Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
File: CAj2D5I4oAJLM24y1FaePkwStRU.mft (raw, json)
Hash identifier: vLwI9s0V5OUjyziimecY3ToSPOpE6d3kmb5Agbcl6NY=
Subject key identifier: EC:7D:BC:03:02:BA:29:79:E9:5C:A9:D4:A0:EC:BF:4E:9B:A0:0F:3B
Authority key identifier: 08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
Certificate issuer: /CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Certificate serial: 019F8FEBFD04674C6475FFDA9DD96885ECAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
Manifest number: 54
Signing time: Thu 23 Jul 2026 17:00:35 +0000
Manifest this update: Thu 23 Jul 2026 17:00:35 +0000
Manifest next update: Fri 24 Jul 2026 17:00:35 +0000
Files and hashes: 1: CAj2D5I4oAJLM24y1FaePkwStRU.crl (hash: en/JQPihkjPP7JcHvr+OyalclmheLJ3uz0LmIPCKcMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:fd:04:67:4c:64:75:ff:da:9d:d9:68:85:ec:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0808f60f9238a0024b336e32d4569e3e4c12b515
Validity
Not Before: Jul 23 17:00:35 2026 GMT
Not After : Jul 24 17:00:35 2026 GMT
Subject: CN=ec7dbc0302ba2979e95ca9d4a0ecbf4e9ba00f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:ff:da:37:c5:26:89:b3:a5:d2:5c:2e:ba:
8b:16:16:49:73:0b:5f:59:05:9d:78:59:ed:e7:5e:
1b:91:f5:88:e4:3b:e1:02:35:f6:bc:4a:52:d6:1b:
c0:e8:7a:17:46:2b:cb:4b:07:09:c0:08:9e:b5:11:
69:01:76:b0:b3:bc:bd:6f:4f:4c:c7:53:43:57:69:
b4:b4:c6:da:a7:6b:56:1e:5a:4a:b4:24:7a:64:9a:
02:7d:7f:14:a6:bc:fd:ca:1c:5f:a2:82:da:14:0a:
fc:65:fe:98:0f:73:29:01:10:70:4a:02:08:1e:6b:
95:c9:58:28:56:06:ba:e5:1d:bf:64:7d:0c:59:e5:
69:2f:b6:78:a5:64:71:10:e1:a9:88:69:b7:fe:4c:
2e:52:da:5f:ba:74:f4:a2:de:0c:a9:7f:7d:6a:c5:
d7:94:b0:8f:60:27:28:87:1a:b3:d9:2a:53:73:e0:
1c:02:a9:6e:fe:3a:75:0b:2b:75:8d:f6:3d:2e:25:
e0:b9:f0:05:16:6e:f5:9a:b7:7f:e5:52:1d:a0:b0:
e1:e2:5e:a3:e0:b0:fc:43:34:f1:f2:07:05:90:a8:
85:93:ac:69:14:d5:33:74:d0:66:1e:94:b6:06:98:
52:5d:8b:05:d0:af:44:ae:af:3c:c7:3e:62:96:0e:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7D:BC:03:02:BA:29:79:E9:5C:A9:D4:A0:EC:BF:4E:9B:A0:0F:3B
X509v3 Authority Key Identifier:
keyid:08:08:F6:0F:92:38:A0:02:4B:33:6E:32:D4:56:9E:3E:4C:12:B5:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAj2D5I4oAJLM24y1FaePkwStRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/25813c-4968-4baf-8ad0-2e40bd571f52/1/CAj2D5I4oAJLM24y1FaePkwStRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f0:da:00:d8:07:bb:19:e4:55:f4:14:6f:e1:0a:fc:81:1e:
1c:e4:c9:a9:c5:70:b3:14:0f:bc:89:75:8c:c2:89:8a:8a:d3:
2c:4c:46:1f:39:07:1e:26:f4:42:58:3f:8c:88:05:cb:7b:d9:
cf:2c:d9:9a:cc:42:4b:c0:af:e5:26:d2:9d:c7:50:32:b1:50:
25:d0:dd:a1:ef:f0:01:51:48:79:11:2b:c6:a0:b3:e5:7c:90:
ef:4a:47:35:b9:55:b2:91:d8:34:ed:61:1a:f3:f3:15:e2:ed:
33:f5:34:b6:66:99:90:86:9c:09:0b:ee:f7:c7:11:7f:e3:0d:
7d:79:c2:e6:df:73:20:15:6a:89:29:a0:ef:f5:3e:7e:6d:9f:
ff:2a:93:94:08:b3:47:56:a9:2e:68:a3:cf:98:09:5a:a0:d9:
44:f2:5a:40:35:56:73:e1:1f:86:57:c2:96:e0:40:4e:31:6c:
31:42:a0:02:92:6e:5d:56:ce:03:37:09:87:85:c7:bf:10:72:
ee:1e:e6:98:75:6d:a6:37:31:3e:eb:de:c2:03:8e:86:eb:fa:
e1:3a:82:bd:3e:fe:66:a6:24:53:83:5f:43:b6:3e:89:73:56:
2b:70:f7:2e:ad:90:eb:74:ae:d3:0e:9e:72:ee:12:cb:ba:76:
bb:1b:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:16 2026 by rpki-client