Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: Iab2X7R+jub011Ed72CainAnWMvG3taJydBCa5/nkqw=
Subject key identifier: D9:3F:BB:CB:BB:5D:8E:6C:A1:52:38:D8:30:E4:BA:D5:87:24:28:E5
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019D9C2C62565D67E6DC5C4184503CCE12DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 034B
Signing time: Fri 17 Apr 2026 16:00:47 +0000
Manifest this update: Fri 17 Apr 2026 16:00:47 +0000
Manifest next update: Sat 18 Apr 2026 16:00:47 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: XmdXBdD9n6Bf5nvShWxlIGOuLlodP21j0HfeSUQ3r2g=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:62:56:5d:67:e6:dc:5c:41:84:50:3c:ce:12:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Apr 17 16:00:47 2026 GMT
Not After : Apr 18 16:00:47 2026 GMT
Subject: CN=d93fbbcbbb5d8e6ca15238d830e4bad5872428e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:db:4c:b4:40:5b:ef:53:a8:7f:69:21:22:
df:86:6b:26:7d:5f:d7:7f:f8:98:0d:ac:9e:76:ee:
18:5d:49:0a:3d:d7:7c:67:ff:3b:87:4a:4b:2b:25:
1e:39:6c:71:d7:29:9e:23:fc:a7:6a:aa:fa:f9:eb:
8f:76:d1:5b:c9:60:18:55:26:43:6b:1a:57:33:48:
0b:e3:62:c6:00:15:e2:19:5f:ba:eb:d1:30:9d:d2:
84:25:a1:24:24:bb:81:c7:fc:1b:dd:3e:05:76:92:
e3:81:bb:f5:8e:d8:75:6b:b8:9b:21:a6:1a:e7:0c:
ec:96:aa:bf:cf:00:65:4b:05:bd:c0:92:d1:f0:c5:
f5:3c:45:29:c6:94:03:60:4d:b6:78:99:09:a8:50:
95:14:47:a9:ac:1f:36:89:9d:66:a1:12:10:8a:54:
84:28:a3:d1:2c:ae:00:9c:e1:4f:e8:b8:dc:b3:73:
42:e8:37:a1:60:fd:7a:1d:aa:3a:b1:28:de:13:39:
91:19:ad:7b:b5:19:cf:9d:87:6e:d8:87:aa:3e:f5:
13:95:1a:1e:ca:5a:40:b5:37:01:23:89:57:21:55:
34:8e:9f:15:41:67:39:45:43:aa:b2:c9:db:05:6c:
11:cc:01:42:68:f6:5d:37:db:ca:34:83:59:14:c0:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:BB:CB:BB:5D:8E:6C:A1:52:38:D8:30:E4:BA:D5:87:24:28:E5
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:06:02:e0:43:b2:76:63:03:ef:70:74:9a:55:c3:cd:b5:98:
ea:29:f4:9d:7e:44:c1:59:93:e6:37:00:64:86:86:94:ab:ac:
c3:cc:00:74:27:e8:fa:57:61:e5:3a:0f:65:66:dd:26:9e:d8:
c3:99:27:99:d1:9c:24:84:52:be:76:94:20:c5:20:48:65:c1:
ef:23:0e:38:0b:ed:71:3d:5f:07:3b:92:f0:d6:d0:55:29:84:
5c:da:d2:39:81:18:a8:ce:9b:6d:11:13:6c:9e:4d:e7:69:b6:
b5:ef:f9:6a:e2:62:71:af:e2:69:be:74:5d:00:62:c0:52:4f:
66:59:9c:57:2e:89:c2:09:f8:40:73:36:31:ea:61:97:b6:b7:
d6:de:98:4a:54:04:e9:5d:80:90:46:0a:fc:22:d6:bf:64:a7:
ab:64:89:18:6c:17:01:31:ba:e1:b4:0d:2e:20:fc:8d:5e:4a:
a0:b9:ab:c5:f2:a3:da:d8:8e:dc:66:34:06:2e:0c:e9:46:78:
17:ae:d7:1b:15:81:e2:23:64:7a:a0:6f:b1:51:66:a0:1c:1f:
0c:5f:a3:7d:3a:e2:6d:fa:a5:39:e7:e2:46:99:f4:1c:b9:1c:
00:af:90:3b:d5:36:88:e5:bb:22:e2:09:76:84:43:ad:de:5b:
41:af:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:39:16 2026 by rpki-client