9h1x4CFqYze7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjYwNjEzMDcwMTE4WhcNMjYwNjE0MDcwMTE4WjAzMTEwLwYDVQQD
Eyg0ZWYwMDNlYmJmZmY0NmIxZWVjYTA0YzkzZjVkMDliYWZiYjg5NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCCeI+R1mgVku431e/71sHuPljSU
8GVYVNFbu/ehKaRPW5eRuov921EuAS1kBW9th9siBKKxLgUA82IeogO0sJv9odJ7
cQ5JVse31sMSGhtfRSScOKBld5EuaMDgS1g8Tmom7O5bGALX7gEXis+8O7V4+vfU
b59jlCfNI4ghTCB7maglX4A05hud2j0kkSjzMiKXrYMoATYBODO962wJnU1/8zUz
t8Pnn9KN8OF6N2Ap9YBDXudY+U3dWs+KETmQxrXWNbaHJ3R71GS25/01xp5mxFYd
cKCVr8+eHsa6YGgnftdCVmb9gO3rCPD+QdGZzAnWmPcbxbcP5wxxcTeNwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7wA+u//0ax7soEyT9dCbr7uJWkMB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7++9Zw2
IMxvjhlPfzQ3f51dMqt7YMCkpjnVXX4I6Og6pqWPCS8Rvsk1/fQlYU2oF13OpzhR
J46zCM0LYljoGuEM8EMo0GoksJSMKSSHUChtjvE48VW4EQS2SC8NXDL1YyUqVdlP
Moa6kNaK5Ru95x4JEVfrNKuk2wcEidhbHe5bVs1GGhxJj9Lc74F8ZCEmsqcotFKr
2dwoEX4+AwfMey1O0GWBLRX0BtbLg1QpPPSHVXXqwVwjLWB67QPnnNIoFPa40FCN
S5vbOqoL+qSua/6dOkFephTICd/fpTGbh4NZWgceFNKdxMd2E/znfL10SHKjt1XZ
Sk/wrlHICaKaOA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:46 2026 by rpki-client