Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File: 2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier: qIr/EZjfKReiYOiJP6cJpr/7/c699yoaYTh6Q4zRKSM=
Subject key identifier: 63:7E:BA:31:95:E7:0B:AF:1F:E0:5E:8B:91:D5:C5:EC:A6:F4:30:2B
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial: 01A0005D09B381FCD583D0BCDCAEE6B07778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number: 18EA
Signing time: Fri 14 Aug 2026 13:01:32 +0000
Manifest this update: Fri 14 Aug 2026 13:01:32 +0000
Manifest next update: Sat 15 Aug 2026 13:01:32 +0000
Files and hashes: 1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: tyOyvBNbtEr7zos0JW+H7xjM+dkh9isqk6iB2SUHSIM=)
2: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (hash: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:09:b3:81:fc:d5:83:d0:bc:dc:ae:e6:b0:77:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Validity
Not Before: Aug 14 13:01:32 2026 GMT
Not After : Aug 15 13:01:32 2026 GMT
Subject: CN=637eba3195e70baf1fe05e8b91d5c5eca6f4302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:f0:72:5b:e9:77:b9:ad:18:77:e7:a6:db:
a3:94:da:57:7a:2e:dc:05:56:03:95:d4:a2:59:43:
75:4c:ae:b6:ec:fa:80:03:f6:0b:74:8a:0c:03:ca:
79:06:82:0a:36:7c:e7:2f:f0:86:3d:16:56:ee:1c:
18:19:03:37:55:40:4f:b8:9d:60:ba:12:38:3b:b6:
9f:c2:8c:8d:29:0a:dd:35:91:d7:b9:b7:e8:44:9d:
9e:9c:58:52:f8:7b:fd:20:9d:5d:fe:79:22:ed:95:
8b:0b:e2:86:1b:9a:55:7d:eb:42:20:4b:e9:f5:dc:
98:6a:13:8f:17:0a:3d:09:fe:30:37:84:ec:71:9c:
45:40:bb:1a:76:34:d4:11:de:1b:60:f8:68:f3:53:
95:26:80:11:a4:6e:a3:fd:42:f3:8f:b6:55:d3:30:
d1:f1:71:04:f0:5a:0a:9a:cd:0c:4a:7a:fd:8f:4a:
f7:bf:ea:85:31:4d:5e:5d:33:da:23:ba:1e:cf:ce:
57:72:f1:33:f4:95:d5:e3:b0:0c:cf:51:09:bf:01:
10:09:cb:33:e7:5c:53:ca:1a:7b:bb:be:d5:0f:41:
02:0f:de:e0:b2:78:80:fd:10:83:45:17:ac:71:27:
ff:0b:1e:bb:7f:e9:c4:d4:77:84:55:81:52:00:38:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:BA:31:95:E7:0B:AF:1F:E0:5E:8B:91:D5:C5:EC:A6:F4:30:2B
X509v3 Authority Key Identifier:
keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:fe:b6:3c:46:16:ec:81:0f:19:a8:72:49:77:a7:9a:4a:71:
a9:9b:0c:db:c7:ce:c4:55:d2:14:f0:dd:22:82:b7:0b:be:33:
48:02:4c:61:e3:3e:08:61:a6:20:56:7a:82:ff:2f:55:b8:2a:
ef:9c:2b:0e:94:3f:86:61:92:85:d6:4c:46:ef:df:38:f8:ed:
ca:05:6b:e7:91:6a:f3:7a:df:77:46:a1:0f:f7:01:88:f1:d5:
9f:d8:cc:77:dd:de:fe:44:62:7f:a6:a0:7b:fe:dc:f6:51:ea:
45:c1:cc:1e:48:1f:14:c8:4e:6e:ce:c8:9e:91:99:2b:f8:5b:
22:16:2e:b2:c9:21:36:89:7d:ae:23:0b:79:35:ba:a0:87:d5:
47:b8:8a:4d:0b:69:68:f2:84:c8:a6:c2:67:39:13:73:33:f8:
9b:63:58:d8:d0:a5:d3:8c:a1:d8:79:b2:f1:57:a6:aa:2c:22:
0e:53:5a:1d:dc:47:ea:23:4b:d9:12:93:0a:57:5f:48:97:99:
a4:e3:bd:a9:36:7f:92:7e:b6:53:c4:24:c0:14:7a:ea:2b:b7:
a1:fb:f9:02:d6:5b:24:03:6d:de:28:52:bb:48:62:fa:2c:16:
81:75:13:41:f9:04:f8:e2:4f:bc:03:f8:c3:c2:50:9f:34:55:
52:88:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:34 2026 by rpki-client