Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: jAYmgCdEE8Ifz2x+sl0aBWyIa0yrGJqdbjRGQRjnqQ8=
Subject key identifier: 4E:9E:45:40:14:21:8C:B4:4E:7E:E9:7E:3D:F6:87:A7:E2:3E:A5:87
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019FAC7634B1E2292F2BF43AABC322DCFC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 18AE
Signing time: Wed 29 Jul 2026 06:00:55 +0000
Manifest this update: Wed 29 Jul 2026 06:00:55 +0000
Manifest next update: Thu 30 Jul 2026 06:00:55 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: PrTOpmJO2T60zMH2p2e3S9V/I3+tn0Mst6fwrp+UJsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:34:b1:e2:29:2f:2b:f4:3a:ab:c3:22:dc:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jul 29 06:00:55 2026 GMT
Not After : Jul 30 06:00:55 2026 GMT
Subject: CN=4e9e454014218cb44e7ee97e3df687a7e23ea587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:09:22:82:5d:ce:40:95:53:2c:8d:52:a2:00:
27:ca:a1:3d:b3:bb:c2:db:d3:39:c7:b6:43:34:6b:
1f:a7:76:7c:b1:e3:20:3b:62:b5:eb:ab:23:61:92:
8f:3d:58:9d:47:19:b5:2e:fe:a6:64:a7:2a:3f:81:
1e:09:50:1a:c2:36:d8:8d:74:d4:c2:5d:47:fd:78:
c0:64:9a:4c:18:3b:f2:da:35:67:c8:1c:64:63:b1:
50:70:e4:93:cb:a7:20:0b:bb:e5:0c:5a:8d:c8:bc:
4b:ed:9d:2e:c9:09:20:92:6b:51:93:0c:90:e2:81:
ef:45:dc:18:6c:70:aa:b9:49:5a:09:c6:b3:30:87:
87:bf:59:d8:77:1c:d8:5f:a0:ba:8a:df:9c:d9:4c:
32:11:f8:e2:ee:00:c1:46:c9:c4:f7:7b:ed:50:df:
bf:1b:8e:bf:d9:37:84:0e:f7:3a:bf:4c:5c:bc:97:
61:3a:e0:d2:7e:2f:07:d0:14:a5:a9:7f:1c:2d:2b:
5f:56:07:9a:dd:90:2f:a3:46:3f:03:f3:29:32:30:
38:46:f2:f7:74:3e:25:8c:71:87:01:42:d1:1a:79:
6c:12:fc:f2:ca:3b:e4:ce:75:da:54:3d:fd:5f:af:
4d:be:1a:49:71:e3:61:11:73:12:48:ec:d4:b9:81:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:45:40:14:21:8C:B4:4E:7E:E9:7E:3D:F6:87:A7:E2:3E:A5:87
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c0:77:34:7c:fc:74:ad:f5:0a:43:a0:56:f7:1a:96:9b:83:
2d:ba:52:ea:ef:c7:6d:b3:1e:45:5c:a8:92:1c:ce:c3:de:f6:
f4:b2:be:31:36:5a:f4:03:67:e8:75:b1:7d:65:e5:69:10:b6:
37:3a:30:5d:ce:a1:24:ff:45:d8:01:d0:e8:34:be:ea:08:1b:
16:74:52:c2:44:53:48:40:6a:56:05:b5:06:78:47:ad:f6:2a:
26:03:8b:1c:df:ce:ce:5c:24:6f:70:f0:7f:f8:7b:f1:26:93:
1c:0b:22:25:0c:42:c0:3e:f3:76:a0:69:f2:b7:6d:05:18:c5:
8a:d1:0f:e1:db:e4:fe:f7:3f:1d:c4:99:be:7f:d5:db:69:d7:
01:87:de:4e:aa:78:fb:2c:e8:9e:ba:a2:fa:34:de:f0:7c:73:
8d:17:bd:e7:5f:9d:88:f6:98:bf:8f:8b:10:b1:6d:5c:cf:a5:
bc:b2:1c:b8:7e:4b:1a:16:77:53:3f:b8:d2:e0:ca:7a:02:fc:
b5:3a:52:14:8f:18:a2:62:84:78:96:9e:8c:fa:ae:6d:2f:ff:
64:e4:5e:cd:07:60:db:cd:a4:90:1b:cb:78:73:ee:d3:63:18:
50:2b:01:4a:05:03:e1:64:e7:02:6c:ce:e5:0a:58:3a:30:ee:
09:0d:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:23:36 2026 by rpki-client