Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: ql0DpCtC3MO7mE8Q9nxF1m4j5weJf3bpm+g5VyVSNPE=
Subject key identifier: AF:5C:FB:2B:DA:A2:E4:CF:17:AA:FD:F9:B4:38:AB:FB:8F:1D:D0:D8
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019EBF5AC80023A9CF9C6BB5E4355E2DFE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 144B
Signing time: Sat 13 Jun 2026 05:00:58 +0000
Manifest this update: Sat 13 Jun 2026 05:00:58 +0000
Manifest next update: Sun 14 Jun 2026 05:00:58 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: cVv/ua81ChqlgWnPX0sHLFusHq5wtavOK3Ip5iQRIHI=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c8:00:23:a9:cf:9c:6b:b5:e4:35:5e:2d:fe:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Jun 13 05:00:58 2026 GMT
Not After : Jun 14 05:00:58 2026 GMT
Subject: CN=af5cfb2bdaa2e4cf17aafdf9b438abfb8f1dd0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:e2:1f:35:43:16:63:2f:41:a5:02:5d:56:
1f:d6:2e:23:c4:a1:31:16:84:2c:d1:09:9e:98:54:
27:96:3d:4a:4c:87:86:6c:2c:3a:3d:95:67:fc:43:
4d:b4:78:65:45:af:9c:89:88:e6:47:66:8e:ff:e3:
94:47:2a:c2:35:5f:55:fc:97:8e:ab:be:1c:47:8d:
f2:28:e0:24:21:3b:51:50:e6:18:c3:46:87:50:c9:
90:ad:42:d1:77:6d:6c:1b:07:fc:6a:c7:33:d2:59:
66:d6:46:aa:05:2b:38:81:cd:a9:56:99:92:25:a8:
dd:03:a8:93:f4:62:96:20:9a:6d:52:5e:81:c9:5d:
64:9b:6b:bc:45:1c:fb:9b:1a:92:fe:fc:68:a4:c4:
70:ef:8c:e5:8a:8b:51:ad:48:19:a3:71:b9:1a:a7:
89:30:82:e9:5c:8e:4e:f5:88:8f:1e:1c:83:15:45:
54:20:eb:ca:c0:40:58:06:a4:f3:46:10:aa:be:c1:
17:99:3b:76:dc:93:13:08:7e:c9:38:d2:33:e7:86:
91:13:94:5f:36:48:22:4f:82:60:b6:a3:0b:95:fb:
fe:3a:95:a5:17:e3:ab:74:d6:b7:e1:95:42:bb:08:
12:98:e0:58:fa:dd:df:2e:b5:fb:30:77:bf:f7:49:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5C:FB:2B:DA:A2:E4:CF:17:AA:FD:F9:B4:38:AB:FB:8F:1D:D0:D8
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:b7:6f:cb:0c:46:33:c9:b6:92:c0:e3:72:94:a3:8f:cc:
41:4f:4f:21:56:6f:81:5e:81:b4:9d:e6:fd:40:7b:16:7d:26:
07:f9:c0:3c:dc:f7:a6:76:05:06:6e:27:66:82:ab:46:8e:b3:
ff:96:3d:25:9c:2c:48:7c:78:2e:ea:e3:37:bb:7e:48:e5:34:
ff:d0:ad:c8:b2:49:cd:81:9b:87:7e:a7:ff:4a:d5:34:a1:6c:
bc:45:c3:82:70:13:7e:1d:34:47:ee:a9:7b:86:1d:3e:cb:72:
ec:eb:1b:d8:6d:8f:7d:04:7c:6b:ab:ce:57:18:d4:8f:e2:3b:
53:d0:34:c0:6c:1d:eb:5d:48:63:9d:d1:0e:c8:b8:c2:f1:bc:
e9:1f:35:cf:ed:4d:83:ce:87:43:8c:0d:8c:70:15:94:1d:1b:
d7:1d:c1:71:82:c6:f4:90:42:25:f6:53:ce:8d:e7:6c:3d:32:
8f:3e:92:bd:3b:64:85:6f:56:3b:b1:11:d2:25:b1:c5:5c:85:
c6:ea:97:7b:6b:b9:ac:65:d7:96:3c:9a:3a:6c:06:e6:9d:8d:
e0:5d:2d:3d:57:36:17:c1:5e:60:cb:1f:41:76:70:df:5f:1d:
a3:d0:28:b5:f9:84:cd:4a:5e:99:05:5f:94:f7:2e:ce:6e:61:
41:9b:87:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:58 2026 by rpki-client