Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: SGnfDcWSTNpND848vfoCSoeZ2RtH2ZTXsT/Bo3As0Ic=
Subject key identifier: 6F:36:8A:E7:EA:39:7E:DF:25:AF:50:4B:60:66:BA:D7:E9:2D:9E:F1
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019D99D0EDDBBC17FDE650C6555BA7031145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 13B3
Signing time: Fri 17 Apr 2026 05:01:39 +0000
Manifest this update: Fri 17 Apr 2026 05:01:39 +0000
Manifest next update: Sat 18 Apr 2026 05:01:39 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: l8WUwunj15odQe14Yc0kh6yk8fqa7RfRSaJxpEzOGpQ=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:ed:db:bc:17:fd:e6:50:c6:55:5b:a7:03:11:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Apr 17 05:01:39 2026 GMT
Not After : Apr 18 05:01:39 2026 GMT
Subject: CN=6f368ae7ea397edf25af504b6066bad7e92d9ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:22:eb:c0:ef:cb:d3:33:09:1c:eb:7b:c6:
e2:a6:be:59:40:1c:6b:f0:db:7e:4a:c7:ae:1d:60:
6a:05:a3:d9:48:8e:ce:ec:dd:aa:eb:fa:8f:b2:c7:
dc:bc:f1:01:ce:43:27:4a:9a:24:42:b7:f6:3e:54:
3b:a8:ab:48:9c:de:eb:8f:a6:08:71:8b:1a:32:89:
ce:eb:c2:d8:7c:ad:9f:e5:88:d2:c2:d4:a8:bb:ce:
9d:0b:6e:b2:91:64:f4:8d:02:35:16:38:20:de:0d:
47:c0:37:43:e9:f5:61:34:88:fe:4a:16:19:f0:3b:
cd:a3:3c:b0:da:f7:a2:cb:85:a7:13:c5:92:57:60:
b2:b8:3c:fa:39:64:7a:7e:c0:26:52:55:7c:8c:e2:
b6:9e:52:3d:d7:f8:c2:d4:03:36:7e:01:fb:44:03:
88:c4:bc:b7:00:96:a0:ae:3f:0e:b1:3a:a5:a7:6e:
d5:ae:9e:9b:e3:17:e8:70:ee:e9:9b:6d:1a:9c:ae:
69:48:1e:d7:78:6b:7d:d3:c3:5c:cd:21:67:b5:1e:
1b:9e:4d:6d:39:23:76:f3:e6:c1:93:97:5f:ad:eb:
9d:a8:35:2b:79:fb:1c:06:a6:b1:77:ef:5f:a2:57:
4b:ea:34:5f:27:5a:89:8c:c2:96:32:30:9f:62:50:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:36:8A:E7:EA:39:7E:DF:25:AF:50:4B:60:66:BA:D7:E9:2D:9E:F1
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:5b:d6:f1:16:61:19:f1:2c:4a:15:a6:8e:85:0e:6e:97:
b6:3d:68:13:53:2e:8d:50:bf:57:33:e0:ee:0e:9b:81:a0:cf:
bc:84:17:ec:a4:65:db:c9:85:c1:38:c2:04:88:36:08:1a:c7:
3c:e2:3c:fb:20:a2:bd:9f:f3:c2:59:b0:54:f4:80:27:c5:dc:
19:d6:15:79:5b:89:a4:b7:e1:61:94:41:ce:07:8b:fa:60:06:
c3:bf:a4:6c:77:46:5d:f9:ff:b7:33:a8:63:ba:94:98:5c:02:
5b:7d:70:4b:e4:5b:f6:0b:32:4d:b2:24:cc:01:bc:6a:00:a6:
58:5f:c6:47:e5:47:3f:d6:0f:e5:78:9a:ae:86:00:19:35:1c:
f6:72:9d:c3:9b:ce:16:8c:e1:f4:75:33:84:9c:2a:56:98:b2:
b4:70:ed:e2:54:57:10:d0:bd:50:87:9e:b3:cd:26:f7:b1:ff:
f2:11:6c:79:39:11:d2:35:61:20:e6:ac:b9:da:f7:6a:81:91:
e1:c1:e8:83:af:50:53:84:62:9a:b3:b9:25:c9:10:e5:6b:93:
d9:97:61:85:69:b8:0c:6c:95:a5:7e:c8:97:30:bc:dd:fd:c5:
58:65:b9:07:5b:84:e8:ed:55:b3:33:e2:4a:0a:d7:b6:d9:9d:
f2:2a:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:04 2026 by rpki-client