Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: PWl5LyBe6nviXcscTa8lUo6QDJ7gyI1ybCTOujxrgLk=
Subject key identifier: 86:C4:0C:1E:C4:02:8C:05:11:62:B9:DE:A1:8B:38:98:71:C6:D7:DC
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019FA907C40BB2B026E551173F827D634062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 14C4
Signing time: Tue 28 Jul 2026 14:01:26 +0000
Manifest this update: Tue 28 Jul 2026 14:01:26 +0000
Manifest next update: Wed 29 Jul 2026 14:01:26 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: bw0jihWTORjIrAlFd3DpS1t/SjxAgwO6LuAjvI1X/ow=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:c4:0b:b2:b0:26:e5:51:17:3f:82:7d:63:40:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jul 28 14:01:26 2026 GMT
Not After : Jul 29 14:01:26 2026 GMT
Subject: CN=86c40c1ec4028c051162b9dea18b389871c6d7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:bc:70:7a:06:29:c4:98:95:f3:c2:f2:b0:
18:c9:95:69:88:73:82:39:52:b9:99:04:be:02:ee:
f7:0d:6b:c4:cb:ec:79:4c:29:a8:a2:9a:47:b4:3d:
02:6f:db:fa:1d:49:33:0c:d7:07:a8:96:73:a9:9b:
1f:ca:4c:87:4b:f0:c1:37:fb:0e:13:44:50:58:0f:
38:a0:9f:d0:f6:5f:36:33:4c:cd:bb:84:c7:36:e9:
59:dc:06:92:e7:69:26:e0:87:a9:e2:01:a1:84:ab:
3e:34:fe:80:80:a7:21:26:06:b5:1f:1b:69:8f:b1:
61:79:2d:f0:e9:d3:db:89:f4:48:71:74:39:08:5a:
d3:36:01:ad:a8:a2:9d:a7:0f:31:84:e5:e8:4a:a8:
0c:19:fa:84:ac:52:07:53:f5:37:07:e4:d0:03:d6:
d4:50:f1:9d:65:2f:4e:7c:c5:aa:8a:df:1c:f7:57:
dc:dd:47:e5:5e:69:04:b4:8b:67:4f:5e:c8:c1:0f:
c0:f4:14:28:83:bd:d5:b4:b1:c3:4b:41:3e:67:d3:
00:1b:53:d7:29:6d:c2:e6:cc:48:c4:11:cb:d0:ae:
a9:ec:49:65:8a:6f:7b:5f:ff:9d:1a:3f:f9:46:b0:
42:3f:4b:b1:1c:13:df:1c:cd:57:a9:47:d2:f0:9e:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C4:0C:1E:C4:02:8C:05:11:62:B9:DE:A1:8B:38:98:71:C6:D7:DC
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bf:9d:7a:b2:4d:b1:0f:2d:d8:48:db:fc:29:45:7d:19:22:
05:f7:8a:d4:79:06:06:b0:b3:42:c9:21:ce:9d:cb:f8:e7:17:
17:e7:23:17:89:c5:59:5c:12:da:60:e5:3e:0d:b2:b0:37:1f:
3e:b9:ef:13:bd:2a:cf:1f:03:a9:dc:69:fd:4a:0b:f5:e7:db:
d1:cc:4a:c7:04:59:de:3b:0c:37:b9:e6:62:1f:0c:e0:13:8f:
8f:e7:d9:d4:6a:7b:54:79:53:9c:66:ef:4f:63:89:35:9d:70:
08:30:37:5a:e2:f1:65:04:24:cd:c6:bd:91:46:c1:4c:38:74:
a9:d9:23:6a:9d:b4:e6:78:f6:b9:a3:e9:1a:47:2a:44:57:1b:
09:8e:f3:02:cb:6b:1c:1d:72:4a:83:bf:62:b7:dd:d8:b2:17:
6e:6b:e4:75:6d:2d:73:a7:9b:06:a7:82:1a:47:ae:2a:a9:63:
52:05:13:8f:fa:31:a4:f1:d2:f0:ae:7d:e0:d6:fd:66:e7:c2:
4b:04:ef:e0:d8:c7:c1:18:bc:db:91:d8:0f:31:96:9d:33:00:
92:5d:2a:23:4e:7a:84:3f:62:eb:5e:c2:c4:a4:e5:6c:2b:af:
52:69:1f:3b:b5:a1:2c:07:8a:ce:ca:23:20:e4:32:8e:44:59:
db:84:1d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:49 2026 by rpki-client