Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: 3f2yAisOecsAINVqqt5fhcD7UTAPoEhX2K5FrdavcjQ=
Subject key identifier: C2:E1:77:85:08:20:AF:19:1B:94:2D:CE:AA:81:84:0D:EB:A6:03:38
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 019D99998D6F4A74AF49A435D9BDD0DADE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 123B
Signing time: Fri 17 Apr 2026 04:01:10 +0000
Manifest this update: Fri 17 Apr 2026 04:01:10 +0000
Manifest next update: Sat 18 Apr 2026 04:01:10 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: Y0BxN91dB/4YtZEm3kcN/vQ0KeqFkAqb9EhCfXlMT/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8d:6f:4a:74:af:49:a4:35:d9:bd:d0:da:de:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Apr 17 04:01:10 2026 GMT
Not After : Apr 18 04:01:10 2026 GMT
Subject: CN=c2e177850820af191b942dceaa81840deba60338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6f:6b:51:06:e6:ad:3a:42:2d:ce:75:40:bb:
a8:83:1c:63:4b:eb:61:92:be:2e:95:2a:dd:36:38:
16:3d:a4:c6:d0:1c:cf:02:21:67:26:f4:27:1d:fa:
51:78:3b:02:3c:43:d7:17:30:9d:fd:18:c1:d3:88:
04:64:eb:61:18:1c:57:db:9c:8f:ba:44:fe:c0:47:
1c:2a:3a:84:a9:f1:1a:a9:94:17:9d:04:43:b6:07:
ac:d0:f6:1f:d5:0e:af:74:c1:08:ef:8c:ea:4a:29:
77:d2:d9:a0:05:5a:00:b6:c3:3d:e7:b7:f5:93:7e:
15:71:b5:4a:57:db:24:e3:dc:b7:e1:80:67:c5:f2:
ad:04:e6:6f:32:c3:db:33:98:55:3b:2c:0c:1f:da:
15:58:55:7b:17:98:00:c6:d4:03:1b:dd:12:41:41:
39:99:75:31:fa:a4:a2:52:d9:a8:a3:df:c4:58:a9:
e4:19:e3:b3:26:e6:8f:0a:43:33:8e:e5:6c:16:0d:
51:81:23:f6:f4:8f:d8:f6:d9:0f:20:61:10:e4:1d:
60:b7:b9:d5:6b:cf:dc:00:fa:78:8e:20:9d:8c:f4:
dd:46:96:2d:5c:bf:e4:2f:10:26:20:f3:47:69:a7:
6b:e6:65:dd:2a:f4:5f:e1:0b:7a:2a:04:05:81:36:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E1:77:85:08:20:AF:19:1B:94:2D:CE:AA:81:84:0D:EB:A6:03:38
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:81:c4:68:de:c3:ce:a7:7c:3d:5f:5b:fa:3d:4c:ba:8f:bc:
0a:c9:b9:51:3a:cd:e0:8b:f7:2a:53:b0:ab:a3:4d:e5:f8:a1:
0b:6b:b8:e6:bf:55:6e:31:a0:3e:28:16:13:bd:50:5f:af:3b:
c6:84:21:1b:d1:44:ae:cc:85:db:ad:3e:ed:06:5c:41:fa:c9:
b6:86:7a:09:9f:ad:79:de:63:09:7e:27:d6:1d:21:7f:e5:38:
fb:fd:71:13:4e:aa:5e:22:f2:8b:12:ce:f5:57:c6:ed:b0:14:
36:ae:62:62:3e:4f:b4:52:59:76:25:9b:6d:a9:91:f4:8a:34:
31:35:10:c5:bc:1d:bd:40:50:48:f3:6f:4b:2f:82:ce:13:4a:
cc:d7:4c:d8:fa:c5:80:d7:69:ed:88:5f:2b:5e:3b:6a:9e:51:
e2:ae:b2:63:0d:3f:12:76:46:71:be:29:e9:ce:3e:7a:d1:ac:
c2:bc:80:36:5a:2c:58:1f:4c:8e:11:ee:ea:92:14:b5:c1:21:
7e:40:09:31:3e:8f:9b:de:4f:eb:51:b9:15:2a:c1:4e:e2:95:
cc:94:63:54:35:c4:c2:b8:1e:f5:80:62:8e:d3:34:8b:b5:05:
e9:f5:42:ba:97:8c:4f:e4:77:33:61:64:92:d0:45:11:66:c9:
36:19:30:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:15 2026 by rpki-client