Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: X+lNDNc0C5LnTcnJj1bRxZHUjyAuSMxHkR5SgZkTDvw=
Subject key identifier: 27:50:8E:55:83:5B:BA:F3:77:30:9D:33:03:E9:14:5F:4F:CE:65:84
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019EC06D2DABA7C8E444AF07F3F974127F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 0172
Signing time: Sat 13 Jun 2026 10:00:41 +0000
Manifest this update: Sat 13 Jun 2026 10:00:41 +0000
Manifest next update: Sun 14 Jun 2026 10:00:41 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: kZhXhJFN6wdgNXKv4htRGuY1ZNEqHu7MhuqS81QEm2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:2d:ab:a7:c8:e4:44:af:07:f3:f9:74:12:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Jun 13 10:00:41 2026 GMT
Not After : Jun 14 10:00:41 2026 GMT
Subject: CN=27508e55835bbaf377309d3303e9145f4fce6584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:d5:20:78:81:45:c4:8c:1c:0f:85:a0:3e:
f4:83:7c:74:96:f7:0a:90:33:51:70:9e:ab:bd:ce:
5d:a1:89:06:8d:8d:1a:14:36:f2:fa:8b:c3:2f:7e:
f2:ea:39:d6:78:ce:80:65:18:ff:4e:07:f1:76:21:
60:ad:53:b5:64:51:d8:44:87:70:4b:46:33:69:1b:
49:a4:e8:8c:0f:ef:5d:03:35:29:ce:ff:1e:8f:a6:
c6:e2:aa:e9:2e:54:01:c8:74:16:31:93:77:07:77:
69:53:54:2a:a2:d9:b2:52:1f:64:99:ca:3e:14:e1:
45:0d:ee:76:78:8f:11:05:2a:22:d3:94:fc:0d:c5:
d2:69:9c:47:22:aa:c9:e4:f9:7b:97:5f:aa:7c:06:
7a:82:d1:ad:1c:ae:9e:c8:d7:67:91:a3:59:22:16:
49:77:25:06:69:c8:81:85:d6:46:e1:ed:9d:fa:c4:
02:c2:a5:5d:2a:46:2a:13:60:d3:09:20:b9:80:2e:
be:b7:21:56:8b:3d:9a:da:0e:99:fc:e8:7f:52:ee:
df:86:a5:84:27:0b:07:9b:13:47:27:01:22:d0:1f:
ee:41:e8:ef:5c:7a:97:d3:5f:a3:c8:7f:02:7b:bf:
b5:32:b1:ef:5f:ba:d0:a9:42:6b:c4:3a:8a:da:e5:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:50:8E:55:83:5B:BA:F3:77:30:9D:33:03:E9:14:5F:4F:CE:65:84
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6c:01:0f:45:20:dc:74:b2:8d:d6:89:ff:11:53:4b:e5:45:
15:b3:a4:6f:18:7f:53:92:35:19:09:96:f1:40:8b:ac:4a:6c:
6e:18:d8:c6:50:0b:e5:e1:e3:b9:df:14:23:ac:97:06:cc:30:
24:7e:f4:3b:3b:bb:ae:cb:26:65:ea:90:72:b2:7d:e1:84:bf:
8e:9f:90:01:a1:62:36:74:f5:be:ab:92:98:82:87:ea:ea:2e:
0a:ca:ff:5b:13:d7:9f:a0:c4:c9:92:a9:0e:a6:ba:70:d7:55:
c8:b3:de:57:6c:58:df:85:f4:2e:5d:39:95:69:fc:36:4b:fc:
54:33:14:26:37:5d:af:e6:3d:87:61:49:67:a8:36:49:7c:ee:
78:92:eb:76:b9:6c:86:dd:86:0a:c6:13:7b:28:5d:68:65:ac:
40:67:b9:0c:2c:0a:1f:7b:bb:be:23:6b:c3:76:95:ee:14:cb:
d1:7f:15:90:58:31:c1:d1:94:5c:54:c7:1b:51:5d:aa:6a:a5:
c1:9b:2b:c7:f6:f1:39:89:cd:e8:c4:6d:55:89:27:0e:50:89:
52:ee:6d:c3:94:a2:b2:bc:c9:f5:73:a4:83:a7:15:c4:f9:e5:
60:b3:24:ff:7c:35:ea:c4:38:6c:16:c5:a7:eb:7e:4a:7b:75:
7a:80:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:35 2026 by rpki-client