Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: S5dBdCoheXrDSBzaSNtH76xuTiwvsN9bRl92K0dSTgc=
Subject key identifier: E7:59:A8:6B:65:4F:53:82:10:A9:19:8B:51:C0:0F:7C:C7:36:7E:CD
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019F91354E997F20393A9E9C06F9A20277FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0EE5
Signing time: Thu 23 Jul 2026 23:00:17 +0000
Manifest this update: Thu 23 Jul 2026 23:00:17 +0000
Manifest next update: Fri 24 Jul 2026 23:00:17 +0000
Files and hashes: 1: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
2: INbvbexKikJqE06AvP-OgH6xyns.asa (hash: 6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: a/10u3vwh+RmUJ+Ffnqw0XXcKiZWLrTQkoq9AiFiJkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:4e:99:7f:20:39:3a:9e:9c:06:f9:a2:02:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Jul 23 23:00:17 2026 GMT
Not After : Jul 24 23:00:17 2026 GMT
Subject: CN=e759a86b654f538210a9198b51c00f7cc7367ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:a9:aa:79:de:52:6a:02:5d:32:83:55:8a:
15:46:c1:7b:d7:f5:cd:9a:32:b3:09:af:2e:b5:68:
78:d0:1d:08:65:a3:be:4b:81:56:95:29:3b:88:f7:
0b:ab:b4:a5:9c:a8:28:ec:57:57:77:94:9d:1c:e2:
40:b9:05:88:a5:7e:6a:2c:9b:e6:d6:2b:9d:34:e8:
70:d8:3a:59:b1:9e:8d:d9:0c:c2:a8:66:94:40:0b:
c2:38:00:f7:8c:af:57:f7:08:33:74:3d:4f:13:4f:
88:80:b6:44:8d:5f:22:b0:5c:7e:83:7e:1f:fe:a5:
0e:0b:c8:93:11:32:6a:8a:26:44:16:25:4c:4d:99:
a4:85:76:57:5a:2d:c6:eb:f4:7c:30:0c:80:79:f9:
5d:62:2d:24:f0:a0:fc:14:99:bc:11:f1:ef:87:9f:
f9:c5:23:cb:92:90:01:80:ec:e6:99:a1:b4:1b:d7:
0c:f3:5e:32:21:ab:62:f0:97:7f:b6:49:68:99:e8:
f7:f3:c1:d6:1b:a7:03:e2:f8:fe:53:67:2c:f0:d0:
0e:db:05:18:a3:49:3e:4d:e9:c3:ff:ef:63:33:10:
89:97:2e:4e:52:82:5f:17:28:f3:9d:4d:4d:6b:cc:
2e:9b:f2:ca:c8:63:98:d9:c7:a0:4d:92:0f:29:5c:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:59:A8:6B:65:4F:53:82:10:A9:19:8B:51:C0:0F:7C:C7:36:7E:CD
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3a:44:05:36:23:d8:43:a6:09:27:25:24:29:d9:36:6d:6d:
2e:34:8b:da:8b:88:a8:80:45:2b:22:85:50:19:66:d6:a3:0e:
46:6a:b6:19:7e:b8:31:d7:37:df:d4:92:b1:98:1c:bc:2e:07:
e8:2d:d4:cf:0c:fc:62:4c:92:5d:15:2d:d6:70:c8:0b:e0:9e:
bb:b7:ec:63:8c:b7:64:54:1c:ac:51:0f:e7:71:59:c4:a4:c5:
3a:56:f4:98:f3:8f:da:4d:12:39:28:72:7a:4d:aa:5a:28:b6:
94:01:91:ee:f5:94:52:24:4a:1a:d7:c5:4a:58:4b:e3:29:ee:
1c:78:ca:4b:a5:7b:67:6e:79:b3:a7:f2:bc:96:1b:f8:9d:02:
de:61:46:c2:51:3a:9e:a4:c3:e1:73:4f:94:da:08:5f:64:75:
f3:14:79:59:fc:a9:8a:53:5c:f3:89:55:b5:50:6c:b9:ae:38:
f0:b7:ad:44:53:15:a6:c5:19:a2:9b:36:e7:31:63:8f:ed:3b:
dd:83:dc:66:c5:64:e2:70:09:5a:2d:7e:0c:4c:c4:5f:87:d0:
73:28:f7:04:46:a7:ac:54:78:45:27:dd:32:df:e8:8e:88:31:
ff:a6:7e:7c:b6:3b:c9:5e:a9:65:af:3a:d7:e7:f5:07:2b:94:
00:c2:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:49 2026 by rpki-client