Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: DaKJ0pU6T+KRMm2hudwpnqO+kg4PnymlNMLa0hfvYdg=
Subject key identifier: BA:F7:EA:7A:6D:1D:44:20:16:AC:87:8C:BF:FD:43:A7:FB:21:1A:93
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 019FA975D5962B575D984916BCC169011CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 1902
Signing time: Tue 28 Jul 2026 16:01:39 +0000
Manifest this update: Tue 28 Jul 2026 16:01:39 +0000
Manifest next update: Wed 29 Jul 2026 16:01:39 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: /tEeH61y3+y9aGOQAkXDdq0HP2UXoYCVAxkwyrqDkxQ=)
2: xhpLteHeEuI9N2i0WjCkJHYwXtM.roa (hash: ZhHw/D8clg9QeWX4KlvzTONGmYlvYOv2tFZIA342W2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:d5:96:2b:57:5d:98:49:16:bc:c1:69:01:1c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Jul 28 16:01:39 2026 GMT
Not After : Jul 29 16:01:39 2026 GMT
Subject: CN=baf7ea7a6d1d442016ac878cbffd43a7fb211a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:9b:39:f7:cb:ac:56:d7:2e:39:e2:90:22:
c0:40:c4:44:03:8b:d0:fc:5d:f1:f5:2c:e4:07:bc:
f9:95:da:8d:61:c0:46:5a:d2:ad:73:e8:13:64:b6:
b3:5c:0b:23:90:61:66:92:0d:34:7c:34:2c:29:e3:
27:11:30:12:70:85:07:89:58:cb:e0:46:5c:33:46:
ab:d2:a0:ee:6e:d2:7c:17:d4:38:3d:78:bb:6d:0c:
09:33:ff:da:26:26:b0:e5:59:c2:04:a8:63:2f:93:
f3:1f:42:6c:74:3d:2a:df:51:4d:79:12:2a:cc:f4:
cf:99:7e:86:2b:8e:4f:72:ee:37:f8:b8:7a:3e:12:
d3:87:97:99:bb:d3:1c:6e:39:f7:98:b3:43:0e:ed:
02:4b:d7:cf:fa:24:c0:2d:f2:a4:be:ee:85:95:c7:
a5:fe:16:c0:33:af:f4:b5:45:46:b3:f3:f2:0c:7d:
c3:12:c0:01:6d:d4:0e:9d:d3:2d:34:68:f4:b7:d9:
5b:7d:ac:1d:58:a6:9c:9d:81:36:94:5a:e0:ea:79:
89:eb:58:d8:a0:52:0f:b0:8c:b8:d5:11:c4:25:5b:
1b:1b:ee:30:1e:cf:4c:05:4e:1c:f5:ba:4d:f9:a3:
27:00:99:81:f1:a2:c7:a4:5d:5b:f3:42:52:4a:24:
0e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:EA:7A:6D:1D:44:20:16:AC:87:8C:BF:FD:43:A7:FB:21:1A:93
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e0:97:da:6c:a2:d9:38:a2:97:93:ca:05:83:d4:53:99:60:
c3:03:b9:5e:8e:2e:46:ba:bc:46:54:af:5f:12:9b:cd:e4:95:
2f:73:1d:b7:60:43:79:15:4c:f2:ed:dd:6e:f5:59:d7:9e:0f:
49:bf:fb:b3:78:39:e6:72:a4:2f:24:dd:6b:b8:5b:65:61:67:
d8:1a:b4:08:04:cd:52:f5:ef:94:cb:1f:2f:5f:f4:2b:c1:cd:
47:99:2f:5a:97:c0:6c:17:a5:38:19:ff:7e:c1:49:ad:22:19:
90:de:d9:3d:82:67:10:e2:f2:2a:76:85:1c:4b:91:17:1d:09:
a1:05:e3:d2:a7:3b:3d:e3:68:6f:8a:81:24:27:1e:db:25:47:
a0:a9:ff:0f:90:b7:a8:a8:e9:ea:94:b7:a5:0d:bc:cf:72:3c:
08:0d:08:f5:49:1f:3d:07:81:79:56:2e:33:b3:42:56:8a:2c:
ee:fd:8d:15:8f:d4:67:6a:1a:fd:d4:27:ec:bf:86:f8:85:3c:
75:a3:d7:11:34:1e:25:86:66:f7:1a:1d:38:f7:51:0b:4d:2f:
25:24:fb:46:c0:d7:4b:db:17:4f:e8:84:25:6c:e5:8c:33:6c:
33:7f:a3:28:fe:23:4a:ad:d9:55:68:80:7b:89:a2:b7:d9:06:
bb:a3:3d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:20 2026 by rpki-client