Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
File: fD2KpDg1BKMa_0sAaBCga88DBa4.mft (raw, json)
Hash identifier: W5C+NLF5nsTo3W12l0rEPc5HNshCKaqykMkER0YCtcw=
Subject key identifier: 93:C6:2E:CF:83:89:CD:BD:76:CC:A5:83:CC:1C:B8:18:99:B0:0E:0C
Authority key identifier: 7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
Certificate issuer: /CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Certificate serial: 019F916CDC1115521F594EB7A0AADB41241C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
Manifest number: 15A2
Signing time: Fri 24 Jul 2026 00:00:58 +0000
Manifest this update: Fri 24 Jul 2026 00:00:58 +0000
Manifest next update: Sat 25 Jul 2026 00:00:58 +0000
Files and hashes: 1: fD2KpDg1BKMa_0sAaBCga88DBa4.crl (hash: 49VkAy/ZvW5mzcQKnyeqmQePIl/+JxqFYTHE2mecELU=)
2: ynivGHGV8Z6F2cby7L1fi45lXJI.roa (hash: p2d61mUjDisc5jYXXPmal+v44ksSKZ1nKZ0hR92ybdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:dc:11:15:52:1f:59:4e:b7:a0:aa:db:41:24:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d8aa4383504a31aff4b006810a06bcf0305ae
Validity
Not Before: Jul 24 00:00:58 2026 GMT
Not After : Jul 25 00:00:58 2026 GMT
Subject: CN=93c62ecf8389cdbd76cca583cc1cb81899b00e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:05:43:bb:cc:f2:30:83:36:b3:b0:91:4b:
f5:41:9a:0e:70:2b:7c:b9:d6:bc:1e:76:93:64:2c:
73:f1:68:7f:8d:d3:51:64:ae:f9:ba:40:fd:9f:68:
7e:8e:c3:cd:86:c5:42:98:7b:d1:27:78:73:e9:4b:
9f:b3:ea:fd:74:58:06:03:15:42:32:fd:cc:2f:cd:
e3:54:b9:bc:42:57:08:08:ef:0d:b4:a7:7f:48:cf:
26:cc:b3:c6:30:6d:4a:7a:82:96:22:2b:11:80:db:
f9:f0:a2:2c:b5:17:52:fd:b2:d1:80:6e:d5:f9:9b:
bd:34:c9:ce:a3:6e:3a:44:29:7f:05:d9:ef:f2:43:
50:71:db:d6:90:8d:b9:2c:86:cc:78:11:2e:01:cb:
55:bd:fd:e4:69:01:5e:11:18:f0:94:17:4f:8e:b6:
cd:ae:42:10:fa:5f:ae:cd:20:f6:56:8b:1c:11:28:
09:9f:e6:51:1b:10:a9:1b:30:7d:0e:7c:e6:1d:7f:
bd:fc:20:29:df:dd:73:10:2d:02:0a:f8:03:19:6a:
da:d9:76:ea:41:42:70:67:f2:6a:8c:03:c6:0a:b1:
86:4e:b6:6b:2b:9b:59:a7:f8:64:e7:5f:77:ae:3a:
81:f6:24:57:4a:14:d4:13:39:8e:d0:75:c6:09:8e:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:2E:CF:83:89:CD:BD:76:CC:A5:83:CC:1C:B8:18:99:B0:0E:0C
X509v3 Authority Key Identifier:
keyid:7C:3D:8A:A4:38:35:04:A3:1A:FF:4B:00:68:10:A0:6B:CF:03:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD2KpDg1BKMa_0sAaBCga88DBa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a42e94-15b7-4272-9eb0-99db21244edf/1/fD2KpDg1BKMa_0sAaBCga88DBa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:72:1f:94:26:87:03:1f:d0:5d:90:21:27:36:bb:34:45:fc:
d6:f5:ec:f5:45:45:36:c8:fc:64:a1:3e:a2:97:a5:92:e9:a9:
28:d5:b5:57:9a:0d:df:41:1c:c0:b1:ec:94:d3:1e:0c:f4:53:
88:fd:0c:43:40:89:df:a9:1d:1a:f3:3b:4e:9d:9e:82:ae:fa:
f0:32:fd:5d:02:83:a3:89:eb:c2:00:93:a5:ab:0c:d7:50:56:
cd:26:35:d0:d1:6b:e6:61:53:95:ce:01:5f:6e:8d:9e:2e:b1:
82:ec:fc:92:c7:12:24:9b:1a:92:b6:27:e2:aa:cd:26:0f:79:
a5:c6:f3:c8:dd:d8:a3:5d:e3:ad:14:7b:fc:93:58:af:06:12:
d4:74:3c:09:ca:27:1b:5e:f9:ca:d1:0a:77:0a:d5:57:c9:1a:
45:f7:11:f7:fe:19:2d:d6:95:95:64:ac:70:96:83:fa:40:60:
84:61:c3:83:8f:21:14:2d:e7:31:02:25:9c:18:bf:6e:7e:d7:
11:0c:68:96:08:65:71:b5:bf:20:98:60:d5:08:2e:67:ad:fe:
fc:8c:85:ac:53:4a:2f:4e:0a:3c:24:58:16:0a:f7:df:8c:b5:
84:21:8a:f9:da:95:97:ca:dc:01:bd:42:39:6a:9e:0c:9f:be:
ae:85:be:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:36 2026 by rpki-client