Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
File: 2wU2Dphzgl911nHa8WJKUumFOQw.mft (raw, json)
Hash identifier: hNa6wT2L8IrAvCA9OaNmG/rRJfgzoaHbw2YyvyRrSbs=
Subject key identifier: 6A:67:70:8E:EE:DF:0A:8C:07:19:A5:60:2B:84:85:E8:E0:0B:A7:51
Authority key identifier: DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
Certificate issuer: /CN=db05360e9873825f75d671daf1624a52e985390c
Certificate serial: 019CACB4A28C1B43B4CF90A7DCDB8616480A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
Manifest number: 02CF
Signing time: Mon 02 Mar 2026 04:00:45 +0000
Manifest this update: Mon 02 Mar 2026 04:00:45 +0000
Manifest next update: Tue 03 Mar 2026 04:00:45 +0000
Files and hashes: 1: 2wU2Dphzgl911nHa8WJKUumFOQw.crl (hash: vtLPPdr8P0rZkpnosF7DT2vcR/P/A9gOcp4NKWZJ/DA=)
2: qIEvRyug51NtPOqrvZlLTZ5-EIQ.roa (hash: BsW/+9betY20XfYjkexlN+8vCvy84YAaJnRdNAcmTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a2:8c:1b:43:b4:cf:90:a7:dc:db:86:16:48:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db05360e9873825f75d671daf1624a52e985390c
Validity
Not Before: Mar 2 04:00:45 2026 GMT
Not After : Mar 3 04:00:45 2026 GMT
Subject: CN=6a67708eeedf0a8c0719a5602b8485e8e00ba751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6d:57:3a:19:55:ab:e9:2a:2c:05:0b:1d:3e:
5e:bc:46:e4:d9:77:bd:e3:15:62:b1:77:0a:e8:df:
da:9e:d4:28:fa:06:7c:6f:32:6b:5e:c6:e4:de:8b:
5c:b4:cb:f8:99:f1:ac:66:ce:f0:08:d3:70:41:5c:
8a:c0:e8:69:4d:6d:3a:76:e0:a2:7c:58:e5:5e:dd:
88:f1:d0:cb:d6:39:18:a0:b3:84:15:8c:19:11:3f:
c5:aa:42:c4:93:29:ee:40:e0:79:b3:47:42:e1:dc:
c4:f5:da:fc:6f:8d:56:85:07:71:74:e8:c3:72:f1:
a3:6c:0e:83:80:96:45:d9:66:b3:f6:70:c7:60:a0:
d8:8d:54:aa:e6:8e:97:3f:55:a8:f7:cf:9e:8b:54:
5b:2e:8d:92:76:e9:03:90:23:df:b9:47:c9:36:5f:
b3:34:44:78:54:33:a1:14:50:9a:a2:c0:e2:ef:12:
93:5d:01:41:83:09:67:1d:cc:6d:89:31:c8:c5:fc:
8d:24:c4:10:42:9c:98:50:04:1f:9e:2d:31:cd:5e:
a6:eb:20:aa:f1:d3:e5:44:75:8d:62:ee:39:c8:07:
24:f8:2e:64:99:7f:02:09:32:b4:0f:a0:97:01:14:
f2:ef:0a:3a:25:e2:34:3f:db:2b:b1:7a:20:24:d4:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:67:70:8E:EE:DF:0A:8C:07:19:A5:60:2B:84:85:E8:E0:0B:A7:51
X509v3 Authority Key Identifier:
keyid:DB:05:36:0E:98:73:82:5F:75:D6:71:DA:F1:62:4A:52:E9:85:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wU2Dphzgl911nHa8WJKUumFOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8fc1e2-41d7-4f35-a13e-d62d224e3caf/1/2wU2Dphzgl911nHa8WJKUumFOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e1:c4:f0:10:66:3e:ec:49:31:89:aa:45:69:48:5f:be:13:
a7:d9:bb:de:49:8b:08:21:00:7b:6c:f9:1c:88:ca:40:42:1e:
7a:55:28:11:af:f2:f3:44:9d:08:d0:db:87:e9:ed:82:48:0b:
90:e2:0c:8b:01:e4:6b:84:1e:7b:99:42:af:2f:d7:1f:98:6e:
f9:3a:6a:14:ed:69:c4:4d:71:df:0b:b3:75:8b:49:92:e0:3d:
1d:15:84:9d:e9:ff:c8:32:a6:dc:e0:0c:69:cd:f0:4a:8d:bf:
fa:c1:6f:18:b5:82:7a:c6:2f:88:9d:67:e2:41:2e:7b:4d:a2:
13:72:73:84:cc:8e:ce:b5:35:4c:50:0f:20:24:2e:3d:5a:d1:
f2:1d:e3:58:23:2e:3f:99:03:ee:f3:e5:e1:1f:79:5e:e7:81:
bb:8e:96:f0:81:86:a7:ce:b3:18:65:99:9f:28:6b:eb:a9:f8:
22:9c:55:4b:36:07:96:8f:ed:45:89:fa:3e:22:56:20:3d:d0:
1b:25:27:0f:ae:1e:b6:67:46:b1:cf:0f:34:99:9e:99:03:98:
ca:0e:f8:ec:19:75:52:9d:f7:b5:81:00:8d:32:1a:7a:2e:e7:
f5:6d:9a:9b:f4:04:4f:ac:0e:c6:ef:bf:88:99:b9:a5:15:20:
ca:26:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:14 2026 by rpki-client