Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
File: 2VSrlORZUZTSw5sdP-aokfHrkrw.mft (raw, json)
Hash identifier: lxt9CqAsnwJcbl1BpmY391Y0N0nvbE2IpQ/QQAGlTjY=
Subject key identifier: C5:E7:B4:7E:73:B4:1F:9E:EB:6D:AB:21:A8:3D:AB:14:C2:24:75:A1
Authority key identifier: D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
Certificate issuer: /CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Certificate serial: 019F1830FCCCD95DB8BC61544439F0832C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
Manifest number: 0AE7
Signing time: Tue 30 Jun 2026 11:01:31 +0000
Manifest this update: Tue 30 Jun 2026 11:01:31 +0000
Manifest next update: Wed 01 Jul 2026 11:01:31 +0000
Files and hashes: 1: 2VSrlORZUZTSw5sdP-aokfHrkrw.crl (hash: 9/6imp+9xqiMUf1ESA6ltgtUEi6ig+hV7BJ/Ybe1To8=)
2: qgMkoT1JMEGlzQ-9amlEk3JLWC4.roa (hash: y8/qKOIU/VnL+2E1k4DTDJCvpW8Lts5guxMB4ltkk0o=)
3: r3-oGCZiu-f0pzfjoZyY5hfWHE0.roa (hash: axK8NfXG0oP4PqyHKrnwHUrltZg/uDJF8UJbff87uoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:fc:cc:d9:5d:b8:bc:61:54:44:39:f0:83:2c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d954ab94e4595194d2c39b1d3fe6a891f1eb92bc
Validity
Not Before: Jun 30 11:01:31 2026 GMT
Not After : Jul 1 11:01:31 2026 GMT
Subject: CN=c5e7b47e73b41f9eeb6dab21a83dab14c22475a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:6f:b5:82:24:6c:67:65:f9:30:f9:bf:65:
36:77:ff:cc:fe:8a:92:64:df:e2:0b:17:7d:1d:9a:
58:fe:f1:ec:b4:93:14:2e:a4:f1:bf:5c:29:fb:b7:
c5:44:71:53:07:ba:ca:52:ee:c9:fc:c7:c8:8c:3a:
c4:4a:1f:e1:bb:97:e8:69:29:b5:07:75:79:19:1c:
5f:35:19:27:03:67:90:78:0d:2a:5d:6d:5a:0f:74:
7c:73:7c:83:61:f4:da:bf:82:1f:48:4d:9e:ae:19:
ae:fc:57:b7:ef:48:9e:33:43:80:e8:ba:eb:7a:56:
93:03:59:7a:85:cd:64:35:89:c6:7d:a9:b6:83:ca:
b5:cd:2c:b0:69:9b:30:02:ab:11:6c:15:a1:87:6b:
6a:3f:d3:aa:40:55:4a:4b:36:a3:a7:81:e7:46:3c:
cc:a8:1d:ac:e6:b6:f7:e7:f3:47:34:9e:b2:10:7a:
1c:37:5b:98:64:81:32:7b:df:8e:6d:e5:37:ee:c9:
d8:f7:cc:ac:df:27:da:26:98:f0:1a:94:00:47:d4:
9c:ce:6a:34:5a:eb:31:03:77:d9:81:57:95:2e:3e:
c8:24:72:29:ed:0f:a6:51:d0:ea:66:43:0d:bb:ef:
69:19:09:6a:08:59:65:b5:04:10:2f:99:23:5d:82:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:B4:7E:73:B4:1F:9E:EB:6D:AB:21:A8:3D:AB:14:C2:24:75:A1
X509v3 Authority Key Identifier:
keyid:D9:54:AB:94:E4:59:51:94:D2:C3:9B:1D:3F:E6:A8:91:F1:EB:92:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2VSrlORZUZTSw5sdP-aokfHrkrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/647485-635e-4ac6-b0b9-3351c577b432/1/2VSrlORZUZTSw5sdP-aokfHrkrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:00:e4:e3:27:55:bd:54:83:09:f4:5a:a0:bd:52:d2:0e:41:
4f:e4:5d:e5:10:0a:17:bf:22:4a:4c:10:b7:a1:f1:1a:9e:1a:
80:da:06:e6:5c:ef:9c:fe:f8:cf:b1:ed:02:3f:a2:14:fc:21:
1e:5b:1d:f5:b1:6f:14:2d:b0:48:c1:6c:62:77:2c:15:40:d7:
47:da:ee:b9:9d:88:47:b2:e9:d4:63:b3:9e:4d:41:b1:b8:38:
55:ab:c1:fa:f9:fc:26:55:f4:0c:19:f1:ae:f3:dc:75:56:c0:
0d:47:4f:7f:2a:31:8d:6c:41:a3:23:d7:cd:86:45:31:ca:ac:
45:cb:de:a3:d3:b2:24:e5:77:51:b9:4e:80:af:05:6d:49:5b:
75:66:80:99:9c:10:94:2a:5f:f7:13:13:be:ed:9d:84:40:bd:
e8:e2:a7:fc:87:5f:6b:41:d7:ad:49:56:e5:77:7c:3d:b6:e0:
0c:33:5a:04:a1:83:26:b7:32:ef:95:0e:6f:83:46:e7:99:fb:
0d:47:ec:dc:01:d4:71:4e:dc:f4:c0:55:3c:b8:fd:da:6b:a8:
46:0b:23:5f:07:7c:58:a7:8e:ee:1f:a5:ee:17:44:71:4c:34:
5b:90:26:18:df:c5:1e:0a:a2:d9:b5:7c:15:7c:09:ca:3e:92:
10:97:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:11 2026 by rpki-client