Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File: 54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier: eQu0SfuhLvF8fy93bYUdwYqqZmwuvxg9J3SbAeq95uk=
Subject key identifier: E2:EE:CA:0F:16:C6:4B:03:05:68:B1:0F:15:B2:06:39:48:F9:3D:0C
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019FF48FC1242C330E314FA0C8CECE47079E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number: 1990
Signing time: Wed 12 Aug 2026 06:01:29 +0000
Manifest this update: Wed 12 Aug 2026 06:01:29 +0000
Manifest next update: Thu 13 Aug 2026 06:01:29 +0000
Files and hashes: 1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: L9cKRy4bZvDsIamiGccdes5MPzGLPh0DzH6G73EviSg=)
2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:8f:c1:24:2c:33:0e:31:4f:a0:c8:ce:ce:47:07:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Aug 12 06:01:29 2026 GMT
Not After : Aug 13 06:01:29 2026 GMT
Subject: CN=e2eeca0f16c64b030568b10f15b2063948f93d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:88:b8:c7:81:4f:f3:e4:af:af:a6:4d:bf:85:
b8:cc:89:0a:f4:9c:36:c7:5b:f3:ae:20:a3:90:9f:
d0:ed:15:a3:24:b8:2a:0a:f8:de:c8:24:ec:c6:3b:
7e:a3:0f:6f:dc:7e:c0:1f:7a:80:14:35:f9:95:e3:
68:80:ef:68:55:bc:82:5f:cd:2c:95:a2:e6:9d:e6:
c8:80:81:db:6d:ee:5e:a8:e0:85:80:9f:de:7a:e2:
44:c9:c6:65:1d:aa:75:c7:fb:fa:58:19:89:27:0d:
c5:54:c5:8d:43:5d:fd:51:42:fc:d8:00:5b:64:2b:
ac:46:ee:15:1d:b1:30:a8:83:81:a1:af:d3:f7:77:
90:46:30:62:93:45:29:76:77:3f:3f:bc:6a:3b:3a:
a5:5d:44:c4:fd:78:97:4f:75:aa:ac:c3:35:5a:d0:
2c:da:cd:99:2e:f3:fd:8f:7a:ab:1f:04:0f:74:39:
16:54:12:1a:96:c6:58:77:d9:b9:a9:ed:3a:3d:34:
6c:a3:c4:32:fa:19:4b:99:5d:d6:59:c1:67:ec:d2:
9f:41:61:5b:99:7e:bd:9d:8e:b5:8e:eb:06:53:8b:
e7:75:19:1c:de:e0:76:36:f9:fc:fe:00:fc:70:3c:
9e:99:03:4a:f2:14:63:8d:b2:71:df:7d:db:c2:3f:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EE:CA:0F:16:C6:4B:03:05:68:B1:0F:15:B2:06:39:48:F9:3D:0C
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3c:93:63:63:d9:62:56:8f:5a:b1:bf:47:86:d9:24:ff:6c:
03:78:6b:18:d2:54:77:20:98:0a:82:90:6e:47:fd:32:97:1e:
d6:3a:90:52:9a:e4:e2:dd:37:b7:63:d1:55:60:76:08:35:11:
0e:9a:a2:e2:d4:27:ae:23:0d:31:b6:c2:ea:d2:3e:56:7c:da:
3e:3f:43:d2:96:4c:92:0a:d8:69:5a:61:bd:b6:27:0b:3f:5b:
0e:a1:a4:61:10:ff:f4:fe:8e:30:ab:2e:90:e0:84:af:cd:61:
b1:fc:86:d7:19:24:4b:ba:78:0b:3f:72:4f:4a:30:ca:39:c2:
07:4d:2e:a2:da:cb:7b:c6:89:94:b9:c7:2c:ad:28:ca:3e:5b:
8f:88:55:21:22:02:2c:b7:21:d7:06:f6:f2:78:37:2f:3e:57:
6a:74:5c:68:59:82:d5:f6:3c:f0:d1:58:e9:60:51:89:d6:eb:
42:a6:81:cd:cb:f0:03:45:7b:d8:d8:50:ab:14:19:1b:3a:ee:
ef:2f:18:d8:a9:df:3d:63:59:7a:a0:58:e4:d9:7e:1c:59:fa:
aa:75:d5:ac:b8:10:88:c6:bc:c2:a9:db:b5:31:94:2b:ea:9b:
3f:f5:c5:04:9d:83:2f:af:02:33:4e:9c:ec:6c:b8:79:df:9b:
78:d5:b8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:14:27 2026 by rpki-client