Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: 2SFK1pgzFFj7fUHCbqbiWomiSrYJMJJ+DGe6i44Nw9g=
Subject key identifier: 73:C0:26:CF:A6:6F:62:60:BD:36:2A:F4:48:EC:48:1A:2A:9B:CE:AC
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019FAA1A4F161FB65DCC9B39016DF35F4B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 08F4
Signing time: Tue 28 Jul 2026 19:01:18 +0000
Manifest this update: Tue 28 Jul 2026 19:01:18 +0000
Manifest next update: Wed 29 Jul 2026 19:01:18 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: jE4rdya9GL4fklTMlaXiQhMt9RY3IRXQFkoD3JupBKs=)
2: ZW49T-EF9sD4oMGX0teIq89-wdQ.roa (hash: ecFVWg/f7sqDB7B5E7OkA3m4Sw9Gn9wf9T3KAIQS1B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:4f:16:1f:b6:5d:cc:9b:39:01:6d:f3:5f:4b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jul 28 19:01:18 2026 GMT
Not After : Jul 29 19:01:18 2026 GMT
Subject: CN=73c026cfa66f6260bd362af448ec481a2a9bceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:cf:2a:b7:76:53:53:2e:01:b1:fa:38:f0:
17:e2:43:60:76:d5:14:64:c7:a8:a5:58:ff:ad:c8:
13:64:81:04:42:58:ab:66:9e:5f:2a:9f:58:51:01:
fc:a2:1a:5a:95:c0:96:c9:90:36:a3:25:ef:fb:51:
d7:f1:ad:61:83:1c:6c:92:a7:39:63:35:05:5e:d4:
ae:7c:c4:69:03:44:d5:af:7c:1b:29:18:2f:b9:ad:
ad:65:3e:f1:60:80:59:95:a8:af:f2:e6:92:0c:38:
26:83:46:db:86:29:78:aa:67:46:cf:f2:ca:e2:21:
f2:ca:ce:60:94:61:b5:d7:00:b0:89:44:9d:50:78:
d3:7d:b2:a8:2b:40:d2:fa:22:8d:78:b9:c6:08:95:
0a:1b:9d:ef:1f:1c:f5:df:02:e2:8c:4f:22:ac:3b:
d9:bb:b6:5a:00:f9:5a:4d:6b:0a:60:d4:f1:db:03:
8f:0a:6f:8d:c4:d0:fa:44:44:11:2c:04:63:ce:39:
c3:a1:ad:20:0c:39:13:7b:f8:fb:ff:9e:94:c7:e1:
4d:3d:1e:31:c3:dd:db:d2:ed:37:a6:e8:01:20:f3:
18:e1:ef:7b:a8:02:65:c2:d5:37:03:d4:f5:73:f4:
e0:3f:80:28:fb:ad:b9:5b:0b:6b:6d:0d:dd:67:06:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:26:CF:A6:6F:62:60:BD:36:2A:F4:48:EC:48:1A:2A:9B:CE:AC
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:24:68:76:a4:4c:af:5f:68:78:fe:2a:ac:58:d4:6d:f4:59:
c9:1b:df:07:18:65:28:e7:6d:ad:90:48:d6:bc:84:81:dd:04:
4f:47:64:40:f2:8f:88:47:6c:98:43:2b:60:70:77:86:0b:a4:
9c:02:cc:e0:f6:6f:90:38:a6:0c:d6:f5:21:be:96:b2:f3:80:
0c:a5:0b:79:25:3b:eb:bf:aa:93:20:d3:6e:eb:99:f1:a6:3e:
ee:b7:3c:3e:8d:be:af:b8:bc:0c:f3:0e:8d:da:64:48:26:2c:
29:54:1e:8b:17:2d:1e:2b:54:75:17:38:6a:e3:1d:b0:df:85:
fe:c5:3b:21:d2:74:ac:fe:fc:d4:2a:24:1c:be:5d:77:f1:51:
8b:f8:4a:85:12:91:d1:f6:34:4f:16:22:60:48:d2:a2:04:03:
8f:38:97:b6:5b:1b:3e:28:fa:2c:3b:80:bd:db:f9:d7:9e:d1:
6f:6e:ca:e1:d5:72:b7:f8:8c:b2:e2:69:8e:bf:43:d8:e9:d4:
da:63:08:06:a1:31:a0:59:ec:2f:3b:ef:c2:a1:cb:13:40:6d:
e6:c3:ad:9a:62:cf:e5:7a:bd:f1:84:57:61:e3:3c:97:a6:57:
b5:eb:55:6a:9c:f5:41:30:cd:02:a5:4d:69:dc:37:19:8c:1e:
c2:1e:7d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:32 2026 by rpki-client