Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
File: in2Cv6bL-YO5cDSUAb3veO1mgrg.mft (raw, json)
Hash identifier: a4migAdJ61hJuETNBIf1DIJ9zCTDDHq3nVpDeti1m34=
Subject key identifier: 2A:63:DD:6A:FE:4E:40:54:E8:06:46:41:6E:D9:C9:68:94:EB:6D:ED
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Certificate issuer: /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial: 019F8FECD1C08B285F362C204866BA5BB17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
Manifest number: 0A
Signing time: Thu 23 Jul 2026 17:01:29 +0000
Manifest this update: Thu 23 Jul 2026 17:01:29 +0000
Manifest next update: Fri 24 Jul 2026 17:01:29 +0000
Files and hashes: 1: hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa (hash: zDEzbE4uwtCgoLiCH/chQKVEo68ut8ck0BWOTkrF+1g=)
2: in2Cv6bL-YO5cDSUAb3veO1mgrg.crl (hash: cK3w6nO9A75Mlho773J1Rm4x8/e8t88pDoQriXVy35A=)
3: xS8E-QjHw2dzPf1KkLqn10hE7LM.roa (hash: 5/fVJMfp+DX4M6I9ZjhWtgFG3senFJ4L1a5dgOE8EkY=)
4: yeXW_YTNCb28ui0glUomJkKeHCk.asa (hash: vdoh5rReyHOdjiVdFljYmY00V/dpR9j9Pzzhrb2/aMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:d1:c0:8b:28:5f:36:2c:20:48:66:ba:5b:b1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Validity
Not Before: Jul 23 17:01:29 2026 GMT
Not After : Jul 24 17:01:29 2026 GMT
Subject: CN=2a63dd6afe4e4054e80646416ed9c96894eb6ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:cb:3d:95:5c:2a:c0:1f:60:f5:dc:54:1d:
38:e2:8b:60:74:34:c8:5a:f7:3f:33:ca:93:9c:93:
f9:6e:d1:92:73:3b:c5:2a:d6:48:c5:c6:c2:b9:60:
e0:29:bf:60:bb:c7:d8:a5:e2:2a:3c:6c:33:7a:d8:
e1:61:8c:3f:c7:fd:e6:c2:20:12:9d:14:70:e8:d8:
df:8d:53:a9:c6:39:37:20:d5:e5:e5:3f:6f:8a:77:
1d:dc:86:b7:ca:79:51:48:d9:7f:d2:d6:b8:9d:d1:
1d:33:b5:98:8a:48:57:57:7c:28:30:0f:e9:0a:ce:
b0:4b:85:d2:9c:72:70:ad:78:54:6d:53:78:b0:97:
af:47:19:8a:b6:95:7d:f1:80:4c:bb:9c:ea:f9:04:
76:7d:1e:28:ae:05:be:ec:c2:1b:5d:cc:74:7b:02:
64:e0:ea:71:fa:37:7a:17:84:4e:19:e8:2d:14:ff:
28:f1:a1:99:4f:d2:b4:b8:60:1e:bd:5f:38:81:00:
41:eb:45:52:50:d7:83:60:10:03:e7:1a:1d:f0:a1:
d1:d8:90:20:d9:43:13:8b:91:d5:6f:05:6a:37:dc:
d6:12:4a:65:64:95:5d:57:35:63:b5:cd:67:3b:62:
90:ce:cb:1f:b8:c0:cc:5f:da:5e:02:41:90:83:83:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:63:DD:6A:FE:4E:40:54:E8:06:46:41:6E:D9:C9:68:94:EB:6D:ED
X509v3 Authority Key Identifier:
keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:51:41:7a:48:e8:3a:a4:ad:65:f3:26:40:21:df:24:ed:
3a:ae:3c:3a:26:c3:ec:8f:2b:b6:41:86:f0:24:df:05:20:8d:
d3:6a:c3:a5:11:ed:d8:c4:82:fb:ce:09:b3:bf:8c:e9:62:d0:
fb:c9:e6:84:9c:8f:21:ae:3d:26:aa:7d:d4:a8:c2:26:0c:d0:
bd:f7:5b:e0:f3:89:31:12:63:73:33:f9:bd:64:2d:f2:0a:7a:
35:b7:79:15:2f:a4:70:9d:be:7f:24:71:e3:7f:a9:ae:0e:cc:
bb:02:1f:20:54:3d:df:16:e8:40:8b:a4:1e:23:a6:3b:93:8d:
85:e1:91:46:dc:32:5c:fd:54:49:73:34:a2:75:94:fb:59:f0:
63:a9:a3:68:da:84:e5:b3:f2:aa:df:08:bd:21:29:01:6b:1d:
68:6d:02:12:b8:fe:b2:d4:96:cf:1c:2b:25:b4:f5:5b:99:03:
ff:5b:4c:95:77:60:1b:d7:e0:bc:2c:10:29:09:06:36:06:79:
33:3d:fa:04:8d:81:e4:7b:60:11:1d:43:bb:3e:86:2e:d3:c7:
5f:38:f9:db:48:3e:ac:fc:13:94:68:5b:ba:c0:4d:f9:86:0d:
0f:9f:9d:1a:c1:33:99:bf:44:b4:55:07:05:70:a7:47:94:36:
51:89:28:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:54 2026 by rpki-client