Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
File: 2FAiKC40aZ_lSLdShRmiWlDZEzo.mft (raw, json)
Hash identifier: v0ivZsZaT6J+UybCLRL7qPW+Hh1quHuQcJU3UalFN1g=
Subject key identifier: B0:8A:80:9F:FC:40:F2:41:76:54:BD:F6:86:22:97:D5:88:FE:58:1A
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 019F905A0B20F2A81E3C5D9A23C092FE4BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
Manifest number: 18F5
Signing time: Thu 23 Jul 2026 19:00:47 +0000
Manifest this update: Thu 23 Jul 2026 19:00:47 +0000
Manifest next update: Fri 24 Jul 2026 19:00:47 +0000
Files and hashes: 1: 2FAiKC40aZ_lSLdShRmiWlDZEzo.crl (hash: +1i623DZ1wgAavGVDR+/u0ymeRiIrr5ze0fyx2woUgA=)
2: xhpLteHeEuI9N2i0WjCkJHYwXtM.roa (hash: ZhHw/D8clg9QeWX4KlvzTONGmYlvYOv2tFZIA342W2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:0b:20:f2:a8:1e:3c:5d:9a:23:c0:92:fe:4b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Jul 23 19:00:47 2026 GMT
Not After : Jul 24 19:00:47 2026 GMT
Subject: CN=b08a809ffc40f2417654bdf6862297d588fe581a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c4:c6:e8:1b:66:d4:ee:e3:23:00:72:ed:88:
af:ce:e4:2f:eb:bd:fc:90:35:eb:a4:a9:a3:68:40:
0a:41:a7:fd:ad:23:a4:e2:c6:6a:86:6c:1d:a4:42:
ad:2e:fe:c3:e4:3a:74:ba:65:b6:61:8b:09:e2:8e:
25:de:56:3a:2c:55:e5:89:c7:55:5a:ae:fa:5a:fe:
33:fb:fb:ca:bb:e6:90:86:5c:0c:cd:2d:79:ed:32:
e8:60:56:b8:15:a2:71:2b:8a:32:54:6f:b6:9f:2f:
4f:6b:3b:7b:12:4a:71:18:86:51:3c:d8:6b:9b:ff:
a0:aa:2b:b0:75:0c:da:b6:73:66:91:d3:14:a5:6a:
62:83:45:cf:f0:74:d4:11:a8:48:da:5e:ee:97:13:
83:70:56:02:eb:cd:1d:41:1b:91:f8:5c:c9:76:25:
15:91:0d:e0:c3:c2:6c:9e:dc:ec:e8:e6:5d:7b:26:
a5:7e:fc:43:f7:19:2f:62:9e:36:c6:40:a1:e7:e6:
3f:88:d9:5e:af:a3:80:e3:fd:a7:46:1b:6d:33:6b:
a0:59:8f:46:bd:ee:48:65:1d:00:03:50:2e:7e:36:
ff:4a:c4:c5:25:c6:cd:66:ce:8b:ba:d8:29:c8:98:
b7:27:c7:9b:97:48:23:c3:2b:8e:8f:20:2a:55:87:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:80:9F:FC:40:F2:41:76:54:BD:F6:86:22:97:D5:88:FE:58:1A
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5f:76:c9:09:4d:a3:7f:2e:4a:90:a1:16:16:b1:c4:01:2f:
74:b7:04:81:5f:48:c1:6f:f0:a3:ff:f1:19:d5:08:6d:b8:b1:
8a:29:04:14:cf:f4:cf:b7:ab:94:12:ba:8b:10:31:70:b5:72:
92:9b:68:9b:59:8a:80:ff:bb:37:5a:5f:9b:0a:f0:b6:7c:b1:
59:32:89:8a:01:a9:3e:2e:b5:7c:c7:e9:ab:2b:8b:18:27:c2:
02:b1:c7:4e:8f:c9:65:9f:60:2a:54:13:4a:52:70:54:37:f1:
ca:47:60:b9:63:b5:68:08:0c:3a:5a:bc:c6:db:77:88:25:c1:
ee:77:d0:ec:31:ad:ec:e3:d3:f2:03:03:73:e5:a3:47:8d:88:
b2:12:3f:7c:70:92:d3:95:08:45:1a:fe:18:eb:21:b6:e4:88:
c8:72:0b:d8:19:e6:ab:29:2c:d7:97:5c:5d:cf:af:d6:b7:aa:
5e:23:48:36:82:d3:bd:70:af:db:e5:0e:a3:97:d9:18:e8:59:
21:e7:30:25:28:4e:fd:18:0e:6d:5c:88:57:96:0b:d4:a1:69:
5d:24:49:0f:bc:c7:af:af:c9:73:d9:e3:60:6f:6c:81:72:e0:
21:67:7d:a6:79:fd:69:bc:c5:43:1d:a1:61:a9:5e:86:7d:96:
d7:4d:08:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:25 2026 by rpki-client