Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: QElQSYwMBBlg9036zH4Vp1d4yjsEpHgnvPvKtVbHw8s=
Subject key identifier: AC:1B:14:3C:78:6E:DD:2B:91:0C:69:C4:DC:44:35:A6:CD:96:3E:18
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 01A0005D10E62A3093DF5CCB317391444A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 192F
Signing time: Fri 14 Aug 2026 13:01:34 +0000
Manifest this update: Fri 14 Aug 2026 13:01:34 +0000
Manifest next update: Sat 15 Aug 2026 13:01:34 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: I1sciuKu6Vy39Lka/7HlJ/mOTHraYj0TiT+m1T7f5Bc=)
2: xhpLteHeEuI9N2i0WjCkJHYwXtM.roa (hash: ZhHw/D8clg9QeWX4KlvzTONGmYlvYOv2tFZIA342W2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:10:e6:2a:30:93:df:5c:cb:31:73:91:44:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Aug 14 13:01:34 2026 GMT
Not After : Aug 15 13:01:34 2026 GMT
Subject: CN=ac1b143c786edd2b910c69c4dc4435a6cd963e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:70:e6:10:4f:c9:3f:cc:be:78:c4:8b:76:
09:06:5b:4f:0f:fb:37:f0:28:51:4f:7f:37:41:b5:
88:5f:03:f5:9a:ff:95:13:16:38:0f:f8:f3:af:c6:
52:f0:54:ac:55:f6:74:b6:61:91:48:28:ee:fe:78:
ff:31:63:57:83:00:9e:02:38:a0:3c:b1:e3:db:e1:
8f:18:2c:0c:58:b9:aa:6e:b3:d4:3c:6d:91:35:c2:
0c:8b:52:d3:44:9b:55:c1:9b:b2:72:fa:b8:c0:e1:
7c:10:de:5c:3c:52:37:4e:1d:e1:3f:10:b4:15:09:
3d:f2:7e:6e:be:73:da:54:a0:7f:67:2e:b5:08:28:
65:37:53:4c:16:c6:44:03:25:99:14:dc:38:28:75:
c8:13:b4:ba:4f:0e:28:34:8f:cd:4c:94:7f:32:53:
a4:62:e2:6b:f7:4d:a1:1b:cd:e1:e6:5d:c9:09:f4:
cb:b9:b0:dd:be:e4:53:09:d2:70:00:9a:5a:39:a4:
70:c0:93:49:64:78:9a:f5:b7:9b:a0:ff:d1:21:77:
51:08:f2:1d:c9:4c:3f:9a:f9:f4:cd:64:3c:f7:3e:
8a:1b:81:3e:90:49:7b:c2:61:86:94:6c:12:c6:3a:
a5:67:a0:40:6d:39:9d:11:d1:a6:b1:cb:76:02:9a:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:14:3C:78:6E:DD:2B:91:0C:69:C4:DC:44:35:A6:CD:96:3E:18
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5a:a0:51:e2:4f:5c:f2:7c:94:82:e8:61:8c:ec:b3:96:8d:
13:dc:54:35:c1:f7:7a:8b:c6:17:68:51:fa:af:56:d5:61:d9:
a9:b2:5c:81:89:b9:82:44:39:9b:53:ca:3e:0e:bb:af:ba:82:
90:bc:52:1f:f7:24:0e:ed:4f:37:dc:40:ee:6d:9c:8f:b2:c3:
44:45:b8:43:da:bd:b5:b9:88:46:5b:ea:59:27:6a:5e:f4:3d:
57:40:92:ca:06:25:00:57:2a:bd:92:c4:3d:a4:87:77:1c:9a:
5a:c4:1b:05:00:bd:8a:f8:e6:32:17:73:93:ac:7e:2a:9b:2e:
fa:fa:9f:f7:36:28:e2:11:c9:32:89:4c:0b:5e:16:20:c3:e8:
13:90:c9:f6:1f:43:3b:6a:0d:7a:5e:bf:57:96:ff:e9:77:83:
6c:ed:bd:e1:96:b3:b7:6e:f7:ea:d2:55:f6:48:8e:6b:a5:d4:
69:a6:de:a1:bf:50:ba:b8:c3:f2:84:e8:64:59:e4:4b:7e:a0:
03:a3:b8:47:80:1f:b2:a4:69:04:61:3d:f6:51:7c:9a:b1:54:
a8:9f:6c:84:de:98:58:ec:b9:c9:c1:12:b5:94:99:42:06:1d:
df:dd:e2:f5:bb:42:76:81:af:9f:79:55:8b:97:71:a3:90:48:
9f:dd:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:31 2026 by rpki-client