Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
File: 2afNm3hyoceqJis_rRqQdlAlKDI.mft (raw, json)
Hash identifier: oeiIxMj7ebnaXO18AdsWeMKV56TaA2rHglo0ZzdgjcI=
Subject key identifier: E3:18:86:E4:02:F8:06:3F:9A:E4:5D:EC:49:7F:BC:91:3B:59:9D:89
Authority key identifier: D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
Certificate issuer: /CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Certificate serial: 019F8F47616995C62DA97201FE85EEEB821A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
Manifest number: 07EB
Signing time: Thu 23 Jul 2026 14:00:47 +0000
Manifest this update: Thu 23 Jul 2026 14:00:47 +0000
Manifest next update: Fri 24 Jul 2026 14:00:47 +0000
Files and hashes: 1: 2afNm3hyoceqJis_rRqQdlAlKDI.crl (hash: KIc9wJZVy+XXc6bXyb+Zl1ooo2Szuit7wTw7ZEfNQxc=)
2: bkcUPSVyK1GtBOw35C6fpsJHCPw.roa (hash: 14nbBDwXuaYsul3Mhzz1OYQgsUX4OxdsMQADV56Zhh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:61:69:95:c6:2d:a9:72:01:fe:85:ee:eb:82:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a7cd9b7872a1c7aa262b3fad1a907650252832
Validity
Not Before: Jul 23 14:00:47 2026 GMT
Not After : Jul 24 14:00:47 2026 GMT
Subject: CN=e31886e402f8063f9ae45dec497fbc913b599d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:93:bc:24:d8:d5:be:85:90:96:61:ab:d9:
e3:1b:4c:0e:a3:0a:51:bb:67:6b:40:d1:c9:89:7d:
45:52:dd:64:c8:26:9b:56:51:87:6a:e4:2e:d5:2a:
88:ab:d2:c1:22:df:f6:3d:81:5a:a6:d1:6c:a2:a1:
c0:31:4c:85:03:03:0c:a4:31:8d:f4:61:8f:75:4b:
d3:75:10:96:10:2e:a2:d4:99:2a:09:5a:95:dc:b8:
2a:3e:31:9f:52:87:83:75:6d:0e:17:32:36:39:b0:
d8:bf:33:2c:d6:f0:07:69:be:b6:51:2a:1b:1c:aa:
11:cb:b9:44:43:a3:ee:fb:4f:d5:b8:79:60:65:6d:
b8:be:41:51:fd:0b:fb:b8:ed:99:6c:11:68:17:a6:
cd:95:64:cd:7f:0f:59:a0:3f:76:27:fa:75:5a:30:
6b:f4:24:b1:67:1c:ea:70:16:fa:93:f9:f4:ee:59:
aa:63:76:e3:40:a4:70:42:5d:cb:25:63:99:69:8a:
b2:fa:9d:45:68:c4:eb:9d:5d:80:7d:07:f8:c9:5d:
fb:66:99:4d:e6:6f:1e:54:3c:ca:39:86:02:81:ba:
ae:f7:0c:ae:0f:57:54:57:4f:87:9f:e5:28:af:58:
b1:85:0d:f1:dd:f2:ee:d6:9c:0b:37:0c:d5:d1:a8:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:86:E4:02:F8:06:3F:9A:E4:5D:EC:49:7F:BC:91:3B:59:9D:89
X509v3 Authority Key Identifier:
keyid:D9:A7:CD:9B:78:72:A1:C7:AA:26:2B:3F:AD:1A:90:76:50:25:28:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2afNm3hyoceqJis_rRqQdlAlKDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c06f09-9072-4d57-9b64-d05be8c5a4b1/1/2afNm3hyoceqJis_rRqQdlAlKDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:00:b3:35:ba:b6:78:bf:14:51:a2:40:20:7f:70:15:ca:eb:
50:7a:d4:09:3b:2f:c1:18:c6:03:fe:f3:79:e8:8a:a0:9a:09:
1e:e1:b8:f7:77:9f:29:60:4e:44:22:44:ee:30:b8:c6:d2:fb:
2f:7d:f7:44:85:f8:26:3f:38:89:ba:58:2f:9a:c9:1b:c8:02:
31:38:99:58:12:76:62:c0:b0:22:ae:ef:11:45:0d:e6:ad:2d:
ba:69:8f:a9:51:9a:cb:35:25:2c:59:53:d5:ca:bb:eb:5d:d0:
7b:e8:fc:b7:c0:6b:32:3a:c5:db:a4:1e:ce:b0:c5:c8:72:88:
62:bd:f8:e7:4c:fa:0f:35:a7:ca:5d:f9:2c:26:ff:c5:ab:34:
f5:b3:26:b8:c7:c2:5a:df:2f:af:49:11:17:b6:c9:e3:d8:6c:
77:de:f6:3f:fe:60:97:79:b6:9f:e1:e0:4b:23:14:81:1e:db:
c4:05:30:be:c6:a4:0b:36:3b:dd:3a:1e:c3:82:25:10:8f:1e:
6d:23:43:c2:fd:63:7e:f5:0f:06:3b:69:e6:74:35:c5:86:c4:
ea:7d:0d:26:cf:8d:3f:ce:0d:34:51:41:44:0f:aa:b5:81:07:
89:b1:68:1c:e8:db:1c:1d:23:b7:2e:b2:e6:b1:66:f8:52:34:
9b:df:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:03 2026 by rpki-client