Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
File: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft (raw, json)
Hash identifier: BQkTV2OCMyd0x6KfzUZ71mPbvqlJ2tCO7mX+ynUsc7Q=
Subject key identifier: AF:8A:71:EC:86:11:5A:DE:54:A8:34:B4:C0:26:0B:8F:5C:4F:4C:C1
Authority key identifier: D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
Certificate issuer: /CN=d9ad6f484530e57cc60e3a865a695948476c413f
Certificate serial: 019E1CB548DF2895BCD441B06787B2E2283A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
Manifest number: 1895
Signing time: Tue 12 May 2026 15:01:43 +0000
Manifest this update: Tue 12 May 2026 15:01:43 +0000
Manifest next update: Wed 13 May 2026 15:01:43 +0000
Files and hashes: 1: 2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl (hash: BaWf7O0gu9zLTDcfezJnccbOU7mLr867LywnXtlv33E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:48:df:28:95:bc:d4:41:b0:67:87:b2:e2:28:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ad6f484530e57cc60e3a865a695948476c413f
Validity
Not Before: May 12 15:01:43 2026 GMT
Not After : May 13 15:01:43 2026 GMT
Subject: CN=af8a71ec86115ade54a834b4c0260b8f5c4f4cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:e3:65:5c:8d:43:0b:aa:1e:5c:a9:b8:3a:
3b:5f:0d:7a:03:b6:b6:22:5a:05:35:98:14:29:6a:
96:8a:dd:88:cf:c9:7e:03:a3:0d:47:93:6b:5d:bd:
34:69:ff:0e:d4:c2:4a:05:84:1b:bb:86:37:c7:58:
00:53:8e:7f:8d:a7:d8:57:63:66:4c:bf:cd:9d:fb:
9a:24:7e:a8:77:5a:fb:b1:4e:81:df:b7:e7:b8:ec:
e6:1d:04:34:60:f4:53:99:21:ec:40:90:69:d6:14:
d9:09:12:f8:2c:af:91:ed:97:11:96:6d:76:97:96:
4d:a5:1a:ca:3e:35:d9:cd:0c:ad:b1:16:d4:c4:70:
3f:aa:83:5c:d7:5f:55:2e:79:7f:97:1e:da:e6:b2:
48:8c:23:4e:8b:62:5c:0c:1f:41:75:65:12:6f:57:
28:3e:f1:d3:ff:b0:3d:52:b0:fb:5e:24:7c:a8:06:
1e:34:59:02:eb:92:23:2a:28:cb:cb:73:b4:f7:7e:
ac:bb:31:41:9a:62:12:8d:1b:58:72:ea:6f:af:30:
03:21:81:80:bd:0b:3d:7b:f5:6a:04:fa:ef:a2:1f:
73:86:c0:58:e5:c5:72:1c:ba:ab:36:29:14:c6:dd:
f6:f9:df:df:92:67:40:64:e2:1b:94:6a:cf:e3:cf:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8A:71:EC:86:11:5A:DE:54:A8:34:B4:C0:26:0B:8F:5C:4F:4C:C1
X509v3 Authority Key Identifier:
keyid:D9:AD:6F:48:45:30:E5:7C:C6:0E:3A:86:5A:69:59:48:47:6C:41:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a1vSEUw5XzGDjqGWmlZSEdsQT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c515bb-7e52-4475-ae25-d181d1f76128/1/2a1vSEUw5XzGDjqGWmlZSEdsQT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:a7:55:a2:23:bb:bf:f4:21:6d:e5:8b:8e:29:4a:da:e0:1e:
9e:31:df:84:81:90:1c:bc:b2:a2:28:35:32:4b:5f:e1:03:69:
a8:fd:3c:6c:d6:36:6a:db:20:88:c3:2a:35:2a:d2:49:dc:e2:
b3:2d:e0:f8:44:a2:a7:63:ed:f1:9a:fe:12:a3:13:db:c0:78:
23:8b:4c:88:ff:96:eb:c1:14:dc:32:fe:74:a7:23:42:0d:58:
f7:5a:44:fe:f8:a6:c8:be:d0:8a:5d:9f:40:e5:de:1e:4b:e1:
d3:ce:28:66:d8:0e:93:03:a9:d2:17:de:c2:99:e5:55:bb:53:
47:8a:0f:34:36:ec:09:44:c7:71:e8:70:64:7f:06:27:3b:96:
64:87:ed:00:53:87:18:bb:e9:ad:f2:7d:af:08:aa:9c:2b:ea:
c3:ec:71:a6:b0:1c:03:77:76:90:73:df:ba:bf:e0:3c:6a:ec:
7f:85:99:18:27:21:a4:93:0e:c5:2e:12:33:e2:7f:e4:df:80:
7a:3e:14:4b:b4:98:b9:98:22:29:eb:18:92:8f:80:9a:ac:de:
1f:6e:70:94:8c:8e:76:22:5d:38:c5:60:72:9f:fd:4d:d5:ec:
eb:0f:35:0e:19:c7:b8:9c:b2:4b:f8:4a:2a:1d:ed:ce:92:f5:
0e:0a:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:56 2026 by rpki-client