Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: ekqHzDJm66Ar8Jnus4cvaDVPUoV+ZqvqV2kM+tceXFI=
Subject key identifier: 87:99:D1:28:70:5E:42:E2:57:E2:22:7E:76:8B:AD:6C:1B:46:D2:26
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 01A03D4DB4347B90CF1D5BD96C30D1C58AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0F3F
Signing time: Wed 26 Aug 2026 09:01:37 +0000
Manifest this update: Wed 26 Aug 2026 09:01:37 +0000
Manifest next update: Thu 27 Aug 2026 09:01:37 +0000
Files and hashes: 1: 4hpP6F9Wk_D0BrQ0W0jMsekS0sE.asa (hash: LoVQALkE5ii1io18aQx/XHtpWUH22jurmHwu9Ab8L28=)
2: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: eUiHiLWRvJ8HLGh1ELRDpUKCXSKVAf8TzCqf4959pOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 09:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:4d:b4:34:7b:90:cf:1d:5b:d9:6c:30:d1:c5:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Aug 26 09:01:37 2026 GMT
Not After : Aug 27 09:01:37 2026 GMT
Subject: CN=8799d128705e42e257e2227e768bad6c1b46d226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:12:3f:2e:5e:d6:e9:32:11:2e:64:5f:39:
2f:06:77:47:f2:db:22:58:c6:e8:07:ec:a4:05:11:
6e:66:4c:6c:dc:30:12:49:a6:7b:db:68:ad:00:40:
5c:92:68:26:da:b9:eb:62:bb:25:19:03:86:42:fd:
b0:2c:ea:bb:ca:19:6c:d7:92:86:3f:ce:ee:5e:4e:
69:62:98:c1:61:f7:88:22:86:0f:35:a8:60:1a:59:
e1:40:27:3c:9d:e5:0d:e9:37:d1:19:ee:b4:6f:5c:
4b:b6:e5:92:f9:96:78:15:87:1d:12:64:b5:83:17:
c2:bf:ed:1c:ab:17:21:6b:7a:2f:b2:02:28:ad:f2:
db:24:77:19:37:13:16:47:46:6f:04:6e:6f:e4:c1:
85:61:bb:8b:76:ed:ba:f5:07:b9:34:89:65:36:ff:
3e:3e:ac:8a:b5:92:bb:f4:b1:80:25:2c:58:15:75:
10:83:ef:d6:43:69:f3:f0:d5:d3:41:c4:b0:02:62:
32:8f:3b:a1:86:11:19:6e:7e:b7:c5:be:2e:1b:d1:
ef:d1:a2:6d:88:19:41:b2:47:50:d3:56:4b:42:d4:
f8:fe:86:37:a2:f8:c0:df:7f:c0:dd:58:be:f2:20:
81:fa:b1:5d:ff:44:c4:04:bb:db:55:8c:fe:3c:98:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:D1:28:70:5E:42:E2:57:E2:22:7E:76:8B:AD:6C:1B:46:D2:26
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:5b:bb:8f:ec:be:fe:c8:47:e3:07:f0:86:96:b4:f6:fb:
c7:06:57:cf:c0:4f:41:ba:b7:22:0b:6d:f1:a5:a4:df:f2:05:
73:b5:87:3c:a0:8c:bc:f2:ac:96:ab:7c:73:aa:5a:ea:4b:a1:
6f:aa:2f:5c:d2:32:5d:c9:ff:47:af:f1:36:00:c9:ce:e4:f3:
79:73:c9:ab:f1:27:8c:65:83:fb:a2:bc:0d:5f:3c:39:07:21:
2e:3c:fd:6f:53:c5:69:25:ee:e9:a0:15:d3:73:77:82:d7:10:
55:98:a7:1c:62:e1:d9:f9:4f:24:47:eb:ce:de:5e:8c:34:c1:
26:74:cc:e3:85:ad:a8:ee:b9:99:f0:07:22:96:9d:53:ff:4f:
c1:58:40:2a:8d:cb:42:dd:aa:7f:f8:12:12:ee:e3:21:14:59:
d0:44:99:54:1c:68:52:d8:b8:89:ad:25:ba:5f:db:70:05:0f:
3b:21:44:43:21:b5:ad:26:66:c5:ab:52:18:ed:6a:e9:be:d7:
4e:cd:6f:3b:24:88:cb:0f:61:c0:cd:5b:44:47:2d:ef:50:72:
4b:27:2a:9b:72:67:ea:18:cf:e2:18:a6:e0:e9:51:90:0e:7d:
c5:8a:73:93:31:7d:a4:53:03:7b:da:df:71:55:df:fa:bd:36:
32:2f:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:01 2026 by rpki-client