Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: eaOjjluyvbtAmS6d7X0xYg5ijTNCJLBMlk7eXNpJTGs=
Subject key identifier: 26:94:B5:74:5F:10:24:C8:FE:18:6B:5B:75:B8:DF:84:F3:90:2F:5E
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 019FAE641FF6BF20CC4B3ACA6DCC61CAD905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 06EF
Signing time: Wed 29 Jul 2026 15:00:25 +0000
Manifest this update: Wed 29 Jul 2026 15:00:25 +0000
Manifest next update: Thu 30 Jul 2026 15:00:25 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: IblgRPkEeogXitdAqk7C5sjfT2iZJbvjqvimkWl3F+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:1f:f6:bf:20:cc:4b:3a:ca:6d:cc:61:ca:d9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Jul 29 15:00:25 2026 GMT
Not After : Jul 30 15:00:25 2026 GMT
Subject: CN=2694b5745f1024c8fe186b5b75b8df84f3902f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:e0:86:a5:2e:8a:47:a4:75:5a:1b:72:d2:
83:e9:f0:c7:d7:4b:51:dc:3d:78:6b:b4:04:c3:41:
00:ea:1b:88:81:6c:0f:e5:65:ec:da:87:ff:5e:ba:
18:2f:ef:9a:e1:0d:cb:97:a2:cf:52:f4:ce:38:76:
e9:31:a9:ca:5a:42:f5:76:f1:9e:86:ab:f7:f8:d8:
fd:23:f4:16:d7:9f:16:2d:da:e9:ad:72:c5:58:ee:
b5:21:b3:4f:7f:a9:41:10:93:98:ae:39:d4:14:89:
a1:b0:7e:bb:c6:3b:85:2f:74:74:05:52:ae:c7:5d:
83:65:1e:f2:fe:8d:62:eb:45:c4:05:f5:04:d0:ac:
f6:8b:60:5b:f2:0f:f5:64:d4:e5:45:3e:8f:18:02:
7e:b2:74:a8:11:ab:df:07:f4:6e:35:a9:cd:a6:8d:
5d:18:fa:f5:73:62:3c:aa:c7:a4:15:de:d2:4e:be:
0c:f0:5c:a0:a2:cf:5e:e5:f1:ea:6f:46:99:c5:3b:
9b:6b:62:c0:76:cf:99:ee:26:68:3c:3d:50:60:01:
9e:fc:b0:9d:c9:10:60:d5:db:f0:50:e5:47:a9:15:
00:51:b1:e1:47:2a:08:7f:4b:8f:4f:cd:b3:f2:05:
e8:2f:9f:d3:e9:bf:e2:f5:27:8a:e3:89:b8:57:fe:
32:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:94:B5:74:5F:10:24:C8:FE:18:6B:5B:75:B8:DF:84:F3:90:2F:5E
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:24:5d:1d:2d:3c:ea:11:5f:16:74:e6:8d:fd:cf:41:3e:1c:
95:70:e2:f8:76:f1:57:a1:e1:76:7d:db:49:da:64:16:b4:75:
85:20:59:72:df:22:f3:f5:cb:c9:2b:0e:91:27:e9:c5:be:40:
d0:82:03:55:1d:7a:2d:b2:aa:46:c6:2a:39:52:e3:04:4d:c9:
8f:26:48:03:48:83:d4:12:cf:a1:9d:d7:a1:5d:3f:f0:9b:9e:
4c:e6:d4:18:ad:bf:c3:ba:00:59:df:81:2e:f7:f7:d6:00:d7:
b3:f5:77:d3:0b:b4:03:68:bc:83:66:40:a9:44:19:69:90:a4:
22:16:e2:47:58:3d:22:8d:f7:f0:ad:e3:a3:f8:d6:c0:b8:77:
10:f3:35:c0:b6:8f:8e:14:91:1f:21:d7:1b:9c:87:a4:bf:3f:
56:fa:96:03:7a:17:81:ce:8a:10:6b:24:14:09:59:a3:27:af:
36:6e:80:fe:1d:75:6b:08:bd:6b:2f:25:b4:41:b6:56:8f:b0:
1d:e7:de:eb:5b:86:59:a1:52:2c:0a:e3:c1:4c:48:4c:e5:21:
e3:ce:26:4e:7e:6c:22:dc:da:b9:fc:6d:c3:3a:3b:e4:51:ee:
7e:76:a9:52:5c:33:4a:f5:71:a8:62:55:6a:88:a0:5c:a6:22:
2e:f8:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:34:01 2026 by rpki-client