Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
File: 2UivxK9I3Sso6FSZZFe04qhDTWE.mft (raw, json)
Hash identifier: 9dqgZfO+TTYpAro5IgATsCE8cVRqyHspyEhVkSafk4g=
Subject key identifier: E0:2B:6B:47:E8:4C:E7:D4:30:BC:06:B9:9B:76:F1:7E:7F:D1:FF:0A
Authority key identifier: D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
Certificate issuer: /CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Certificate serial: 019F90FE64F8C0685CC16DF1F0D78E0BCA5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
Manifest number: 0153
Signing time: Thu 23 Jul 2026 22:00:18 +0000
Manifest this update: Thu 23 Jul 2026 22:00:18 +0000
Manifest next update: Fri 24 Jul 2026 22:00:18 +0000
Files and hashes: 1: 2UivxK9I3Sso6FSZZFe04qhDTWE.crl (hash: 3mlegdYSJOj01u3m0ebQMSB4h3MFdlebaCJi4AK9M7s=)
2: UO5esvuscm_Muh0KmfgSRLz3jvA.roa (hash: Eg2xdzCBLccjbkg/73TIkrnL2S4mi3j1eD98e/h7Rpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:64:f8:c0:68:5c:c1:6d:f1:f0:d7:8e:0b:ca:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d948afc4af48dd2b28e854996457b4e2a8434d61
Validity
Not Before: Jul 23 22:00:18 2026 GMT
Not After : Jul 24 22:00:18 2026 GMT
Subject: CN=e02b6b47e84ce7d430bc06b99b76f17e7fd1ff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:52:33:f5:ab:e6:1b:96:81:ed:ad:99:f0:
78:23:3c:69:f9:95:70:1b:7c:5d:f1:be:8c:37:47:
74:83:e1:7e:e5:3b:6c:f3:9b:17:06:0f:2b:cc:fc:
8a:9d:56:6d:43:16:d2:69:1a:26:c7:28:c1:4c:b8:
21:c1:1e:25:0a:d7:84:5d:13:27:c3:61:d4:9e:a5:
80:26:b5:fc:2c:ea:5a:cd:a8:8a:a3:52:df:e9:85:
53:93:d1:3f:fb:cd:34:a7:ee:6c:93:cb:3a:5f:33:
c6:dc:a7:9c:52:ba:13:bd:38:98:c1:42:83:cf:47:
95:a5:dc:ca:20:36:b6:aa:1f:8c:ca:b6:91:17:47:
4d:b3:21:84:0e:bd:a7:e8:8a:1b:bd:75:ff:7d:96:
4f:2d:0b:e3:13:c4:78:c1:42:67:0b:51:4d:69:68:
fa:5f:38:1a:4e:f4:88:ae:8e:7d:b5:2b:98:9b:d4:
17:fa:80:41:44:25:7d:d7:d2:62:af:37:5c:0b:1c:
a7:96:ff:f2:a6:54:ec:d6:5d:c7:b4:82:48:1e:14:
f4:c6:5d:20:a9:90:0e:1c:b0:f2:64:cf:84:d0:44:
5f:bd:a7:5a:c7:a1:ff:ad:35:fa:61:66:d4:f6:6d:
ef:c9:90:16:10:0b:af:1f:4f:60:a0:d7:a3:ca:57:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:6B:47:E8:4C:E7:D4:30:BC:06:B9:9B:76:F1:7E:7F:D1:FF:0A
X509v3 Authority Key Identifier:
keyid:D9:48:AF:C4:AF:48:DD:2B:28:E8:54:99:64:57:B4:E2:A8:43:4D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UivxK9I3Sso6FSZZFe04qhDTWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6d40da-f682-4c10-b796-e395be8935f0/1/2UivxK9I3Sso6FSZZFe04qhDTWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:d1:dc:a5:b1:6f:88:8a:b4:af:33:f6:bd:5f:77:38:aa:
1b:ec:9d:e4:fc:56:ae:d2:7a:ba:1a:b9:3d:37:aa:e4:4e:76:
eb:4d:5a:e3:91:cf:fa:e2:ab:f9:94:12:49:a7:a9:ce:e1:18:
3f:59:6b:ae:62:23:ca:d7:82:77:d9:e7:c9:33:73:81:ec:c5:
aa:4d:8e:5a:e3:69:28:50:00:29:37:b5:e3:1f:45:2b:25:96:
d3:01:e9:43:96:a8:08:6d:39:da:0a:d2:0a:63:6e:d9:9a:21:
f5:91:df:33:e7:7c:4e:68:b7:4c:43:55:da:f7:b6:1a:c2:a2:
1a:77:31:46:65:06:bc:51:6d:52:21:c2:ef:0f:21:dd:f5:6f:
37:bf:15:4f:ef:9a:a2:27:7e:a9:89:da:a3:6d:c8:d9:33:c2:
f4:8c:44:77:ec:10:7e:18:b7:84:e8:ac:87:4c:1a:19:7b:11:
25:3f:91:75:1f:c0:a3:22:2c:fc:3d:6e:e2:d9:13:74:1e:eb:
cd:cf:b3:61:93:ba:bc:4e:71:41:46:0e:6c:a6:40:4a:97:d9:
71:a0:d6:c6:7c:96:39:ab:5f:bc:d5:69:04:ba:d0:75:d2:8f:
32:a9:08:90:6c:e6:cb:2c:89:6e:e6:9e:e3:19:88:ef:6d:a0:
bd:c7:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:39 2026 by rpki-client