Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
File: 2icRPbVbY7Z6SmJ6cAior8K8xCw.mft (raw, json)
Hash identifier: rQxNJkVj3ycLZXsTEYe3vIjooDc1WPBDNAa038CXR4o=
Subject key identifier: EF:7A:8A:2C:66:12:3E:6B:02:E7:EC:57:6A:D0:58:1F:AC:6B:D9:C5
Authority key identifier: DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
Certificate issuer: /CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Certificate serial: 019FAABE3C1DD6A923B42053046202BBABF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
Manifest number: 0FC5
Signing time: Tue 28 Jul 2026 22:00:21 +0000
Manifest this update: Tue 28 Jul 2026 22:00:21 +0000
Manifest next update: Wed 29 Jul 2026 22:00:21 +0000
Files and hashes: 1: 2icRPbVbY7Z6SmJ6cAior8K8xCw.crl (hash: nD7JoWKjUl3rfS9arFjl2RT1znujGTSQLQ6l/RSsSXY=)
2: FaJiHtix7PXUuvp8SlZYejxVheo.roa (hash: HY5OE1Yyp0dIsQtbFU8ZrzweQgS1+q5kZbWUEg+8bhg=)
3: GzxhvAwUlgAIOl_VkG8zg7Y7jic.roa (hash: E2v5PpPkhMZWx3uk2NgjN21dhfHZyfjVAMoqRq8//EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3c:1d:d6:a9:23:b4:20:53:04:62:02:bb:ab:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da27113db55b63b67a4a627a7008a8afc2bcc42c
Validity
Not Before: Jul 28 22:00:21 2026 GMT
Not After : Jul 29 22:00:21 2026 GMT
Subject: CN=ef7a8a2c66123e6b02e7ec576ad0581fac6bd9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:f9:72:ad:4d:a4:6e:d9:dd:f8:17:ed:f4:
af:32:6f:43:3a:bc:bc:d4:fb:5a:75:99:e1:62:ad:
fe:e8:fb:51:7d:93:c4:ec:d4:69:3b:c9:4b:fd:9c:
8a:27:67:95:97:2c:50:f0:a7:4f:67:00:6e:00:3a:
fa:ed:22:db:97:5d:bb:79:f6:b9:43:5a:2e:5d:08:
db:65:86:c4:be:64:6d:4a:f4:df:12:5d:69:f2:82:
d1:cb:33:a8:d1:72:bd:fe:b0:18:bb:d7:89:3c:ce:
2d:63:7f:a0:08:15:3f:90:18:30:c4:30:f0:96:d5:
6d:5f:c9:59:1c:a8:a4:23:7d:95:60:92:a0:8f:19:
08:d3:54:ee:80:39:52:ad:c4:36:29:91:b0:7f:cf:
58:d0:14:6c:3c:a4:f5:36:ea:22:37:64:7d:09:81:
e5:21:13:28:f8:4d:cc:bd:0c:7d:8c:93:e8:3b:75:
14:3f:5d:30:84:b8:6a:dd:d0:c2:0c:4a:e2:cd:a4:
86:78:7f:3f:70:d1:a0:cb:f5:b4:ec:7b:8f:6a:a0:
27:78:18:87:0e:07:c3:b0:81:4c:1b:da:6a:99:32:
62:30:80:2c:2e:cd:66:c4:5f:c9:ad:95:6c:4b:5c:
eb:aa:60:0a:86:c8:0a:69:a8:7d:f9:d9:b9:98:7f:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:8A:2C:66:12:3E:6B:02:E7:EC:57:6A:D0:58:1F:AC:6B:D9:C5
X509v3 Authority Key Identifier:
keyid:DA:27:11:3D:B5:5B:63:B6:7A:4A:62:7A:70:08:A8:AF:C2:BC:C4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2icRPbVbY7Z6SmJ6cAior8K8xCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a5f931-6fa8-4cf0-8f97-23b28f39a602/1/2icRPbVbY7Z6SmJ6cAior8K8xCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:23:c4:93:84:f2:b9:af:51:d1:fe:17:70:10:06:b3:9e:
ab:e3:d2:b4:ea:09:74:6f:c0:ae:30:df:98:af:68:77:4c:75:
81:f6:ba:65:91:da:4a:9a:d1:47:d5:b7:d9:b2:40:dd:c2:37:
d8:af:2f:5b:9e:be:9c:91:11:f6:00:36:fc:59:a7:7e:f6:11:
f3:ca:e5:8b:f3:03:02:cb:01:b1:7f:02:40:07:52:05:74:bf:
8c:5e:1f:f7:c1:bf:69:d4:fc:dd:99:bf:68:02:72:bb:f1:33:
b6:62:f1:ab:48:e1:18:5c:a6:9f:60:a0:88:5a:de:1f:59:99:
b1:d4:10:86:ad:56:00:85:34:32:d7:e3:12:7e:0d:dd:d1:fa:
a3:72:07:e8:be:c1:d1:dc:48:e0:df:28:e2:54:2e:11:4d:f2:
b2:b4:ed:8c:da:dd:63:ca:70:83:b0:19:aa:ed:d5:31:71:bf:
83:a5:bb:56:a6:2f:fc:b4:51:e4:ac:1f:0e:8f:91:5c:c5:87:
34:94:8c:01:87:f9:bc:77:9b:ba:4e:fa:0d:a5:19:33:da:ea:
59:18:c1:1d:e6:84:1e:14:a2:d8:6c:aa:95:08:10:d8:73:39:
a6:f9:8e:c2:08:a8:a6:34:9e:f1:01:14:03:df:7c:88:d0:bd:
fb:0a:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:19 2026 by rpki-client