Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: ka19xNWz4KKGAYX7udyPOxZePabKGoLuqplaf/SGj98=
Subject key identifier: E0:F7:B3:0F:4D:50:90:F4:EA:37:BD:C3:9F:94:DD:08:B8:D8:B7:AA
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019F17553EC2CA7ED089EA347EB022AAEA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 08A8
Signing time: Tue 30 Jun 2026 07:01:30 +0000
Manifest this update: Tue 30 Jun 2026 07:01:30 +0000
Manifest next update: Wed 01 Jul 2026 07:01:30 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: 9AmqUUZ8RCNVeWcsWhU8T6alpvyCWreOdzxprXiEaTw=)
2: ZW49T-EF9sD4oMGX0teIq89-wdQ.roa (hash: ecFVWg/f7sqDB7B5E7OkA3m4Sw9Gn9wf9T3KAIQS1B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:3e:c2:ca:7e:d0:89:ea:34:7e:b0:22:aa:ea:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Jun 30 07:01:30 2026 GMT
Not After : Jul 1 07:01:30 2026 GMT
Subject: CN=e0f7b30f4d5090f4ea37bdc39f94dd08b8d8b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:44:4d:da:18:64:98:21:94:7f:52:ad:ba:
5b:ed:04:d2:af:94:14:cc:02:f9:3c:31:16:85:d0:
ae:f1:74:db:b1:6f:ae:f9:14:bc:6f:54:db:32:49:
84:77:02:9a:cb:56:00:5a:ae:33:57:96:59:d4:e9:
6f:e1:9a:da:3a:a6:a8:3f:1d:19:e9:38:93:79:03:
0b:7d:57:13:af:1b:9d:8c:5b:7c:a4:c5:9f:87:d1:
1b:86:1b:f9:f9:22:46:ae:6a:c0:f5:15:75:2a:cd:
b6:10:f0:93:69:43:9a:e9:cf:af:83:54:27:cd:16:
54:89:34:86:6b:15:df:10:94:0b:1a:1d:88:4b:d0:
db:58:97:20:6d:c1:33:b3:d8:51:f6:b1:78:50:af:
73:78:46:93:dd:86:70:3e:ab:d8:b2:22:4a:e6:9a:
6e:33:99:48:30:86:13:16:d3:cd:40:d9:9c:42:41:
a8:c6:eb:c0:b0:f3:30:65:fc:59:84:e6:49:aa:06:
33:cf:67:6d:36:11:7a:d4:3b:a2:e5:48:dd:19:4a:
1a:ef:fc:2d:f4:ed:45:79:a0:17:34:b4:a2:a6:90:
7c:f8:c2:eb:0d:28:0d:39:b7:a0:43:06:e4:5c:ea:
9e:9e:74:89:37:d0:c8:b4:4e:70:02:e9:2a:3d:ae:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:B3:0F:4D:50:90:F4:EA:37:BD:C3:9F:94:DD:08:B8:D8:B7:AA
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:04:5a:df:08:3f:49:2a:51:27:04:ef:e8:6f:df:74:3d:62:
63:17:01:a9:94:7a:5c:e3:82:4a:b4:27:5f:16:d8:e5:01:57:
9a:5e:37:07:ca:db:03:b9:c5:a8:13:bd:53:5f:9e:07:b1:7a:
18:82:9c:5d:99:58:7e:b4:2b:80:27:a6:ef:85:f7:1f:5b:1f:
e0:dd:2b:ce:8a:6b:f0:1c:a0:be:b6:a4:83:a5:df:39:28:63:
04:74:74:7f:49:60:e7:aa:98:af:6f:7d:30:a5:cf:be:83:3a:
7a:e9:4b:c9:d3:01:13:2b:62:f3:b3:cd:65:41:64:32:cc:43:
30:69:5d:3f:ea:bb:6a:20:c2:40:30:87:19:26:16:a5:00:ec:
78:2c:03:ba:c0:61:7e:34:e6:19:ec:34:8d:bc:ab:b0:65:1a:
c1:7d:0e:02:0f:c2:46:9f:87:fd:47:cb:73:8c:62:5f:85:ab:
42:08:98:a8:6c:e9:9f:91:cd:70:b1:ab:90:72:a2:ad:c7:12:
1f:cc:18:a4:24:3c:59:d2:7f:61:31:a6:22:33:25:2b:f9:9f:
4d:fa:5b:e1:d8:7c:f3:25:8b:a3:4c:07:97:47:25:1b:c6:27:
72:e8:28:98:5b:7d:d4:6e:23:32:92:20:26:29:9a:5d:e0:78:
90:86:59:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:18 2026 by rpki-client