Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: BZ3HdYvwebkDtgqyHp9D2PJ54OMzPHK0rEobXTewpRg=
Subject key identifier: 0E:1A:5E:4D:79:3E:2E:7B:0C:5A:E6:DB:63:31:84:B0:3C:AA:2F:7E
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019FAB6394AE1BBFEED62E99A5681C76AFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 045C
Signing time: Wed 29 Jul 2026 01:00:57 +0000
Manifest this update: Wed 29 Jul 2026 01:00:57 +0000
Manifest next update: Thu 30 Jul 2026 01:00:57 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: y0QldXgmqzI3TpCzMdMaP5mH+fnxxdq3frLISxeI9vk=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:94:ae:1b:bf:ee:d6:2e:99:a5:68:1c:76:af:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Jul 29 01:00:57 2026 GMT
Not After : Jul 30 01:00:57 2026 GMT
Subject: CN=0e1a5e4d793e2e7b0c5ae6db633184b03caa2f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:5a:c7:e3:e6:69:9d:cf:52:1c:5d:c5:54:
f9:d0:8f:1c:2f:81:d5:29:88:52:b3:c5:b8:23:5d:
e9:48:d5:ae:5d:9b:52:f3:77:79:1e:ee:d7:d3:95:
12:09:f8:87:a1:3d:7b:e3:e2:74:18:a3:a4:cd:2c:
a4:a3:88:35:91:61:f5:79:4b:4e:42:fa:48:a1:8a:
3d:13:18:88:85:9d:4b:41:e5:0c:6c:fe:ca:4e:a4:
a7:19:55:b7:76:d9:76:84:2e:de:bf:be:d9:f3:ed:
5e:23:23:5c:4c:86:58:38:11:73:82:2f:5d:90:3c:
04:3d:f9:cc:67:af:63:0a:7a:c9:0d:65:16:c8:52:
4f:2c:ed:55:87:4b:c3:4e:ec:73:9f:13:79:a0:37:
38:3e:f5:c9:ab:fb:1e:1e:c5:6e:a0:32:f2:81:20:
80:32:cc:f9:58:60:12:aa:e7:7e:72:27:0c:3c:7a:
73:86:e0:ba:30:1e:b6:19:88:c2:61:e5:51:06:38:
af:71:e5:40:6f:a8:7d:e6:16:45:78:5e:4f:d4:d4:
cc:13:21:ae:c1:b1:ec:f1:11:50:c1:1e:36:40:55:
f6:9d:78:ea:bd:e3:64:67:c6:e6:77:af:27:f6:27:
51:35:8c:ea:32:03:70:94:66:34:81:25:d7:83:72:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:5E:4D:79:3E:2E:7B:0C:5A:E6:DB:63:31:84:B0:3C:AA:2F:7E
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4f:0c:be:d4:40:0e:4f:7e:6f:d5:a9:51:7e:9e:35:7e:ed:
69:6b:bf:2b:b0:c6:d4:6e:23:8f:85:12:4c:9b:fd:d9:91:ed:
bd:44:c6:a0:66:62:78:c1:8f:a9:24:d6:74:24:96:ed:b3:16:
dc:db:27:f7:c5:19:7c:22:70:36:af:9e:da:f3:0c:14:a7:c3:
94:7a:38:2d:d5:14:b3:e7:db:1c:88:e8:03:42:d3:e2:41:31:
9f:65:3c:fc:24:e9:79:c6:2f:4d:03:87:52:1e:0b:8f:fc:81:
a1:5c:9e:60:eb:4d:6e:b5:55:20:5c:e1:3c:17:bb:c7:79:98:
cb:f5:2c:ec:38:86:d7:3d:e7:d0:38:a3:4e:e9:e1:60:65:d2:
e1:7f:6b:cd:30:43:bc:96:47:6b:d9:c7:8e:7b:3f:9c:61:e1:
57:47:02:fe:45:4e:09:da:a8:c5:b9:6f:42:6a:53:7c:ac:b3:
60:97:ac:1a:c6:86:d9:19:8b:39:5e:fe:93:3b:ca:71:a4:0a:
48:de:4c:87:df:08:54:0f:c5:4b:7f:cc:9e:56:c4:74:98:77:
2d:88:cb:d3:8b:bb:0f:7a:cc:fd:e3:77:a1:bb:2d:18:dd:34:
07:da:35:93:9b:d0:fc:4b:a1:cb:c3:1b:4a:70:9f:62:02:e6:
88:d3:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:02 2026 by rpki-client