Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
File: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft (raw, json)
Hash identifier: ncSumL9qlqRcfxLeZ4to1niU8zjuX7qpARvS+YyGaoI=
Subject key identifier: 72:8C:E9:DF:A3:CF:A0:5F:02:64:0F:5D:4F:25:76:AD:21:64:55:BE
Authority key identifier: D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
Certificate issuer: /CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Certificate serial: 019FAA88B9C5A8560B543F771CD77FF546A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
Manifest number: 1373
Signing time: Tue 28 Jul 2026 21:01:54 +0000
Manifest this update: Tue 28 Jul 2026 21:01:54 +0000
Manifest next update: Wed 29 Jul 2026 21:01:54 +0000
Files and hashes: 1: 1-pGUh5eoM3ZeUskzeaaKM7PLY6M.roa (hash: yFYmsEHjskSi49uzOqgkpPy9RGM1shgkNOzvgFJ7/8o=)
2: 2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl (hash: fz4GQOd5EKdiWRid48B3ZuR1HiH1BUkiU2EsjOX0ATQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:b9:c5:a8:56:0b:54:3f:77:1c:d7:7f:f5:46:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ee5a4c9f30498680e4d7b59ddb08f82bc6f4c7
Validity
Not Before: Jul 28 21:01:54 2026 GMT
Not After : Jul 29 21:01:54 2026 GMT
Subject: CN=728ce9dfa3cfa05f02640f5d4f2576ad216455be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:76:29:a5:be:29:c6:25:be:3c:c0:3a:f9:
dc:61:d3:3f:2b:09:3b:17:d7:af:91:75:4b:99:25:
58:5e:87:0c:ea:38:04:76:7c:30:d7:7b:34:7e:fe:
03:40:ac:cf:b3:e9:75:4e:c5:cf:84:8b:b2:2c:c0:
b4:89:d7:39:a4:6b:c6:51:ac:59:af:5b:29:64:52:
5c:dd:db:bd:26:e5:ad:15:f7:13:37:bf:e6:5a:ec:
ab:c0:04:d1:b6:b7:ed:37:4f:14:a3:68:98:7b:86:
dc:08:fa:52:a0:2f:7b:c3:64:d0:e5:85:55:48:84:
af:46:05:1e:db:4d:b4:df:87:13:30:12:3a:da:ce:
09:9a:76:00:08:34:b2:c3:83:ac:ab:7d:03:55:1f:
5e:cc:3d:d5:6a:49:27:3b:16:61:57:a5:c1:44:9e:
6b:b9:ae:1e:07:d5:71:9d:fd:bc:77:51:eb:7a:89:
48:a4:01:06:37:28:25:92:d9:79:b7:c4:c4:94:4d:
16:dd:c0:c6:15:a8:67:96:56:82:1b:04:e2:68:11:
9f:b9:19:dd:48:ff:10:75:73:c9:cf:29:6a:96:a9:
85:dc:90:09:2c:28:03:31:33:f7:c4:7e:98:b5:bd:
4a:c7:fa:1f:7c:58:1c:28:7e:ac:2e:06:27:6f:12:
12:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8C:E9:DF:A3:CF:A0:5F:02:64:0F:5D:4F:25:76:AD:21:64:55:BE
X509v3 Authority Key Identifier:
keyid:D9:EE:5A:4C:9F:30:49:86:80:E4:D7:B5:9D:DB:08:F8:2B:C6:F4:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/47a54a-637c-4486-b12c-7db9dfbc4ae9/1/2e5aTJ8wSYaA5Ne1ndsI-CvG9Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0a:8e:9b:13:d2:cc:49:e2:6d:dc:76:04:7f:3e:34:24:da:
7d:1a:3d:ec:27:6f:ca:8b:11:59:59:82:cb:73:1d:7e:f5:6b:
46:b3:2d:f2:2e:f2:11:8d:9f:fd:80:f2:17:07:2d:41:44:71:
28:08:7a:d5:5e:3a:6c:78:0f:6a:23:05:ea:cb:8d:01:79:18:
d4:dc:80:6b:90:37:ed:51:d1:53:9a:c2:58:02:3d:57:de:89:
bf:3c:09:dc:3b:e2:0a:87:30:ce:b0:40:cf:ec:c0:17:a8:31:
42:78:1a:94:bb:39:f5:a6:16:ae:eb:11:3f:f1:ff:43:b3:92:
ec:e8:96:f5:68:9d:53:0b:05:03:67:73:a6:24:80:a2:c9:f8:
67:bd:c2:5b:6c:e6:c0:0f:77:44:bb:01:7d:88:ef:82:bf:d2:
90:71:97:4c:14:3b:87:ed:43:7f:1a:02:85:25:16:49:52:52:
90:4a:ce:97:fa:b9:e4:bb:29:a8:a8:4e:14:ac:54:73:1a:8f:
55:0e:d5:1c:84:3d:8c:ef:00:e6:fd:78:4b:5f:6a:8f:bc:fb:
23:fd:da:c4:e6:d3:54:8e:52:3b:5c:4b:09:28:69:e5:4c:0d:
18:38:c9:72:dc:f8:34:d3:87:49:dd:ef:fd:1f:58:a5:ae:02:
80:bb:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:02:45 2026 by rpki-client