Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: 6s+FiAXC0nKpVfP3gZbsmYUvaKVG2T1ujUGKOgI26jM=
Subject key identifier: 02:5F:CE:BC:17:56:F3:F6:EF:AB:1B:E8:C0:10:89:74:AB:35:75:34
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019EBEED25A58BCD34A54AE0578C103983D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 087A
Signing time: Sat 13 Jun 2026 03:01:13 +0000
Manifest this update: Sat 13 Jun 2026 03:01:13 +0000
Manifest next update: Sun 14 Jun 2026 03:01:13 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: OAFMQRU5X9Dm8DX9xnkLXGKTrCvJlNIOHzjxtVK38F8=)
2: c9IInvQk6Ef3iUurC3mp63iWhf4.roa (hash: Kxgd3maEpRM+hvTBv0YQRf2Y5UIYYS6c6rTCshhu2vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:25:a5:8b:cd:34:a5:4a:e0:57:8c:10:39:83:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 13 03:01:13 2026 GMT
Not After : Jun 14 03:01:13 2026 GMT
Subject: CN=025fcebc1756f3f6efab1be8c0108974ab357534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:17:cf:b3:ae:e9:b9:44:3d:50:a4:b0:ce:
6b:1f:60:c4:69:c6:7c:6e:3b:9d:ba:2b:dc:04:72:
41:c1:21:f7:85:e7:57:05:48:67:6d:4f:3f:7b:ba:
91:89:36:94:da:f7:0c:90:aa:7a:ca:38:46:75:6b:
97:1c:50:f5:ae:65:2f:ad:d8:44:d9:b4:f2:31:ca:
c3:e0:50:63:f1:c4:c0:2b:10:dc:63:ff:cf:16:4c:
8a:09:4b:4f:d1:03:41:39:be:13:4d:82:4e:b6:96:
f1:63:ed:d2:b5:03:9e:c6:3b:6f:ba:1a:ad:fd:7b:
03:9b:6e:36:30:a1:7f:10:91:ba:a4:f9:68:e6:2d:
0a:29:45:f3:8b:45:34:3f:ed:23:5e:af:99:32:4a:
03:de:4c:fb:86:66:30:92:84:d0:a9:2a:c4:e1:59:
e8:69:85:18:6f:d8:c5:50:d3:3d:c4:ca:7b:05:9d:
71:d2:25:3f:56:47:2b:28:e2:d3:0f:3d:5a:b8:7b:
ea:c3:2a:ae:2a:d0:72:c0:1f:29:49:7e:03:39:ba:
b3:b0:c0:66:a2:6d:82:66:bb:47:5d:bd:6c:4c:53:
d8:f2:6f:f8:51:d8:d8:22:2d:15:bf:dc:bc:66:5c:
1e:61:ce:a3:61:a2:ed:f8:89:ea:8e:7f:85:44:fe:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5F:CE:BC:17:56:F3:F6:EF:AB:1B:E8:C0:10:89:74:AB:35:75:34
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:53:77:8f:6a:c9:ce:5c:b3:8e:9e:6b:3d:43:63:4c:47:
e9:b7:3b:c1:c0:ef:14:e4:15:7f:a4:c4:d2:4d:66:09:24:2e:
57:f9:72:57:f6:f5:67:b4:48:d8:39:5c:a7:59:80:11:af:0d:
b7:93:a5:89:0f:12:ab:6b:98:44:96:6d:21:b2:d4:f3:17:f2:
f4:64:db:39:2f:67:9a:a8:ce:01:af:0e:cb:49:df:b8:a3:7f:
8c:bc:c2:59:3a:d5:05:a9:41:47:5e:aa:5b:aa:53:6a:e2:51:
a2:c4:d5:87:7a:ae:99:f0:7a:ca:05:d8:75:0d:74:8e:4b:61:
f5:e3:3d:be:83:96:11:be:e5:1b:e8:b3:71:65:ad:0c:70:ac:
15:6f:53:4e:61:07:b4:ba:1c:91:1c:b6:77:ff:ed:bd:28:36:
c0:1b:3d:91:f8:41:96:0b:dc:c9:32:94:2c:ff:ab:3d:68:b8:
db:5b:9f:c0:d4:3e:ef:20:28:db:f4:3d:86:b1:42:1a:f8:33:
ee:cf:13:73:a6:fa:93:6f:5c:fb:bc:53:48:7d:b0:ab:d7:d9:
36:bd:a3:9a:62:6d:e9:c0:ae:50:62:d6:bb:e3:f7:92:b3:64:
e7:08:54:12:91:8e:a4:df:d4:45:79:bb:76:5b:d5:87:95:70:
52:cf:e0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:43 2026 by rpki-client