Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
File: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft (raw, json)
Hash identifier: r+A1XbzpLPLpYkZEoNWSfN+II0xVG/5IyPmOrkLhz64=
Subject key identifier: 7B:93:31:DD:D2:77:40:39:30:E6:54:5C:F8:AD:DF:6C:10:CF:2F:C1
Authority key identifier: 6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
Certificate issuer: /CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Certificate serial: 019F924847F5D0990CCC4CE621C2C06C1BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
Manifest number: 1958
Signing time: Fri 24 Jul 2026 04:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:00:38 +0000
Manifest next update: Sat 25 Jul 2026 04:00:38 +0000
Files and hashes: 1: a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl (hash: UvghDYisA2JIAkGheZRrqmzCZiz7W9f0+7z+7GHrWOk=)
2: d05NZs7Vp4A4bdkkXQCy0ZcAG_M.roa (hash: pxpY0wF8UltIS3jIz+gxPx1Ot7KUGL05x2qdaWnLALU=)
3: s6-TiC2j7Ecuhv-qeQB3bnHtNz4.roa (hash: 9N+X2B0X/bMumZQ9VQKQ2LEJ87GkVTxZeac/M5p+KhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:47:f5:d0:99:0c:cc:4c:e6:21:c2:c0:6c:1b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6cc790695b719b923c74d20fab7e63c18bc736
Validity
Not Before: Jul 24 04:00:38 2026 GMT
Not After : Jul 25 04:00:38 2026 GMT
Subject: CN=7b9331ddd277403930e6545cf8addf6c10cf2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:2b:86:2b:49:5e:d5:b4:ca:52:a9:5b:e9:
20:ea:dc:44:42:85:4f:ee:d7:92:6e:5f:d3:61:cb:
86:56:7b:fd:8b:be:0d:6f:db:6d:ee:78:d1:db:c8:
f3:aa:c0:b9:39:05:97:d0:57:7f:d1:c9:e8:4b:ad:
6f:d5:5e:56:ba:92:d9:f6:68:a5:d1:f5:c8:22:b3:
cb:f5:3c:9c:38:7e:9a:b5:30:90:9a:68:4a:8a:9a:
9c:32:10:f0:95:d0:b6:a1:42:7e:19:aa:99:c1:6c:
80:78:83:5a:b6:74:7c:26:73:20:51:fe:d3:5d:d6:
16:c4:1c:7b:12:3f:0c:a7:28:3c:08:b6:78:9d:d0:
d7:bd:e2:cf:9f:f5:03:78:9e:b2:01:bd:76:c4:74:
85:b5:72:c5:b6:28:ba:9e:09:4b:69:0d:03:44:de:
08:e5:87:25:ad:c5:2e:75:40:2b:58:42:ee:f8:8c:
15:05:61:ae:0b:a3:bc:e4:14:26:ca:bf:29:55:e4:
eb:ce:69:34:b8:46:32:2f:58:f7:5b:f7:2d:72:2b:
6a:fa:ce:25:12:1d:01:59:d2:47:a2:ac:89:d1:cd:
31:9a:cf:8f:8c:79:23:6c:ad:d7:71:19:8e:f9:80:
48:1f:76:03:dc:87:ba:55:f4:b6:dd:68:34:8e:bb:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:31:DD:D2:77:40:39:30:E6:54:5C:F8:AD:DF:6C:10:CF:2F:C1
X509v3 Authority Key Identifier:
keyid:6B:6C:C7:90:69:5B:71:9B:92:3C:74:D2:0F:AB:7E:63:C1:8B:C7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/54af68-4074-45c9-95e9-57d5f401b564/1/a2zHkGlbcZuSPHTSD6t-Y8GLxzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ae:3f:ea:ed:b0:cb:3e:a2:91:66:82:bf:3f:05:d3:29:b1:
58:5b:c7:16:07:fd:1e:cc:0c:92:c7:fd:d3:46:f7:72:72:5b:
9b:6c:0a:ea:af:c8:18:c7:ca:45:3f:ec:c5:c2:ff:fa:0c:8e:
01:70:4e:a1:03:af:b4:ad:7f:27:ac:d7:b3:2b:8f:fb:6d:13:
e9:0b:42:94:b9:dd:fc:51:af:76:09:99:d7:69:f5:23:ee:36:
7b:c4:a4:51:b9:7a:f7:04:cb:70:04:96:51:4f:13:2c:01:9c:
16:13:af:3b:3e:09:ef:3e:11:a7:c9:95:dc:34:1a:57:b7:03:
12:57:98:63:69:d8:38:24:7e:cf:6b:9c:64:39:aa:3c:da:77:
f0:1a:b2:49:8e:8c:cf:ea:cb:e0:ee:e7:92:e2:bd:7d:27:f0:
aa:cf:e4:b6:02:ae:34:61:13:43:74:c6:b5:ae:40:91:61:b1:
4b:1c:11:e8:94:22:3f:95:2a:dd:ce:9a:1c:24:00:77:5e:b1:
c7:e4:0d:04:c8:5e:5e:9e:69:ec:73:2a:49:74:a6:f7:56:5a:
a5:b1:f7:0f:07:6e:c1:78:d4:f5:37:b8:39:0e:c8:c1:80:c0:
3e:1c:c0:68:3b:a6:b9:9e:d2:9e:a4:f5:b2:29:ee:af:6f:95:
be:cf:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:05 2026 by rpki-client