Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: HF2fi+sjRbDFaThnoHivd1QmdhBY26uimIdYrRJ5qnQ=
Subject key identifier: D2:F5:6C:BE:37:94:1B:CE:BE:38:F1:12:D0:92:D3:6D:D6:D6:39:38
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019FAD51A31FBC3DABCBC4F2742D9A98E820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 10:00:36 +0000
Manifest this update: Wed 29 Jul 2026 10:00:36 +0000
Manifest next update: Thu 30 Jul 2026 10:00:36 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: YUu7Ryl+6qIHwbD2rrw5/6phWqm92hOGMU/I8kOJmFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:a3:1f:bc:3d:ab:cb:c4:f2:74:2d:9a:98:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jul 29 10:00:36 2026 GMT
Not After : Jul 30 10:00:36 2026 GMT
Subject: CN=d2f56cbe37941bcebe38f112d092d36dd6d63938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b4:69:2d:ad:ba:2e:02:d3:fb:b2:d3:2f:ee:
62:70:bc:0c:72:2a:31:6c:e3:fc:2a:19:97:9e:10:
33:5d:31:a3:c9:4e:ae:bd:b0:7f:91:bd:48:4e:b4:
b4:8f:61:4b:23:8b:dd:24:06:44:e8:11:70:f3:52:
f4:14:9c:a3:42:db:d1:0d:20:a0:12:cf:f1:97:67:
68:e2:bd:11:4a:bf:e4:e4:d5:de:ef:cc:7a:35:26:
c8:27:91:10:29:8c:6e:bd:69:27:74:ae:e5:27:c0:
10:9d:79:cd:ac:b5:12:9b:56:b1:4a:26:a7:6e:f5:
d6:ef:3f:a7:23:c7:91:eb:cd:72:ce:e9:70:dd:9a:
fa:e8:8d:37:cc:b5:5a:bb:35:a5:45:c2:46:d5:23:
87:5d:92:bc:a5:e4:59:0b:e6:6e:ed:07:0d:6a:24:
a8:9a:29:b4:49:5b:d9:b9:b7:1f:f5:d0:6f:ee:da:
32:39:d4:b4:33:33:02:f0:dc:3f:b3:7d:9a:e5:b0:
1e:56:79:86:e1:78:02:c3:1c:7e:83:c8:9a:a6:2f:
4d:f9:1d:24:a4:a2:08:60:a9:d4:fe:04:ab:05:eb:
0c:46:ba:40:eb:39:3a:a9:ff:6b:d7:7f:a7:ca:4b:
7b:81:6f:a5:f2:77:2f:b6:a5:5f:4d:2d:3c:b7:d0:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:6C:BE:37:94:1B:CE:BE:38:F1:12:D0:92:D3:6D:D6:D6:39:38
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4b:39:ae:fc:71:49:49:2d:32:77:00:24:f4:a5:de:8a:f8:
64:c3:c0:d0:b8:34:f2:3d:20:b0:81:9f:1b:5a:01:86:b1:9f:
53:e7:9d:4a:8c:a9:18:77:94:40:c8:d6:f0:aa:6e:47:11:ea:
c3:91:4d:cb:c8:69:b0:ff:a3:6f:63:88:f6:78:e9:ed:d2:86:
75:ed:5e:cb:20:a2:ba:ae:7b:44:c7:c3:d1:f0:50:ba:11:ae:
7f:22:34:89:b5:51:42:3d:06:72:37:a9:42:65:e7:46:92:93:
c6:b8:c7:ac:8c:f7:3c:91:00:22:d7:4b:d6:ee:5f:e5:4c:7d:
b6:1b:96:56:ab:79:48:85:ec:fa:74:06:51:66:f0:fb:0d:12:
47:74:98:ba:56:0c:d1:52:21:ec:e1:8a:1c:6a:7d:62:29:70:
09:84:f6:9d:3e:ac:27:3a:60:6d:23:23:65:2a:a4:eb:aa:20:
37:ed:cd:e6:7a:cc:53:30:96:fb:38:3d:ee:e8:ec:aa:c1:af:
92:93:23:ec:db:55:35:4d:05:b2:e4:54:ed:e9:50:d7:91:a3:
22:d5:47:fb:05:8b:75:33:6d:2f:c1:9c:09:61:96:a2:1b:20:
fe:ec:47:be:3c:0a:76:3f:f1:9b:f0:b4:65:61:e0:a3:0c:cd:
a6:23:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:47 2026 by rpki-client