Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: 3e4s5nQOhVW/XCydcMKWNJ9pJtgsw2nhlUssuiF4C9Q=
Subject key identifier: 07:CF:66:36:30:22:3C:EB:CE:B3:16:03:9E:4B:7B:CD:0C:73:68:52
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019CAB6B2F9103D4400833E8AEA656260C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 22:00:54 +0000
Manifest this update: Sun 01 Mar 2026 22:00:54 +0000
Manifest next update: Mon 02 Mar 2026 22:00:54 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: +2m7cVaRW2PpHyHBoRuA9FcebXAEOBoTojzZTj5sCcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:2f:91:03:d4:40:08:33:e8:ae:a6:56:26:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Mar 1 22:00:54 2026 GMT
Not After : Mar 2 22:00:54 2026 GMT
Subject: CN=07cf663630223cebceb316039e4b7bcd0c736852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:4e:56:c4:e2:c8:9d:0f:d4:c6:56:ff:72:
e1:7f:0c:5d:91:7a:6e:42:f7:ec:20:34:dc:96:fe:
29:82:bc:2e:75:e2:cb:07:0b:9a:30:e7:57:be:a9:
78:f1:e4:a9:90:5c:97:9b:57:5f:2e:04:48:eb:87:
7a:99:06:a1:d6:62:eb:87:67:84:b9:43:8f:4b:29:
ff:70:1e:e4:b1:ef:59:1a:f6:e2:9b:ac:82:63:f5:
8b:23:bf:e5:cf:ec:9d:43:7d:5d:fe:35:ba:7a:dd:
f8:84:a3:5e:ee:52:06:b4:d6:e9:0e:5d:0c:53:c5:
d5:0f:a7:5c:04:83:3d:4e:10:35:fa:d8:b6:e9:24:
47:78:ec:95:e9:51:ee:b8:5a:a9:74:ce:da:3d:93:
2f:1a:63:91:00:79:09:06:0e:77:80:01:4e:40:00:
52:31:23:3f:5b:18:9e:aa:c0:08:71:4d:40:95:e9:
5a:c2:00:86:cc:ec:59:c3:a1:12:8e:52:ef:3d:e2:
16:01:f6:21:4c:94:02:f3:dd:81:1a:ef:d4:d0:88:
25:48:9e:73:86:5d:b2:85:6c:10:f9:a2:90:e7:ea:
1e:13:bc:68:21:2e:c6:35:33:8b:2f:f7:48:34:85:
7c:f3:94:58:9f:c0:0e:13:00:aa:05:f6:f5:9f:fd:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:66:36:30:22:3C:EB:CE:B3:16:03:9E:4B:7B:CD:0C:73:68:52
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2a:99:93:e6:9e:2b:79:a9:c5:fd:47:89:e7:c5:50:18:c1:
6a:7b:95:b1:d6:3f:fe:16:a2:0d:13:ad:ff:18:4e:54:b0:22:
98:a2:8c:63:df:7c:78:4c:85:89:dd:08:7d:0c:9e:bd:30:cd:
ca:be:72:d9:7c:3c:d9:ab:2a:68:8b:18:82:86:20:73:8d:33:
ae:6a:b9:ba:7e:d2:02:f9:00:32:c0:9f:fe:29:53:bb:5c:82:
2b:de:52:55:fb:33:9d:7b:0e:f7:6b:d1:92:d6:cb:d6:53:23:
bb:f0:35:57:36:69:e8:86:f1:67:42:a3:f6:21:79:48:3c:c2:
b2:e7:f7:b5:98:a9:2b:63:75:3d:b9:90:b3:fc:6f:12:7a:0b:
be:4d:13:ec:cc:db:32:df:e8:65:b4:f8:5e:14:8a:d6:71:61:
12:77:c4:b0:5c:9c:7c:53:10:59:0b:3a:01:75:99:05:41:74:
89:f3:0e:9e:c9:9e:f2:0b:48:0e:6b:a3:b4:9e:4b:0d:00:fe:
3b:e2:75:6c:54:bb:f0:e9:9c:c2:46:85:b1:f8:d1:f5:36:e4:
47:45:9c:fb:fc:21:f6:2f:4e:3a:7d:b4:a2:5d:ee:f7:2d:ed:
bf:a1:3b:04:e8:29:ad:b6:d2:36:88:56:14:67:f6:61:e2:6a:
87:29:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:09:39 2026 by rpki-client