Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: 3aElv7h+5Jv8nGIyYks9U7+pRUwqMBAUTwUySTckxoc=
Subject key identifier: 77:3D:B6:79:28:CD:1E:D3:A0:0B:2F:61:76:32:A2:48:99:6F:68:AB
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 019D9B51785B0599744A02CFE337DC5DC6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 12:01:40 +0000
Manifest this update: Fri 17 Apr 2026 12:01:40 +0000
Manifest next update: Sat 18 Apr 2026 12:01:40 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: K9ENAq8geT7cEvoXH4NxO+rTve/m5xGxYJdT3eSHvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:78:5b:05:99:74:4a:02:cf:e3:37:dc:5d:c6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Apr 17 12:01:40 2026 GMT
Not After : Apr 18 12:01:40 2026 GMT
Subject: CN=773db67928cd1ed3a00b2f617632a248996f68ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:d0:1d:a6:34:07:20:46:00:de:08:a3:30:
b2:38:5c:82:1e:7b:e2:b9:22:ed:47:34:2d:3f:51:
9a:dc:46:ca:c1:3b:45:19:d1:7f:29:e6:49:e9:93:
03:c5:ad:b5:9c:b1:bb:4e:d5:70:69:14:64:b8:87:
51:c4:e9:3c:c7:ec:d2:92:3b:68:2f:26:4e:59:75:
ee:ff:54:02:42:f4:a9:b8:b9:5b:2f:32:84:27:70:
5c:f8:f6:5b:24:d7:04:23:dc:7f:0b:68:e3:6f:1a:
6f:b7:71:84:46:ce:af:26:9d:4f:f1:f3:86:d6:0f:
9a:ba:82:c5:7a:5b:58:df:43:72:d9:b0:e7:31:18:
5b:c6:68:99:d0:3e:77:9b:59:af:f5:ec:1b:83:27:
00:57:f5:6b:0e:df:60:31:0e:57:77:9d:43:e7:a9:
c0:b2:5b:5f:81:ab:fd:8e:ab:70:87:82:de:88:d4:
95:43:57:c7:fa:6d:e4:65:e8:77:30:89:11:9d:01:
d9:28:e6:8b:e8:b9:8a:26:e8:d6:8c:2f:a1:a9:42:
7b:af:ab:e5:bf:e1:04:3b:4a:b4:4d:d2:eb:fd:99:
6f:be:43:ae:22:fb:e0:a7:51:ed:c6:a4:e2:cf:e1:
f3:d1:df:fc:d7:c4:d6:c0:e7:83:7f:0c:7a:cd:93:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:B6:79:28:CD:1E:D3:A0:0B:2F:61:76:32:A2:48:99:6F:68:AB
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:16:b6:2f:46:92:82:17:9e:1b:21:12:2d:14:77:2f:2f:ff:
43:bf:7f:34:31:a5:53:f3:57:b3:e3:f2:10:d9:93:c4:ef:be:
a8:43:71:df:35:9c:48:22:f0:18:3d:a5:60:6d:43:79:0d:25:
ed:98:91:2a:53:bd:43:c2:46:da:28:82:37:5e:cc:2e:49:6c:
70:44:b4:91:53:e4:75:b8:0a:f1:89:4c:5a:8d:05:fe:c9:88:
7e:95:57:fc:f9:00:20:07:8d:e8:11:74:1b:f3:c0:4c:81:76:
14:47:f0:14:8b:f5:3a:12:78:77:aa:8f:1d:6e:69:89:92:77:
91:d6:b3:14:05:92:e3:f3:3c:5e:7b:0f:b9:e4:ef:6e:8a:31:
b0:81:cd:49:2d:f0:4c:8b:c3:96:eb:0e:ff:22:ed:e2:7d:8f:
eb:ca:e0:f6:aa:e9:ce:8f:8b:5a:66:3c:f9:ae:8e:81:f9:1d:
ae:e1:7b:0c:6f:ff:bf:04:cf:48:62:2d:27:f4:18:78:1d:bc:
44:3a:d7:ba:da:f7:8e:0c:16:a6:33:df:c8:ab:8b:4b:79:a6:
3b:01:43:d9:3f:93:66:60:7d:9c:47:60:d2:ab:eb:68:fd:f1:
d0:b4:b3:20:32:03:a1:71:17:54:bc:ab:e8:81:28:58:8b:86:
7d:75:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:13 2026 by rpki-client