
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: 53nUUZDZNeoVyYyTN9MbZkN2bI5lHPpKFerAvOoPOAw=
Subject key identifier: 78:10:47:60:26:A2:A0:3F:91:50:40:23:9A:58:95:A6:C1:B9:2A:D4
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019DA48A815E358FEB4A87C001E667C9B0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 07:00:33 +0000
Manifest this update: Sun 19 Apr 2026 07:00:33 +0000
Manifest next update: Mon 20 Apr 2026 07:00:33 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: EtGDA9r9cUdXWSFVBSk0zm1Uf4BWHtHgEUcK7mbvn0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:81:5e:35:8f:eb:4a:87:c0:01:e6:67:c9:b0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Apr 19 07:00:33 2026 GMT
Not After : Apr 20 07:00:33 2026 GMT
Subject: CN=7810476026a2a03f915040239a5895a6c1b92ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:09:fc:77:f4:a8:1b:26:b5:fb:ca:b4:62:
ee:21:89:1a:0c:19:7d:02:74:d6:f7:22:55:88:11:
2d:ba:64:79:e1:94:6b:17:42:37:43:60:c8:53:92:
4d:52:6c:75:b0:69:00:d9:5c:eb:7c:83:ed:02:39:
42:ae:9e:68:97:03:bf:48:4e:03:a6:3f:e9:0e:0a:
5b:87:26:8d:c8:b8:fa:ef:11:fe:da:bf:22:c2:b2:
24:21:62:54:95:ee:94:db:94:c4:e5:a1:cd:c3:53:
f5:ff:43:91:ef:06:90:3e:d5:0d:2b:52:57:e4:dd:
a3:14:ea:62:4d:30:d2:9c:50:fa:49:9f:d2:90:89:
e4:a9:a7:f2:3f:63:67:fb:4b:d0:33:24:7f:33:67:
26:11:b0:50:24:77:cb:2e:f3:c4:0d:b2:1f:47:4b:
cf:ee:09:0f:30:ef:91:53:36:74:e9:d5:f8:4e:01:
9c:6c:1b:5b:bd:4b:31:71:5c:69:f7:63:7e:1c:e8:
48:95:6a:41:11:ee:3d:11:55:b5:6c:3d:7b:15:11:
65:0f:21:d8:3d:30:66:f0:70:10:08:f7:e6:5c:e9:
89:17:3b:f1:7e:69:df:af:63:d6:87:03:ec:b4:c1:
fe:06:4a:cd:1d:a5:7a:7c:80:ff:d5:2c:fa:2e:5b:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:10:47:60:26:A2:A0:3F:91:50:40:23:9A:58:95:A6:C1:B9:2A:D4
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6c:d1:21:81:bc:80:13:98:20:3b:8b:ee:1c:3b:2f:86:c1:
80:3c:69:fe:f0:73:56:24:06:82:49:d0:53:e7:34:77:20:61:
00:44:f9:57:d9:d9:94:1c:00:6b:8a:1c:fa:0c:25:22:18:c7:
f4:ad:e2:72:04:bb:37:e7:6d:d1:6f:ca:eb:32:65:15:1d:08:
ed:62:4a:d6:d4:a0:b9:f6:8d:12:23:32:4d:6a:b2:43:b6:db:
07:71:68:bc:1b:64:b5:c8:60:d2:1a:d7:1e:f6:b9:ad:de:f9:
89:83:21:36:12:ad:80:7c:9d:07:08:99:64:bc:4a:82:02:06:
ed:44:29:87:6c:ec:fa:2b:2a:24:f6:4e:b6:f1:dd:cd:3c:a9:
dc:f0:c2:46:57:2e:8e:44:4e:79:b0:c0:51:e0:14:eb:9e:3d:
52:f9:cb:bc:8c:df:dc:36:74:37:c3:90:08:42:46:77:20:f6:
b3:d0:c3:ca:2b:ed:da:3b:5c:be:2e:43:99:4e:6e:46:bc:26:
9c:d6:42:8d:48:a7:9f:77:99:04:53:c3:8d:91:ea:16:ed:e1:
af:f5:cf:95:63:df:f0:1f:f6:22:8b:b4:48:1c:ff:c6:a4:75:
76:6e:1c:ff:6e:5b:06:6c:a0:b0:9a:66:53:f2:c1:91:38:bc:
fd:f4:b4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:19 2026 by rpki-client