Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: rPieVXitltvHfT2nL/mBXcJBZ1tWfaWTRAebvdshBAo=
Subject key identifier: 0A:D7:8E:5E:95:93:37:A9:B7:A9:A2:BC:1C:D9:91:97:38:CC:8E:DC
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 019FA8CFBEB60017A8377EFADAAC97084D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 134C
Signing time: Tue 28 Jul 2026 13:00:14 +0000
Manifest this update: Tue 28 Jul 2026 13:00:14 +0000
Manifest next update: Wed 29 Jul 2026 13:00:14 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: cAvWxNVH+zoKsmKmkMw7w2I9ErUu7OoGjRhx84Yfvys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:be:b6:00:17:a8:37:7e:fa:da:ac:97:08:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Jul 28 13:00:14 2026 GMT
Not After : Jul 29 13:00:14 2026 GMT
Subject: CN=0ad78e5e959337a9b7a9a2bc1cd9919738cc8edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:d9:72:b1:76:74:56:52:3c:db:c8:8d:50:
a7:9a:ce:3c:38:4b:cc:c6:01:44:b8:b9:1e:4a:1a:
ea:4a:dc:72:4b:b0:52:da:54:b5:90:87:23:28:ce:
00:a7:b1:c3:09:64:0e:d5:e1:57:b1:84:7f:c7:de:
d6:a8:e7:91:b5:2a:d6:76:b8:f6:6b:97:49:dc:73:
ae:0d:d6:bf:f4:48:0d:e7:a9:05:d8:f2:a9:60:48:
48:1b:7b:c3:77:de:13:3a:3e:b0:0d:dd:b3:4a:75:
f2:b8:e7:1e:7c:f8:b0:b8:2f:55:6c:ce:4f:79:e8:
65:74:9e:bd:c0:9a:79:b6:19:2b:64:d9:8e:cb:49:
11:18:d9:eb:51:f6:8a:81:d2:74:36:c7:1e:03:12:
f4:63:f5:f6:01:c8:47:67:2c:9d:88:20:6a:42:70:
42:f9:30:34:09:f7:e1:20:a4:5c:7a:98:3d:46:91:
20:85:d7:f0:93:b2:d4:4a:39:ec:6f:16:29:8e:05:
8a:60:d9:97:00:d7:c8:b8:44:52:38:13:80:29:47:
c7:58:61:d9:a1:bd:f5:d7:86:fa:de:1f:d0:f2:22:
26:2b:df:a2:99:63:65:b0:c0:1b:1b:71:f4:56:0c:
fc:8e:6e:3d:68:73:70:e3:90:a9:f8:94:b4:de:4d:
f8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D7:8E:5E:95:93:37:A9:B7:A9:A2:BC:1C:D9:91:97:38:CC:8E:DC
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:32:d5:ef:09:41:b5:09:bc:96:c8:20:ed:6b:0a:61:01:
13:fc:09:e3:aa:1a:b6:04:3c:0f:3d:82:8a:0e:80:07:a6:0d:
6d:b4:2b:29:ce:92:5d:c3:ad:a2:a4:d1:62:94:23:a2:95:44:
fa:25:eb:61:33:c9:7e:01:03:8b:b5:a7:80:fe:c5:bb:0f:7d:
70:27:a6:36:59:1e:68:35:d2:bd:95:a9:f6:58:0d:20:90:e5:
38:06:c2:aa:2f:fe:3f:15:b9:8b:b2:b6:3a:4c:3a:23:1f:e4:
d9:dc:f9:d1:14:38:3c:c4:10:ca:2a:62:59:c9:71:34:63:cc:
ab:47:78:7a:51:1f:ae:20:bb:d2:6a:8d:d7:92:6f:c3:24:5d:
9f:4b:a0:85:d1:ff:b6:04:41:ec:36:04:ae:c5:7a:b3:72:64:
0d:c3:2e:bb:a9:55:86:76:26:27:3a:12:03:49:a1:32:0f:bd:
60:db:af:3c:34:e9:f1:af:d7:ab:22:79:d7:4c:c9:ef:85:a3:
fe:c4:49:fb:1b:c8:71:dd:73:2f:c2:16:ed:88:3c:74:72:b6:
52:9e:7e:10:28:1b:1f:b1:8f:32:4e:fc:d4:62:7c:42:79:57:
53:80:25:60:c2:50:75:57:84:b3:c2:0d:dc:e0:b4:63:bc:af:
a5:4f:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:25 2026 by rpki-client