Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
File: 2wrmUd77BmbCKy5det1WU0hwdq8.mft (raw, json)
Hash identifier: kRDQuXFlnc7oxhB7CaQovvt+geU2+JoL7G+Q3LrDobU=
Subject key identifier: 46:01:32:88:16:13:8D:52:08:30:02:80:86:8E:FF:7B:06:BA:79:40
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Certificate issuer: /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial: 019CAC4732E44B7892B5539A29F43F7F2038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
Manifest number: 1338
Signing time: Mon 02 Mar 2026 02:01:12 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Tue 03 Mar 2026 02:01:12 +0000
Files and hashes: 1: 2wrmUd77BmbCKy5det1WU0hwdq8.crl (hash: dQrp/LCQMB4FV5OSJWtGq2gB7vnyzN4Pq0QFMB7H/BY=)
2: op0eEgdGXmNS-P-Hwl4ObyQ3ZSY.roa (hash: mp432jFuxTshjpfCMrprAjvtqJ7CW44OdVeEPtHFMHI=)
3: yh2nwizsFIU9yQ_Riatp8tFdGRE.roa (hash: vOErcgaf1znA8uCSRzcpHdA3SSIuKit6eYopZEZH1cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:32:e4:4b:78:92:b5:53:9a:29:f4:3f:7f:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 3 02:01:12 2026 GMT
Subject: CN=4601328816138d5208300280868eff7b06ba7940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:c0:39:63:9f:9b:8c:4f:53:e5:a3:34:65:
57:30:cc:58:11:a9:3f:99:cb:47:42:b6:90:06:33:
0d:f8:34:8b:06:d7:3c:63:9e:8e:00:ef:bf:ab:04:
75:5f:d6:45:1c:95:43:4d:18:86:63:d3:57:ac:18:
67:17:29:87:ac:ce:81:33:43:68:a0:fe:8d:1c:dd:
ed:67:f3:0e:03:dd:44:20:76:15:29:55:86:5b:93:
35:e9:58:b5:ca:9b:cb:c4:06:05:b7:10:08:ca:64:
bb:a6:de:d7:9d:7b:9a:ca:29:db:cf:be:6f:04:d0:
ea:3f:da:58:37:94:c3:b8:a2:65:6c:9c:81:5a:4a:
99:0d:15:55:5d:51:65:6b:f8:83:87:38:ca:42:31:
24:4f:97:d2:d3:58:17:73:74:38:d8:5d:13:1e:93:
18:ec:c7:f4:d1:58:98:79:62:cc:c7:6a:16:bc:91:
8b:59:83:ad:ed:ca:48:65:20:e5:87:17:c7:75:6d:
92:ff:7a:1e:45:59:ed:f9:07:11:92:2e:93:1d:b9:
fc:87:a6:45:c4:30:2f:89:94:3d:85:5d:d8:37:06:
0a:9f:64:86:43:3e:97:54:e5:24:40:c1:2f:45:22:
34:4c:4b:ca:8c:ea:1f:61:33:e3:b4:a7:5a:93:f6:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:32:88:16:13:8D:52:08:30:02:80:86:8E:FF:7B:06:BA:79:40
X509v3 Authority Key Identifier:
keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:48:8e:06:b3:e6:7b:d7:da:1a:35:b3:60:a0:a6:be:bb:72:
cd:5f:68:79:d7:13:df:29:eb:63:a0:2f:7f:85:4d:96:b1:15:
b1:5c:8e:d1:ce:e1:3c:04:72:16:80:55:2e:b2:35:7f:85:fb:
91:d4:df:6b:77:4f:f6:57:ee:13:4b:ce:dd:66:21:03:1a:51:
ca:e4:23:72:26:51:f9:16:c7:8f:b0:50:e7:0d:fe:58:68:fe:
7e:6b:f5:5d:41:dd:eb:fa:0e:d6:47:85:ae:4d:07:19:25:28:
46:ba:1c:a6:c0:79:b1:ad:21:d5:8a:5d:4d:5e:7c:fc:51:5b:
de:70:46:07:80:dc:ef:ff:1f:9e:91:85:b4:56:e8:1d:57:77:
6d:8d:8c:16:80:b7:71:50:26:00:30:87:3a:9b:a5:b4:0c:2c:
f9:70:ef:81:ac:b0:cd:18:a0:81:c4:1e:e0:38:bf:7e:26:92:
db:a7:1e:27:e1:a5:f9:e0:88:3d:89:1b:42:7d:64:a7:e2:37:
b0:f2:97:7d:e9:f8:e1:25:e4:5c:55:f0:c7:a0:b3:6d:b6:f2:
f7:5a:98:69:f9:0f:f8:6d:c5:b0:00:f2:2c:2e:d8:0a:43:3f:
12:a9:be:a5:43:e4:d8:cb:40:3a:84:6e:66:a0:2d:8c:b2:e2:
4a:48:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:10 2026 by rpki-client