Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: eRSKq37qLEhbuXqyHpUmaSgLiNv4zj76WllFdWvPqMY=
Subject key identifier: A0:F9:56:9D:F9:95:0B:12:62:85:E8:14:24:93:33:30:64:07:B6:8D
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 019F916C68A72598700E835C9467C34C9C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0FA5
Signing time: Fri 24 Jul 2026 00:00:28 +0000
Manifest this update: Fri 24 Jul 2026 00:00:28 +0000
Manifest next update: Sat 25 Jul 2026 00:00:28 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: yFK5CG763r6My1hOKFHgQQD9KqcRy0dq4nMHJgUfu4Q=)
2: BlOWKc5j8045KgpD8U1F9Iq5Es0.roa (hash: omB3tGHeY8VhpaATCQuElzuZOvNWwAi3D0qIf2YFIKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:68:a7:25:98:70:0e:83:5c:94:67:c3:4c:9c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Jul 24 00:00:28 2026 GMT
Not After : Jul 25 00:00:28 2026 GMT
Subject: CN=a0f9569df9950b126285e814249333306407b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:ca:69:f6:a6:d8:a6:9f:d6:5a:af:7a:e9:
e1:a5:d4:87:25:0a:ba:46:43:15:04:d3:19:64:2b:
2f:39:fd:75:d0:d7:e9:99:f0:33:0b:61:35:8d:5d:
ea:21:68:13:23:6f:f0:27:48:1b:39:5c:fb:b2:64:
cd:42:dd:f2:70:57:05:33:87:67:49:97:01:ed:c7:
a9:fd:e3:bb:7f:87:75:c8:2d:9b:94:b7:38:c8:b4:
4b:9b:9d:66:9e:e2:0e:9f:f2:62:68:39:9a:fb:97:
d9:a7:92:80:3f:cf:a9:04:02:33:7c:d8:64:58:22:
88:fc:0b:ea:bf:33:32:16:a9:bd:05:c7:45:ef:72:
94:c0:4a:2b:dc:94:ce:f7:89:1f:6e:a0:56:91:b7:
93:2b:02:08:e2:4c:93:d1:60:cb:f0:38:6b:ab:5b:
00:7c:bd:d1:82:a2:26:95:b4:df:41:15:d7:b4:0b:
2d:67:97:87:ce:69:77:10:7d:c4:22:74:f2:fc:c9:
39:f4:d2:85:bd:cb:02:82:4b:d3:6e:4e:ca:d5:a1:
b8:92:27:33:ab:16:93:32:fa:97:22:3b:fc:d5:94:
a3:a4:0f:64:6f:3f:04:f7:b7:27:38:43:44:55:9c:
42:b8:f7:84:56:d7:e8:00:d8:61:13:7c:54:59:38:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F9:56:9D:F9:95:0B:12:62:85:E8:14:24:93:33:30:64:07:B6:8D
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a0:3f:d1:c7:f0:fe:bd:4a:12:bc:75:f9:7d:3c:39:df:95:
d0:e1:9d:3d:39:48:7a:e4:a8:26:8a:6f:84:41:73:af:94:5e:
3b:aa:96:6b:23:37:14:9f:3b:15:57:a0:8c:66:a3:82:6a:6d:
dc:c0:82:ef:84:6c:a2:0b:2d:a4:29:37:8a:27:bb:ea:cd:8c:
e0:59:e1:74:51:20:41:a5:bb:de:b0:fe:c7:00:a3:7e:08:2f:
86:66:ae:98:27:40:c7:39:1b:f6:3c:61:f0:da:ab:79:97:04:
f7:89:df:8a:2e:01:75:95:d1:a5:28:47:3e:bd:11:54:c7:7a:
5d:81:92:5b:6f:0c:f6:14:48:46:dd:76:5c:d0:8a:e8:1a:98:
2c:b9:2d:6a:57:73:1d:73:80:94:48:ab:fe:b1:93:8e:d0:fd:
5a:76:8c:54:29:c2:63:f1:50:53:50:fb:de:c7:6a:a0:75:73:
c3:14:09:63:56:62:b0:10:0b:6e:c9:cc:7b:46:44:88:5b:ac:
93:54:f9:84:9d:f2:64:ed:51:d6:a8:64:17:d1:ec:11:a5:36:
a3:a2:9d:1f:75:25:56:bb:1f:16:67:cb:8a:2b:78:c1:23:f4:
93:b3:8d:73:15:88:10:d2:4e:d3:b4:bb:e8:98:38:46:f1:98:
0b:ba:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:47 2026 by rpki-client