Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: A64u5F4eu2MLfLEngG3Vn6YrP/P7ksyEfsD59EFyMfY=
Subject key identifier: D0:2C:59:AE:A8:52:82:90:B0:58:EE:1A:13:C2:6B:82:7D:FA:94:C4
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019D981884FC06BF69526DA96DF76DA917CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 07DD
Signing time: Thu 16 Apr 2026 21:00:36 +0000
Manifest this update: Thu 16 Apr 2026 21:00:36 +0000
Manifest next update: Fri 17 Apr 2026 21:00:36 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: 4aoUWWxhRRNW7jtsolF1xGrmr++4fbt2p+Ib+y7uz9o=)
2: hBOwYB4WPoz5Ydpk13_H2gELiUw.roa (hash: mXK7s89fKob65sg2A4oB0uIh32CHyH4+/5qmpuXXrpA=)
3: hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa (hash: x9s4Ba2Dbe9DV3ZvtPtaZKG9KItOC7ypOsJ8cSF3Nho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:84:fc:06:bf:69:52:6d:a9:6d:f7:6d:a9:17:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Apr 16 21:00:36 2026 GMT
Not After : Apr 17 21:00:36 2026 GMT
Subject: CN=d02c59aea8528290b058ee1a13c26b827dfa94c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:b0:ef:9a:21:8a:5b:a4:da:7f:61:a1:2e:
fe:0f:06:97:44:b0:5b:c0:84:75:97:19:39:74:7c:
63:f3:79:67:0e:d6:2f:eb:30:9d:9a:fd:25:48:f7:
fe:3c:f2:dd:d5:4a:79:78:e9:6b:69:ad:cd:9d:6b:
13:40:c2:43:8e:19:e2:92:a7:d3:56:dd:91:fc:38:
77:7f:19:01:88:ed:2f:ce:d2:a8:d0:dd:90:27:4d:
46:dc:46:ae:24:56:fb:c5:e5:85:71:b7:84:62:b4:
92:16:82:6a:5a:61:d4:7c:2b:80:9f:f2:e4:1f:79:
bd:9c:fc:b0:98:ac:25:83:b4:77:9b:39:6c:e9:35:
ac:a9:de:d1:d6:5e:6c:0f:3e:8e:e7:be:6e:82:ff:
75:a4:a6:ce:e9:dc:c5:3b:24:e8:c7:cc:f1:5a:cb:
fb:35:8a:4d:da:49:d7:d9:f7:8d:33:67:cc:db:15:
72:18:53:0c:92:fc:63:14:52:29:60:f5:de:6e:7a:
25:a2:42:e5:08:ca:95:e9:56:85:8a:61:0d:b0:e0:
93:2d:f1:15:64:00:5b:80:89:cf:e6:34:ce:f7:b7:
fd:8f:5f:9f:da:3e:c4:cb:70:60:29:e6:16:cf:6a:
e1:4f:d4:b4:ea:bb:4b:d3:cf:29:4b:0e:d0:17:58:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:59:AE:A8:52:82:90:B0:58:EE:1A:13:C2:6B:82:7D:FA:94:C4
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:55:1c:5e:63:38:22:e8:7b:0a:8b:91:ac:dd:e2:ce:b4:1b:
a0:43:16:5c:4f:19:0f:8d:d2:9c:7b:0e:5a:0a:c3:ca:5e:2c:
3b:69:3f:56:d5:74:75:b6:05:9b:3f:08:e7:cf:c2:c3:0f:52:
a5:19:d9:82:d6:d3:67:83:6c:85:57:59:1c:e5:be:11:54:8d:
9c:ee:49:62:3e:e8:64:c8:6c:af:31:d9:ba:58:cf:8a:5f:7c:
0d:bf:f2:32:94:b5:99:28:b1:5e:d3:45:5f:72:5d:8f:90:0a:
7f:82:77:be:9a:4c:d8:a5:3b:1d:0c:5a:64:59:57:ad:66:b2:
6e:eb:53:93:5a:4c:a7:eb:de:b1:77:1f:7e:6a:20:fb:73:3f:
9e:1a:1d:bc:7c:aa:2d:fe:be:6f:5f:56:59:89:28:ba:af:27:
f5:0d:3c:e1:d3:c6:97:2b:cd:ba:f3:07:41:4f:3f:e8:29:29:
14:62:91:a7:b1:1b:c1:42:26:2a:9e:4f:6c:6b:eb:12:91:e8:
ca:9a:9a:b2:57:2f:96:0e:8e:11:e1:39:16:5a:e4:2a:92:23:
5f:25:05:0e:2e:cd:82:a8:ea:54:6c:5a:a9:50:8d:9d:4f:e0:
73:f6:6e:1f:dd:e6:e1:2c:24:ee:f7:3c:6b:05:b1:32:41:4f:
70:84:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:04 2026 by rpki-client