Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: GDQZeRkEVwaNox5ul3MZTQvC1B0Tr6J4XO37owVKK7U=
Subject key identifier: 30:DD:40:7D:99:BD:18:2B:33:25:3E:B4:B0:00:0D:58:02:DA:71:D7
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019CAC7E18DA9C62170AB85E5FF652D77A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 0763
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: GQeeYaKbFqF4+wHCBZZzaTRsJ9+gScfxYwX5/KXg7q8=)
2: hBOwYB4WPoz5Ydpk13_H2gELiUw.roa (hash: mXK7s89fKob65sg2A4oB0uIh32CHyH4+/5qmpuXXrpA=)
3: hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa (hash: x9s4Ba2Dbe9DV3ZvtPtaZKG9KItOC7ypOsJ8cSF3Nho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:18:da:9c:62:17:0a:b8:5e:5f:f6:52:d7:7a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=30dd407d99bd182b33253eb4b0000d5802da71d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:5a:d6:13:8a:78:e4:b4:09:e5:af:00:ad:
2a:3a:5f:bd:d7:b2:ea:76:36:86:25:bd:09:ac:d2:
41:9c:a3:9a:94:d0:44:47:1a:80:c8:e1:f8:f8:e3:
8b:13:62:7f:49:63:ff:ca:3b:83:ae:08:d7:62:44:
12:ac:5b:ca:09:88:4b:78:93:ce:c2:4f:df:ed:cd:
51:39:8b:a9:eb:78:6f:d1:06:65:13:74:36:d5:a2:
5b:42:6d:0a:a8:38:b8:28:ca:00:4e:86:08:8d:9f:
25:9f:04:1d:af:01:e0:89:b1:e5:9d:e3:01:6e:38:
a8:58:05:23:96:4d:5a:55:77:5e:19:42:e8:f0:f7:
41:ed:dd:3d:7f:2a:7c:c5:5c:38:69:97:5e:fa:a4:
c7:6f:1c:aa:7b:f5:c5:a0:ba:e6:6d:ef:e5:5e:bf:
74:dd:35:96:4f:46:9e:6a:97:7a:e8:6d:ba:dd:ea:
de:b2:f2:b6:41:06:34:0a:34:29:fa:3c:91:82:18:
b6:ba:1f:1b:94:f3:ea:8c:ed:f8:19:9d:32:4d:a2:
49:67:2b:db:5b:be:dd:2b:fb:d7:76:e5:46:40:42:
a1:9a:0f:03:13:18:c0:3b:1b:0d:f8:85:12:0a:fe:
84:fd:4e:a2:9b:b0:b0:14:12:46:c4:92:34:48:59:
4b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DD:40:7D:99:BD:18:2B:33:25:3E:B4:B0:00:0D:58:02:DA:71:D7
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:4a:bc:be:e7:3e:1e:ef:05:3c:75:d9:e2:68:a9:d5:33:
62:ee:98:56:37:f4:70:d0:ac:bb:b7:13:fe:49:df:68:89:0f:
5f:8f:ca:94:93:fc:eb:6a:03:ff:7c:9a:29:c0:1e:d2:26:54:
07:43:a6:3e:77:77:a0:d5:9c:d6:33:2f:a6:7d:5a:20:7b:06:
f0:5c:64:75:02:b2:6e:fe:c1:b8:24:7c:7b:a4:49:f6:ac:56:
d3:95:eb:c0:a7:de:75:58:bc:c2:b7:b4:96:86:5a:96:94:59:
ac:9e:4a:16:ad:21:a2:de:e1:16:08:54:8f:65:b2:84:05:8e:
65:73:89:64:1e:0a:88:68:1a:82:49:5e:76:51:e0:f7:97:78:
5b:ee:06:6d:e8:20:8d:b3:b6:af:ac:b3:c7:48:44:e1:cf:29:
84:af:6c:a2:c2:dc:77:bc:91:6c:bc:2e:70:40:7e:2b:79:8f:
d6:ad:a3:c1:5f:95:6a:2b:ee:59:60:3b:2d:72:84:28:23:78:
c1:52:27:f1:cf:c0:e2:3d:74:6a:ba:a2:f3:8b:ab:b7:70:27:
41:e3:0e:58:f2:98:35:11:48:96:63:af:fd:08:56:c5:7c:8d:
d8:aa:26:1d:dd:78:37:b7:11:30:6b:c4:2a:62:52:4f:9d:12:
05:03:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:15 2026 by rpki-client