Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
File: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft (raw, json)
Hash identifier: Mrk6QMnM2jf4ZzWBIM5LWDECm8/Iu56imTT1q5G76wI=
Subject key identifier: 99:BD:B8:00:E1:C9:00:67:65:98:DC:37:E4:D6:F5:31:BB:BF:DC:E7
Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Certificate serial: 019D2A04D5CA2E3D7D0339EC80FA7EED0CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
Manifest number: 07A4
Signing time: Thu 26 Mar 2026 12:00:53 +0000
Manifest this update: Thu 26 Mar 2026 12:00:53 +0000
Manifest next update: Fri 27 Mar 2026 12:00:53 +0000
Files and hashes: 1: 2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl (hash: xcA9w/xL833pKZx1uLlWHpouiYLew0vc09mAcWjqQfE=)
2: hBOwYB4WPoz5Ydpk13_H2gELiUw.roa (hash: mXK7s89fKob65sg2A4oB0uIh32CHyH4+/5qmpuXXrpA=)
3: hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa (hash: x9s4Ba2Dbe9DV3ZvtPtaZKG9KItOC7ypOsJ8cSF3Nho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d5:ca:2e:3d:7d:03:39:ec:80:fa:7e:ed:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485
Validity
Not Before: Mar 26 12:00:53 2026 GMT
Not After : Mar 27 12:00:53 2026 GMT
Subject: CN=99bdb800e1c900676598dc37e4d6f531bbbfdce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:eb:65:9b:12:30:16:6a:1f:4d:48:cf:a5:
a8:b7:c1:49:a0:68:97:6b:3b:66:cd:12:4b:ae:cf:
42:52:0a:0a:9b:05:d5:1e:88:4f:ef:9f:d5:62:83:
70:4e:b7:b3:3d:e1:c9:45:13:32:e8:3d:4f:f0:c4:
be:36:34:a8:b1:1a:3e:38:5a:c0:56:2a:47:78:ec:
28:95:e2:10:e2:83:cc:54:7f:0c:bb:ed:bd:12:20:
29:50:51:07:03:65:91:9c:45:65:84:55:88:b6:c7:
84:be:d9:8d:45:84:cf:81:af:b9:88:10:2d:eb:f3:
fa:ba:98:58:50:21:da:42:de:f9:92:5c:8d:60:79:
81:70:48:fb:44:46:c6:bd:41:ce:87:75:4b:5c:ba:
b4:cd:87:19:03:dd:81:93:d4:18:be:a9:c6:23:31:
a4:e5:47:60:5b:08:0a:4c:23:66:52:98:3b:d2:09:
ee:8c:4b:17:d4:91:b0:61:d8:1e:20:2a:b3:7b:61:
32:48:65:ce:d9:61:8c:e1:90:06:76:b0:14:9b:44:
32:dd:36:a7:40:e1:28:d0:3b:6f:d9:4b:87:34:79:
d9:6f:4e:64:5b:0f:3c:cc:d3:b5:7b:64:4d:ee:ca:
51:2e:59:f6:c5:48:ab:2a:5f:0c:bd:29:f3:a8:cd:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:B8:00:E1:C9:00:67:65:98:DC:37:E4:D6:F5:31:BB:BF:DC:E7
X509v3 Authority Key Identifier:
keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:85:cb:89:2b:83:bb:03:0c:40:d3:26:0c:31:49:a8:cd:
88:c5:a2:d1:f5:57:ef:86:d8:56:db:da:9d:ab:bb:dd:3e:5c:
4e:b3:d4:e4:31:e1:2a:41:1b:02:09:8b:a4:b1:bd:a8:ed:d8:
e0:dc:a2:a8:90:19:c6:53:15:08:a1:b0:99:a4:27:21:04:66:
f1:de:f7:9b:41:9d:df:87:e7:26:86:f9:d2:91:ce:43:62:6a:
11:bb:2e:96:df:60:da:e2:00:56:6d:91:df:41:50:d3:b8:fa:
1a:aa:db:d0:c5:f4:c3:4b:17:9f:3b:5d:a6:a2:b7:50:5f:6b:
86:01:a5:4d:4f:91:82:12:f5:18:69:d1:60:e6:3c:6d:28:4b:
d7:7d:6b:3b:2f:79:94:89:92:92:02:c7:5f:83:62:12:a4:fc:
b0:85:a8:9b:63:02:82:4b:1e:e6:b8:56:f0:0e:a6:5b:bb:c5:
b3:fd:e3:a6:3c:58:18:83:38:cf:e5:c2:52:92:2e:07:2b:24:
8a:f2:89:48:38:fd:a6:b5:6f:90:79:6a:f3:48:2c:53:93:66:
7d:11:18:52:23:34:35:3e:c1:47:12:2c:58:45:6a:08:7e:1d:
fb:26:78:78:18:d5:0d:c6:ec:c1:25:f5:d5:13:2f:c4:31:fa:
04:01:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:22 2026 by rpki-client