Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: IrnKgi61FRaxB6eiwg7ryMqCox/GUPLaGDskG/TQHCY=
Subject key identifier: F1:7F:45:F4:85:D2:E4:48:2B:D9:A8:0D:02:7E:EA:24:6F:35:96:6A
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019CAA58ED77B74614CA77504B133963B5C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 1337
Signing time: Sun 01 Mar 2026 17:01:20 +0000
Manifest this update: Sun 01 Mar 2026 17:01:20 +0000
Manifest next update: Mon 02 Mar 2026 17:01:20 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: XXdqrOIpPvYjLU7QYCvIS65h4t8m/C9L6lb4cFTGTXQ=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ed:77:b7:46:14:ca:77:50:4b:13:39:63:b5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Mar 1 17:01:20 2026 GMT
Not After : Mar 2 17:01:20 2026 GMT
Subject: CN=f17f45f485d2e4482bd9a80d027eea246f35966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:09:a0:d6:c3:59:f8:16:49:b0:50:f5:15:d6:
4a:8a:2b:74:67:4d:0b:a5:b3:e3:05:0e:42:5b:cf:
be:02:ad:28:71:62:55:dc:85:0b:99:9e:e4:4e:e3:
93:da:92:f5:6b:31:06:6d:50:54:45:43:a2:2f:26:
d2:df:62:f7:4d:37:6c:94:e5:f6:e7:f8:1a:24:2d:
7c:8d:c0:7e:3c:6d:66:5e:a7:a4:a8:01:cd:b8:99:
bc:96:e8:c8:9e:fb:51:45:99:ab:97:d2:e0:a9:95:
55:60:78:76:84:73:47:b4:f8:09:5a:e0:6e:d0:79:
40:37:81:05:c8:b3:55:38:e5:dc:2a:7f:74:61:9c:
54:01:1b:bc:f6:0e:a1:1c:29:b3:e3:f0:9d:1e:46:
ba:48:58:e7:ab:48:b3:cb:1f:f7:52:63:86:80:58:
2c:ce:0a:c5:b8:36:a1:35:94:2f:48:a7:ce:30:9b:
1a:21:8b:59:24:ae:2e:eb:29:cc:13:0b:b0:7c:b7:
12:e3:51:8c:45:25:0f:8f:17:f5:c0:ae:28:f5:c6:
ec:c6:6f:30:5e:39:dd:ba:f9:09:48:35:f7:1d:c3:
1c:50:88:3c:62:e9:64:e8:ea:83:5c:94:38:d0:e1:
3f:3b:c0:5f:94:dc:35:43:67:f4:80:91:9a:5e:6e:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:45:F4:85:D2:E4:48:2B:D9:A8:0D:02:7E:EA:24:6F:35:96:6A
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:59:fc:af:c7:a3:b4:35:92:3f:f3:69:62:d5:9e:14:72:
14:12:2e:9e:5c:f4:a0:e9:e3:d5:73:f9:6e:fa:94:43:1d:27:
bb:ad:ed:6c:9e:af:4c:eb:e2:b9:de:07:92:cf:6e:c0:48:8f:
81:d8:fd:a6:41:f5:64:c3:30:9e:61:eb:a4:db:e8:78:21:38:
45:cc:29:6d:1b:41:ac:71:8e:0b:e5:a9:74:bf:6c:d4:47:d0:
75:cc:84:7f:7e:ba:97:cb:f8:8c:9b:f5:ef:5a:17:51:77:c7:
db:5e:d4:de:63:20:d8:b3:2d:6a:d4:61:55:ec:cc:92:0f:1b:
f7:fe:45:c7:4d:65:28:eb:e1:fa:44:81:77:e1:e0:69:9c:75:
d7:81:c0:fe:12:b0:da:90:a7:b0:60:51:2b:40:ff:7e:fc:d7:
94:d5:6b:99:ca:79:a7:0b:6c:c7:33:37:39:89:38:52:2a:f8:
ee:55:2a:ad:36:84:41:9c:d0:d7:e5:08:c3:9f:87:dc:3d:b1:
a6:bf:8c:f6:8b:80:2e:2f:bc:e0:9f:7e:d7:cd:42:78:1b:09:
b6:d3:61:d4:df:5a:e9:87:fe:45:fc:3e:fc:8e:0f:db:50:ce:
79:5c:27:48:ca:61:31:73:b4:3c:4e:8e:32:20:20:a8:a3:c5:
27:cd:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:11 2026 by rpki-client