Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: SYSW4/K1CyhhB9UbXqgk44LCbZongAhbeeJFePoY7ZI=
Subject key identifier: 8D:A2:97:3F:6E:03:C0:3A:80:D0:FF:72:EF:25:EC:B8:32:5D:18:54
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 01A0016FE82C8753E4FF6469F2D07DCD1A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 071A
Signing time: Fri 14 Aug 2026 18:01:46 +0000
Manifest this update: Fri 14 Aug 2026 18:01:46 +0000
Manifest next update: Sat 15 Aug 2026 18:01:46 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: gHhDaB1kdWS/mX1A3oynGWCLFgoUwRDF9nWQjnJwMwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:e8:2c:87:53:e4:ff:64:69:f2:d0:7d:cd:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Aug 14 18:01:46 2026 GMT
Not After : Aug 15 18:01:46 2026 GMT
Subject: CN=8da2973f6e03c03a80d0ff72ef25ecb8325d1854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:8f:c0:c7:03:c1:9d:02:0b:9b:4f:39:b5:
99:e1:aa:ea:70:c8:e9:94:83:62:87:68:17:1e:cb:
11:64:17:5e:2f:15:95:91:87:5f:df:38:e2:fa:4d:
33:46:e3:0a:57:77:38:2d:2f:80:e2:70:b8:d2:5a:
91:89:36:69:4b:3a:87:bf:b5:7d:e3:88:da:e9:96:
e0:ae:54:f1:ed:79:f4:b0:b1:76:3c:6c:cb:14:44:
c6:2c:1a:35:45:18:80:7a:88:cf:30:d3:a8:96:93:
d9:af:01:50:bd:e0:75:30:f6:29:1d:92:26:c6:81:
5c:65:4d:4b:98:99:bf:65:41:34:ad:a1:b7:77:f3:
36:81:2f:d6:42:e4:10:93:5d:27:7a:76:93:66:d1:
a1:68:5f:e8:50:9c:c6:2e:6f:53:05:8e:56:fa:ee:
af:ce:97:d7:63:93:a3:c5:cd:a6:3f:aa:53:1a:c0:
ad:1b:b9:16:0a:9c:05:e0:f4:45:ab:b1:75:0e:29:
87:ec:f7:12:62:ef:ef:ca:a3:2d:40:dd:76:f0:fc:
d3:3e:f1:3e:19:32:aa:e5:b1:ec:d4:88:2d:26:9c:
f1:31:17:fc:cc:dc:3b:6b:0d:72:a3:73:35:3e:97:
be:7e:09:af:83:90:92:83:28:9d:1e:21:b9:61:e8:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:97:3F:6E:03:C0:3A:80:D0:FF:72:EF:25:EC:B8:32:5D:18:54
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b8:de:05:a0:bc:15:e5:29:44:98:e5:e1:1d:47:02:f4:61:
80:f1:be:07:64:26:93:f8:82:a9:91:21:4d:11:d2:11:0b:a8:
f4:6b:d8:27:00:ea:bc:04:b2:89:bf:57:bd:f7:4b:d2:11:36:
0a:00:56:2f:26:fc:19:ae:02:77:42:e0:15:c7:b2:fd:83:fb:
44:59:1a:1e:37:78:b3:32:54:01:a4:6b:9b:ee:62:7a:86:3a:
f8:e3:36:9d:0d:d7:4e:e5:5f:4d:cb:cd:d6:41:96:87:3d:ef:
02:f7:00:81:b3:f3:b3:68:f9:c6:4d:fb:0b:78:88:e8:d2:f7:
14:09:c9:95:5a:7b:62:b4:6d:f8:bb:a8:8d:14:34:b4:6b:ce:
af:65:85:37:87:41:5a:45:b6:a1:45:46:c5:d7:db:73:bd:43:
31:3d:4b:ad:a2:5b:62:7f:ab:e0:83:10:4c:97:89:f6:20:fc:
12:6a:97:ef:40:29:c1:17:c8:3a:b5:60:6c:d6:05:ec:90:f1:
de:87:67:d2:24:41:5d:14:0c:9e:2f:63:ad:d6:aa:81:6d:1b:
02:29:3c:64:31:c6:fe:9c:af:0d:55:db:6f:5a:e2:a1:ce:dd:
68:9f:9b:5b:f3:d8:8e:7c:18:ae:ef:cf:9c:e9:4e:88:a9:f1:
8f:f5:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:46 2026 by rpki-client