Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
File: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft (raw, json)
Hash identifier: lTrCCPhLBC2JBAYE+9buuBQl46koDSybJRmVKM4PJbk=
Subject key identifier: 20:FD:8E:D6:7A:AF:5E:02:F7:0A:EA:5F:D1:9E:3E:F7:29:1F:DD:87
Authority key identifier: D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
Certificate issuer: /CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Certificate serial: 019FAA197A5DB3AE2E6D5E5EF6840333BD68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 19:00:24 +0000
Manifest this update: Tue 28 Jul 2026 19:00:24 +0000
Manifest next update: Wed 29 Jul 2026 19:00:24 +0000
Files and hashes: 1: 2TqgHYOgfsJXr5AHbOt7Withl0Y.roa (hash: JWTP6ZFvwS7du+ja3Z9xJskq88DbPSQc49cLLypWIKw=)
2: 2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl (hash: 2lo8ZcT5+zWNzRP8tQWTvKJzoigxUQuQovPWHmzNcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:7a:5d:b3:ae:2e:6d:5e:5e:f6:84:03:33:bd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96a58df9aa47ccd21021eb2c6bf06b3b4590c08
Validity
Not Before: Jul 28 19:00:24 2026 GMT
Not After : Jul 29 19:00:24 2026 GMT
Subject: CN=20fd8ed67aaf5e02f70aea5fd19e3ef7291fdd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:60:24:57:af:9f:16:01:2b:ec:a2:ea:27:
62:8e:3c:d7:f0:79:98:3f:f8:0c:37:06:44:3f:06:
a3:67:0d:4d:66:31:9f:31:4d:be:9f:e1:90:e0:99:
f7:a0:b3:31:fa:2a:28:f0:98:6f:9a:58:37:9c:4f:
f0:97:f2:f5:48:ad:79:a3:83:cf:a1:cd:f2:37:d7:
2c:b6:e1:a4:33:8d:8a:9b:09:52:99:e8:43:0b:15:
0a:75:e0:a3:ba:8a:58:fc:5a:98:cf:72:15:d8:1c:
6b:5c:60:5c:d8:fb:77:67:c6:2e:db:68:28:0f:77:
01:2d:c6:c2:b1:3b:01:1d:5b:43:ef:8d:fe:e5:45:
be:35:b0:7c:9a:7f:16:46:c0:eb:87:a8:54:1a:6c:
f5:35:e2:83:14:35:91:a5:cf:04:78:9b:10:3f:f9:
af:8b:e9:6f:1b:2b:1a:33:91:74:1c:a0:da:3c:8b:
e8:0c:11:bb:58:86:5a:57:b6:7f:c2:84:33:2e:21:
64:56:1b:e3:82:05:a1:53:55:b0:12:94:76:ad:ae:
6d:98:af:1c:e0:16:5c:2f:f2:17:bf:ce:83:12:88:
75:e4:c0:c8:df:5b:3c:75:90:ba:52:d5:2d:cd:f8:
f0:78:ff:62:b8:14:ca:d8:34:47:ab:29:73:96:c0:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:8E:D6:7A:AF:5E:02:F7:0A:EA:5F:D1:9E:3E:F7:29:1F:DD:87
X509v3 Authority Key Identifier:
keyid:D9:6A:58:DF:9A:A4:7C:CD:21:02:1E:B2:C6:BF:06:B3:B4:59:0C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WpY35qkfM0hAh6yxr8Gs7RZDAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bdede8-735d-4a05-838c-2d49c9bc982d/1/2WpY35qkfM0hAh6yxr8Gs7RZDAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:61:44:1b:21:40:d1:1b:1a:55:75:5b:6b:5f:e1:9c:d1:b4:
c4:d7:18:84:32:7b:13:03:3a:da:c7:ea:ae:e0:be:35:57:91:
21:ce:b8:a8:c8:50:5c:cd:63:92:47:76:28:f4:83:f0:ef:db:
bf:f7:c4:c3:88:43:68:a7:ff:3b:06:20:89:9c:59:ce:45:98:
5e:b5:b6:c2:41:0a:8e:48:b5:e2:20:6c:33:7c:8f:9c:9c:8a:
07:57:d4:60:91:a8:8f:2c:ef:c8:1a:e1:50:d2:a7:85:6a:a4:
39:3a:0d:d6:18:e1:f7:60:c8:b5:77:f9:7e:51:23:6c:4e:f7:
f0:d0:97:02:2f:7c:86:fb:f2:0a:2e:94:d1:86:77:65:69:e6:
5e:6c:4f:7a:73:39:92:8e:02:fa:a7:cb:21:55:06:47:e6:00:
74:81:5c:3a:43:7d:2c:e9:e1:8e:d0:9e:08:0e:4b:f3:e1:97:
5e:3a:c2:f9:32:77:45:9e:b9:8f:b5:1e:1b:c6:08:2a:d7:d1:
eb:6a:16:ca:ee:ad:06:c0:ab:0f:49:f7:9e:ce:38:ca:95:40:
38:b7:78:8c:4d:ad:8f:1f:b1:9c:d5:a6:02:b3:33:dc:09:ee:
20:c5:b4:e9:a5:86:a1:86:ac:c6:ee:88:dd:ba:55:4c:ea:34:
e7:90:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:26 2026 by rpki-client