Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: ErD/kw8EmZ0o8VkCxc3lUz55OqPhQG8M4qGmFc02jyg=
Subject key identifier: 97:C9:5A:B4:C7:EC:4A:FC:7A:76:ED:92:F7:CD:56:39:72:3F:30:D3
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019DCE8E049DCDB885EE7D8141B2F7220366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 07FB
Signing time: Mon 27 Apr 2026 10:48:26 +0000
Manifest this update: Mon 27 Apr 2026 10:48:26 +0000
Manifest next update: Tue 28 Apr 2026 10:48:26 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: nxeoxqUEehiCcISIQ5Mo5aEtcb8xdJNi5hRlN0AlVzg=)
2: hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa (hash: x9s4Ba2Dbe9DV3ZvtPtaZKG9KItOC7ypOsJ8cSF3Nho=)
3: pizhYJ4zs9tgI22z1J406F_mIps.roa (hash: qx4VJrMM0/xDCca2bVCOiGZSDdojxdTIg2mqUQ7a9TU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:8e:04:9d:cd:b8:85:ee:7d:81:41:b2:f7:22:03:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Apr 27 10:48:26 2026 GMT
Not After : Apr 28 10:48:26 2026 GMT
Subject: CN=97c95ab4c7ec4afc7a76ed92f7cd5639723f30d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:63:ab:32:72:f1:28:ed:26:1c:b4:82:53:
ee:59:0a:38:5f:59:33:90:d5:54:5e:32:1b:61:3f:
1b:0a:db:56:c1:58:2f:a6:4f:f0:b9:a8:10:4d:b9:
f7:6b:d4:19:4b:42:25:62:e8:84:bc:c5:8a:eb:5f:
8f:06:4d:82:9a:3c:69:4c:94:63:cf:a8:17:74:b1:
ef:b0:6d:07:45:0f:15:28:a8:09:e7:cf:b3:63:b7:
5a:19:e0:e6:31:cd:13:0f:79:93:62:6e:5b:75:1a:
da:e8:7b:b3:c8:ec:13:b7:0a:05:2b:7a:00:3a:c3:
db:3a:a0:d8:9f:ad:a0:a9:2e:e0:0d:32:7f:3f:93:
9f:07:10:67:1b:90:1c:cc:cf:18:67:44:d1:db:b1:
05:11:84:42:0c:55:c9:57:28:7a:d6:b0:6a:57:b5:
70:78:22:b3:a5:ea:06:bc:a6:80:f3:d0:dc:45:48:
c8:a9:3e:17:88:57:60:c8:2f:f8:54:00:08:a4:37:
e6:75:7c:c4:77:a0:06:19:1f:1c:8b:55:98:94:f4:
16:42:c3:30:2d:39:3a:1b:6c:b9:43:c8:79:89:b0:
69:72:aa:b6:04:95:42:e3:2c:eb:6e:a2:e4:05:8c:
a2:39:e3:0c:21:4e:5e:8d:b7:08:f7:73:c1:c4:a0:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C9:5A:B4:C7:EC:4A:FC:7A:76:ED:92:F7:CD:56:39:72:3F:30:D3
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:32:2d:c6:f5:8b:3b:17:2c:f8:3a:de:56:fb:32:b6:50:4b:
9f:d0:62:0b:c0:69:67:35:cc:e8:77:90:37:4c:74:b9:cf:60:
37:78:53:34:f2:e8:ac:fc:ac:d1:9b:07:d2:48:43:e7:87:0e:
2b:8e:e5:bc:9e:67:e3:b4:55:a1:7f:c3:42:a6:76:1d:dc:fc:
4f:e7:1e:ff:3b:de:4f:e2:f3:56:69:a2:d8:f0:5e:9f:4f:fb:
49:90:de:5a:6b:84:20:c3:2a:5e:15:f5:b3:9f:56:30:36:37:
ac:78:ac:c4:f8:a9:a0:ad:62:0a:ba:e3:76:2b:52:47:f8:05:
91:f9:97:c9:cc:82:07:ca:7a:f0:43:8e:ab:36:71:93:db:f6:
d2:36:3f:36:eb:05:0f:7b:e0:eb:9c:b8:de:40:43:33:92:09:
3b:10:e0:c8:0e:01:fc:d3:1f:4e:bf:a6:5f:e9:4e:55:9e:16:
79:fa:f2:61:49:0a:f2:69:7a:24:a8:f9:32:da:8f:20:4b:ff:
48:a2:9a:b1:06:a6:5b:9e:81:2a:73:41:9b:32:c9:47:1a:e5:
82:6e:f9:e3:06:59:b3:f2:7a:8f:a1:37:59:4a:1d:07:e4:f6:
af:c2:8a:ff:4c:00:f7:7c:a7:ad:be:6a:74:68:1f:b5:d9:8e:
da:9c:b4:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OjgSdzbiF7n2BQbL3IgNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy
MGM0ODUwHhcNMjYwNDI3MTA0ODI2WhcNMjYwNDI4MTA0ODI2WjAzMTEwLwYDVQQD
Eyg5N2M5NWFiNGM3ZWM0YWZjN2E3NmVkOTJmN2NkNTYzOTcyM2YzMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0atjqzJy8SjtJhy0glPuWQo4X1kz
kNVUXjIbYT8bCttWwVgvpk/wuagQTbn3a9QZS0IlYuiEvMWK61+PBk2CmjxpTJRj
z6gXdLHvsG0HRQ8VKKgJ58+zY7daGeDmMc0TD3mTYm5bdRra6HuzyOwTtwoFK3oA
OsPbOqDYn62gqS7gDTJ/P5OfBxBnG5AczM8YZ0TR27EFEYRCDFXJVyh61rBqV7Vw
eCKzpeoGvKaA89DcRUjIqT4XiFdgyC/4VAAIpDfmdXzEd6AGGR8ci1WYlPQWQsMw
LTk6G2y5Q8h5ibBpcqq2BJVC4yzrbqLkBYyiOeMMIU5ejbcI93PBxKBbaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfJWrTH7Er8enbtkvfNVjlyPzDTMB8GA1UdIwQY
MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt
NmQ1NjBkZWJmN2IzLzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz
LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTItxvWL
Oxcs+DreVvsytlBLn9BiC8BpZzXM6HeQN0x0uc9gN3hTNPLorPys0ZsH0khD54cO
K47lvJ5n47RVoX/DQqZ2Hdz8T+ce/zveT+LzVmmi2PBen0/7SZDeWmuEIMMqXhX1
s59WMDY3rHisxPipoK1iCrrjditSR/gFkfmXycyCB8p68EOOqzZxk9v20jY/NusF
D3vg65y43kBDM5IJOxDgyA4B/NMfTr+mX+lOVZ4WefryYUkK8ml6JKj5MtqPIEv/
SKKasQamW56BKnNBmzLJRxrlgm754wZZs/J6j6E3WUodB+T2r8KK/0wA93ynrb5q
dGgftdmO2py03g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:47:48 2026 by rpki-client