Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: JpKEmy34jsrfSJv1JiES+ln5m//xQKY0RH7abgxiOtc=
Subject key identifier: 3F:94:1B:42:EF:5B:46:56:64:41:02:B8:09:B9:8A:4F:60:80:58:25
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019FAC3EC2881CE966A30BE01D04AB66B3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0EF3
Signing time: Wed 29 Jul 2026 05:00:21 +0000
Manifest this update: Wed 29 Jul 2026 05:00:21 +0000
Manifest next update: Thu 30 Jul 2026 05:00:21 +0000
Files and hashes: 1: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
2: INbvbexKikJqE06AvP-OgH6xyns.asa (hash: 6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: 0yJGbEg7vODFkXN5bQF35EmSG+npHWZx7H4Dj++AeDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:c2:88:1c:e9:66:a3:0b:e0:1d:04:ab:66:b3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Jul 29 05:00:21 2026 GMT
Not After : Jul 30 05:00:21 2026 GMT
Subject: CN=3f941b42ef5b4656644102b809b98a4f60805825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:41:36:d5:8b:2a:04:76:a7:e0:3f:d5:b3:
60:25:c2:62:b7:80:68:bb:98:a0:a6:cc:16:b1:4b:
01:52:07:30:f1:04:04:35:c5:0e:1c:ab:e5:f0:eb:
87:9a:fb:15:36:00:10:48:38:59:aa:26:0c:66:7a:
cd:26:72:d3:c6:70:95:d3:23:1e:13:9b:74:d7:83:
86:60:62:e2:f1:15:cd:09:f2:81:f5:ca:46:87:de:
df:24:72:b5:c4:33:d5:26:5d:1b:b3:64:2d:4c:25:
1a:57:40:d9:66:2c:6b:03:ae:80:a0:9b:b1:21:7c:
92:0f:d1:94:c9:b4:92:f0:22:bf:00:8d:4f:b1:63:
6f:3f:59:b7:76:00:8a:21:9c:46:e8:f5:a6:0c:22:
ba:11:c8:02:96:37:c9:c1:2a:50:79:31:28:e9:ee:
1f:77:33:89:10:50:85:98:ab:b6:cd:6c:48:de:62:
4f:73:a2:5a:2e:81:a0:31:9a:04:3b:09:88:6c:5d:
39:20:28:03:b7:b5:ac:75:96:26:e8:14:1d:1b:51:
0b:f1:c9:d9:0a:c4:c1:02:b5:ba:2e:a0:e6:69:a3:
37:5b:7e:45:68:04:dd:94:ba:66:07:ef:ea:b9:1b:
53:82:d1:eb:9d:d4:48:aa:a1:59:e5:f7:99:b4:5e:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:94:1B:42:EF:5B:46:56:64:41:02:B8:09:B9:8A:4F:60:80:58:25
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:05:b3:cf:2d:66:c7:5a:99:1c:26:cd:00:62:94:b9:fa:33:
01:a5:36:9f:07:29:72:ed:03:d7:a0:96:13:6b:99:f4:5f:05:
7f:3b:48:66:e9:e5:7e:f9:27:77:44:a1:8c:b2:2f:a0:e4:cc:
fa:27:8a:f8:56:23:41:e4:57:91:cf:17:d4:73:da:c6:e9:ab:
ba:50:98:8d:17:a7:aa:cd:0e:e1:15:89:9a:01:a1:36:72:40:
bf:7a:e9:10:06:67:34:ed:c5:9c:12:c9:d6:43:40:64:d8:01:
48:cf:43:67:1c:5a:79:47:0c:47:59:9a:c7:57:bf:2b:8e:f0:
3c:94:b5:e3:23:e0:3a:33:ee:0f:fb:0d:da:3d:ee:3b:82:fc:
59:6e:91:7b:17:91:ac:03:7a:94:3a:41:cd:dd:56:1b:f7:ef:
0d:e6:4f:7a:b9:a0:98:d1:5c:a6:d2:0e:eb:66:e7:a8:59:e9:
a7:94:7b:95:4d:fd:36:8f:0d:62:60:6d:79:62:48:2b:c1:d3:
1d:bb:2e:0c:58:fb:87:cb:8a:0d:70:65:df:1a:a6:aa:c6:bd:
06:99:a3:60:b2:b5:9e:d8:60:70:77:8a:b7:5f:56:4b:f6:cf:
07:df:fc:86:7c:34:3d:95:4a:61:cc:45:3d:24:17:96:42:ef:
92:51:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:33 2026 by rpki-client