Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: ONkjSmzmV+goDaBGYKHkEq0H9MJeCly14jBQFWIpYEw=
Subject key identifier: C3:E4:45:34:BF:FC:B5:E5:D9:D2:A5:E5:F9:A1:00:01:CC:43:82:C1
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 01A0CA7D5E9C091828EE4A83DFEFE93DF56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 13E2
Signing time: Tue 22 Sep 2026 19:00:08 +0000
Manifest this update: Tue 22 Sep 2026 19:00:08 +0000
Manifest next update: Wed 23 Sep 2026 19:00:08 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: RmeM5AN+oMmvrZZ/J7y48nRKCjMkhv5sL2LQBX+j8G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:5e:9c:09:18:28:ee:4a:83:df:ef:e9:3d:f5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: Sep 22 19:00:08 2026 GMT
Not After : Sep 23 19:00:08 2026 GMT
Subject: CN=c3e44534bffcb5e5d9d2a5e5f9a10001cc4382c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:48:61:88:7b:e9:92:8f:1a:40:a7:04:75:
13:8a:f9:c1:99:db:07:e6:f7:0d:0a:8f:58:6c:39:
ac:02:43:1a:34:c4:76:cc:f4:8a:ab:d1:fa:a5:71:
f4:0e:f5:a3:64:e4:49:e9:98:62:9c:c8:23:d0:7f:
be:8b:16:8b:68:e3:0d:81:fe:c6:d6:a1:21:91:42:
14:f7:8e:45:19:f8:d6:73:4b:98:99:d7:4a:73:6d:
7b:c5:46:9d:17:fd:b5:1f:89:58:2e:f5:ec:8a:8b:
f3:b3:9d:6e:9d:ae:d6:de:f1:e6:eb:85:6e:00:4e:
44:50:2a:b7:89:be:fd:16:ee:32:f0:35:da:2d:32:
a6:44:df:53:64:8d:db:68:dc:ca:9a:81:e4:c2:d2:
cd:75:84:f5:e3:fa:d7:70:15:a4:01:b8:83:9c:48:
92:be:31:73:76:f2:ff:6a:6e:a1:a2:6e:54:a5:1a:
51:6c:73:e1:42:6c:46:55:e5:cd:24:78:f0:a6:d9:
14:ea:af:2f:20:0e:67:2d:94:0a:3d:c7:7d:00:50:
0e:3d:01:65:68:89:4d:a5:80:28:ff:c6:25:2c:c2:
28:29:6a:22:12:3d:76:28:c5:99:3d:61:3f:39:ec:
7f:6e:35:1f:24:d5:7e:dd:46:7b:f2:e3:4d:cf:da:
88:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E4:45:34:BF:FC:B5:E5:D9:D2:A5:E5:F9:A1:00:01:CC:43:82:C1
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a2:71:c7:cf:1a:c8:37:77:96:b5:c0:68:7b:f1:d8:fa:75:
75:8b:e0:41:ca:24:90:a3:e5:0a:a6:65:b4:ec:a2:45:7e:c6:
00:f4:98:05:2d:33:75:ef:32:97:a8:d2:d8:9f:03:5d:21:7f:
a0:2e:f2:e3:07:3c:07:fe:41:98:ae:15:e4:40:78:04:3f:34:
16:36:86:03:3a:6a:55:76:88:08:7a:c4:92:d0:ab:d3:e2:97:
e5:78:2c:20:f5:0c:80:35:2e:5a:b6:f2:e3:e7:70:3f:9d:fa:
76:07:31:a2:c6:9a:9d:18:29:86:a3:22:eb:45:af:d2:22:a1:
98:ae:0a:d5:d4:2f:52:d3:18:83:5c:9f:56:83:ce:38:c9:1f:
b4:01:7e:2f:af:0c:aa:c5:63:97:f7:27:8b:a1:eb:98:76:00:
60:e8:59:97:f1:8d:d4:16:9a:72:6e:21:13:5e:4b:2e:4e:b3:
3b:77:17:0b:62:b9:29:3c:88:fb:90:8c:52:bb:28:41:45:85:
6b:c3:69:dd:21:fc:78:fd:2f:e4:6f:80:63:58:e9:62:40:93:
8d:dc:89:f9:2b:86:fb:64:05:a9:23:9b:41:ed:f0:ae:96:d9:
64:a2:b8:94:5c:35:ab:c0:82:ee:53:37:1f:94:f0:a3:44:d5:
59:00:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:23:07 2026 by rpki-client