Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: BuHO1010VNmYdJau0hbDY4V5d90H/ZjSSb8hSYF7taQ=
Subject key identifier: 6E:53:D5:A8:9C:82:A8:FE:5F:1C:90:71:00:D5:36:75:CD:BF:15:86
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 01A0CBC7D31B547C081022345F1C8AA23131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 098A
Signing time: Wed 23 Sep 2026 01:01:05 +0000
Manifest this update: Wed 23 Sep 2026 01:01:05 +0000
Manifest next update: Thu 24 Sep 2026 01:01:05 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: wERMDrKhMmeYPSz4pk9GQ/vm6ijnldwQOiefcAZbl9c=)
2: ZW49T-EF9sD4oMGX0teIq89-wdQ.roa (hash: ecFVWg/f7sqDB7B5E7OkA3m4Sw9Gn9wf9T3KAIQS1B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:d3:1b:54:7c:08:10:22:34:5f:1c:8a:a2:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Sep 23 01:01:05 2026 GMT
Not After : Sep 24 01:01:05 2026 GMT
Subject: CN=6e53d5a89c82a8fe5f1c907100d53675cdbf1586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:16:03:ed:2b:a8:21:08:66:bd:60:b3:5c:
9c:5b:3d:00:99:28:aa:54:4d:c4:91:e7:a4:9b:47:
73:be:b0:14:2d:40:3b:32:84:aa:e4:71:91:07:8a:
ab:b3:33:f3:6e:44:ca:e2:89:a0:8c:f2:bd:c3:97:
bf:42:39:78:7c:d6:4f:0f:42:5f:fe:78:46:dc:e4:
e3:fb:29:d2:1b:65:7e:e7:e3:08:ae:94:4c:aa:c6:
ab:e6:ee:2a:ec:ad:6e:89:10:29:3d:c6:72:a4:e8:
dc:96:4b:d1:d5:c3:3b:29:18:30:10:14:b0:62:9d:
5b:f2:8c:ca:7b:fc:92:f3:93:79:34:74:6b:88:ca:
58:43:c9:ab:fa:01:ac:09:f7:16:59:e3:97:78:7e:
45:5a:ed:3b:c9:ea:9b:73:4f:6a:12:11:91:95:a1:
06:cf:00:53:34:e4:63:3b:52:8f:ae:76:a4:96:b5:
66:19:19:71:9d:70:16:dd:07:90:c6:3e:5c:bc:2e:
d5:fd:a0:f7:4b:cb:77:6e:8d:42:e3:55:2e:3e:b0:
76:68:a5:45:59:a5:a6:04:16:ec:64:0a:0a:40:dd:
35:14:0e:c2:af:55:42:d5:2b:be:4f:90:49:96:14:
8c:c2:78:0b:ed:1e:cb:fd:2a:90:e2:e1:78:c8:d5:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:D5:A8:9C:82:A8:FE:5F:1C:90:71:00:D5:36:75:CD:BF:15:86
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c2:e4:a2:4a:d5:d8:1a:20:3b:22:95:5e:f8:36:b2:d3:41:
8e:f0:e4:73:c6:8d:de:98:7f:a6:ca:bd:19:b2:f4:9b:63:89:
92:39:af:7c:56:52:e2:2a:fa:cb:84:ff:46:8a:82:2d:bf:24:
fb:0b:25:b8:89:fe:5d:b7:a2:63:3d:90:8a:b0:19:89:eb:d4:
0f:e6:63:a6:68:19:5e:cc:73:3b:61:5c:7a:3a:0a:73:cd:29:
82:80:3b:86:51:a8:d6:e8:7b:0c:99:a3:e2:b2:a0:8e:e3:d3:
95:e5:01:91:86:c1:c7:02:9b:92:da:b4:31:2d:5e:53:de:b7:
49:9e:c7:c2:77:d3:81:c9:83:3e:78:78:39:ad:7b:b5:09:92:
67:dc:ff:17:4c:57:8f:40:95:4d:18:6f:0d:45:92:da:80:34:
b4:e1:d2:43:bf:9f:00:3a:3a:4d:11:82:b6:8f:c4:da:22:74:
7e:e7:33:03:35:1d:5c:f2:69:57:62:e6:14:6e:45:20:a3:57:
63:55:46:24:da:ab:23:7e:a4:37:16:c1:a1:10:c5:6b:ce:61:
dd:ec:41:43:b1:3d:d3:b8:dc:ce:81:63:34:98:b4:78:ca:09:
04:62:89:23:61:fc:9c:a3:79:0d:15:c5:b0:c0:d6:56:42:14:
a8:2f:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:38:53 2026 by rpki-client