Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
File: 0aVkCYrHZdC-2EkYgJFvYba48Y0.mft (raw, json)
Hash identifier: 8I8Uw9TWQ6YQMQktJrwzDnUgKOpNz3k+eDp37YG7UsU=
Subject key identifier: 7C:AB:CD:03:9D:CA:F1:74:B9:B1:E4:89:D8:F2:80:77:7F:BC:66:4D
Authority key identifier: D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
Certificate issuer: /CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Certificate serial: 019E1D59441CD0435FE63CEBA37630D1D976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
Manifest number: E5
Signing time: Tue 12 May 2026 18:00:49 +0000
Manifest this update: Tue 12 May 2026 18:00:49 +0000
Manifest next update: Wed 13 May 2026 18:00:49 +0000
Files and hashes: 1: 0aVkCYrHZdC-2EkYgJFvYba48Y0.crl (hash: GmIzJ0MCAbiI1dzLnmBW/Fb9fQCWgASmsCX7aNRyJoY=)
2: 0fBOVPEVt_Vn70y4H7R92SYVH6A.roa (hash: AXH0b2vzi3eJ8ZGHrdb03qMvGfl3ImnFJSUpRqXJVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:44:1c:d0:43:5f:e6:3c:eb:a3:76:30:d1:d9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Validity
Not Before: May 12 18:00:49 2026 GMT
Not After : May 13 18:00:49 2026 GMT
Subject: CN=7cabcd039dcaf174b9b1e489d8f280777fbc664d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:30:18:9f:27:f7:60:f6:03:63:c1:20:9e:
78:ed:d4:ab:69:ac:63:0e:a1:67:bf:09:9a:47:1e:
2d:81:09:25:f1:cc:20:d9:6b:de:31:a0:be:f4:7d:
63:11:8a:38:ea:fc:4b:ac:bc:86:0b:ae:43:34:2f:
fc:74:01:0a:2c:a8:b9:ee:11:d6:48:c1:f6:6f:ba:
32:38:2e:d8:ca:8e:e6:52:7d:31:e7:1f:a2:e8:70:
a4:7d:f1:e1:a9:1f:27:1f:d6:0b:e3:7a:70:75:71:
07:a8:25:96:a8:48:fb:d0:f4:75:6c:ca:64:95:83:
f4:5c:e7:6c:78:d1:ba:51:89:40:12:ca:9b:97:3b:
fb:4b:fd:9d:e9:5c:0c:64:8d:53:e7:69:95:57:d6:
5e:3b:6a:f9:4a:fe:5c:dd:59:b3:88:11:58:ae:60:
c7:49:5f:e3:f1:69:76:d9:21:7e:64:ec:76:de:2d:
5f:7d:d7:71:07:3a:60:9a:16:0f:02:96:f3:7f:50:
69:4a:43:fb:40:65:c1:73:f5:34:18:7d:4c:e0:a3:
c0:32:fd:ce:c0:f0:98:81:10:9b:12:69:6e:87:8b:
28:c0:e1:05:f4:31:51:69:3f:1d:65:e9:bd:1d:aa:
f4:5d:54:51:ff:1e:28:46:68:20:5f:36:4e:b8:26:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AB:CD:03:9D:CA:F1:74:B9:B1:E4:89:D8:F2:80:77:7F:BC:66:4D
X509v3 Authority Key Identifier:
keyid:D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:3e:88:41:74:85:49:39:86:84:d5:62:39:03:89:27:da:
b8:60:9f:51:26:5e:c2:b7:25:30:4c:d7:ce:37:05:34:00:18:
72:5b:86:34:af:60:ad:5e:16:19:cc:e4:58:56:86:3e:44:cb:
bb:81:1e:db:af:be:9f:29:8a:b0:ed:b6:e7:dd:58:ca:c6:21:
26:2e:3f:56:de:14:f3:b2:ec:4b:de:9b:c8:d9:bf:3a:5f:6f:
b8:80:b4:96:49:09:21:2e:3a:cc:aa:9c:08:3e:0e:44:1f:e5:
e4:c2:8b:bf:24:6d:67:a2:a5:1e:24:e0:d6:f8:de:54:8a:ac:
e5:be:c1:3d:a1:62:72:dc:8c:10:4e:4a:27:e1:73:00:92:2e:
6f:26:f1:f3:08:e5:58:a2:2c:c5:e5:7d:7c:47:c6:1f:ce:0d:
8c:7d:2f:df:de:76:58:ad:22:7e:c6:e6:8a:df:ca:f7:15:d8:
08:9b:80:53:60:41:86:40:f6:5a:fd:fd:91:eb:c6:9f:35:cf:
6d:86:d0:7d:fd:f6:98:19:24:03:bf:57:2e:15:76:6e:52:b2:
25:9e:4a:74:b1:42:78:92:ce:77:e2:90:3d:45:22:b2:02:3c:
a1:31:e7:90:8a:8e:76:b5:28:67:8b:80:58:1b:6e:d3:41:1d:
f6:f6:94:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:08:49 2026 by rpki-client