Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
File: r2A0bQgbHFyBCzlMZuEFErv02Mk.mft (raw, json)
Hash identifier: GXSRWoaJidfHVO0iV4vGX0kTqw6lDcyBg2Z7cOcLueA=
Subject key identifier: 63:86:19:79:C4:DA:8C:F6:B2:CD:C3:69:48:DD:29:33:F8:2E:74:FD
Authority key identifier: AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
Certificate issuer: /CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Certificate serial: 019F95497CC55B0E1FF08B9A59CEA87E85F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
Manifest number: 06E2
Signing time: Fri 24 Jul 2026 18:00:48 +0000
Manifest this update: Fri 24 Jul 2026 18:00:48 +0000
Manifest next update: Sat 25 Jul 2026 18:00:48 +0000
Files and hashes: 1: MmHcaoSID19FRmGF5kFPH25PR2Q.roa (hash: Pv88TmQb3cGeVyGfPSrdF1R8Obs/Bo3T58FvtRvVnRM=)
2: r2A0bQgbHFyBCzlMZuEFErv02Mk.crl (hash: fSLnuhKnVu+zkxK8yPBmcmY4v9mqw0P1Ra4M6fMR+Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:7c:c5:5b:0e:1f:f0:8b:9a:59:ce:a8:7e:85:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af60346d081b1c5c810b394c66e10512bbf4d8c9
Validity
Not Before: Jul 24 18:00:48 2026 GMT
Not After : Jul 25 18:00:48 2026 GMT
Subject: CN=63861979c4da8cf6b2cdc36948dd2933f82e74fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:81:08:6f:7d:2e:71:3f:fc:1f:fb:e5:ac:
05:f5:d4:25:35:d1:4c:ac:25:03:65:24:4b:2f:5f:
a0:5f:5f:11:b3:0f:f0:d9:d2:23:8c:e6:53:2b:0e:
1a:32:f4:e9:06:bf:5e:e6:61:8c:bb:28:f3:7d:d6:
e3:de:0a:7f:8f:3b:7d:91:0c:dc:eb:2b:c5:b1:fc:
e8:26:ef:6c:87:2c:dd:16:28:96:73:6e:4e:0f:d5:
de:30:ab:2f:5b:bc:c0:5f:03:3d:9e:cc:57:4f:ca:
a8:ba:72:42:97:1c:51:c5:4c:37:27:42:5b:1b:45:
cc:bc:5e:68:d7:3b:72:a4:11:81:8d:d4:33:e4:94:
2d:c7:73:3d:6b:7a:28:d1:7b:f7:32:82:92:0e:42:
7a:99:68:d7:de:bf:25:27:6f:98:03:20:bb:30:14:
58:ea:fd:18:03:8c:93:63:5d:79:65:24:35:61:f2:
2c:f0:69:2b:d6:7d:a9:ce:29:11:4f:72:49:bd:d0:
1c:8c:41:d2:11:9a:47:8d:d7:24:3f:45:8f:4c:f1:
32:f7:64:e4:b4:16:fb:38:84:d5:90:7d:99:fc:1c:
4e:3b:da:31:b5:41:73:93:c1:75:b0:1d:c9:15:69:
02:d9:25:d0:2f:13:e2:2a:1f:04:8b:52:28:33:38:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:19:79:C4:DA:8C:F6:B2:CD:C3:69:48:DD:29:33:F8:2E:74:FD
X509v3 Authority Key Identifier:
keyid:AF:60:34:6D:08:1B:1C:5C:81:0B:39:4C:66:E1:05:12:BB:F4:D8:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2A0bQgbHFyBCzlMZuEFErv02Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b660f4-88cb-45f3-a71a-2639839f828d/1/r2A0bQgbHFyBCzlMZuEFErv02Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b3:5e:71:d3:d5:d3:93:2a:08:53:63:56:ce:a8:4d:3b:a3:
28:d1:65:f9:91:f7:40:37:10:1e:c1:19:4b:4b:3a:fe:ec:b8:
28:67:5b:71:3f:17:78:13:3e:17:df:49:0e:18:e5:a3:e3:8d:
39:c3:fe:3c:0c:b2:18:dc:5d:bf:e5:a3:a2:3e:2a:25:7d:ac:
46:72:ca:29:7a:b7:b0:11:aa:7d:9e:a0:8f:56:53:75:8c:a8:
e7:96:3d:36:7d:7b:eb:af:d7:2d:7d:73:ba:54:03:91:b0:51:
db:3c:1e:6e:2a:1e:f8:ea:50:7b:af:4c:ee:d9:79:f3:17:1c:
84:26:2c:69:1e:bb:d6:be:75:d5:69:41:ab:77:da:be:f6:6e:
aa:9d:59:e3:96:35:7a:3f:2f:ee:b0:a6:48:10:38:30:c3:b4:
e5:4a:55:29:e0:d6:6f:1b:10:32:49:fc:f0:03:d3:66:75:7c:
c9:c7:8f:cd:35:78:6d:b4:ce:6f:11:cb:46:60:00:e7:e9:ee:
35:ff:a4:e8:23:0a:c5:57:23:c0:01:aa:58:ba:9b:04:35:e5:
7e:f5:de:96:6a:75:58:6f:45:c0:9a:9b:5d:ef:b0:44:36:4b:
3f:17:57:5d:93:fe:33:64:5b:54:e3:c6:ad:55:16:37:23:83:
94:b1:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:56 2026 by rpki-client