Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: ijmxC2IYE4nc4MizC7YBelG/p5UoHjirURVcHQyOdcs=
Subject key identifier: F7:90:A2:88:D1:D9:F6:3A:D7:9D:BE:CA:10:39:53:B5:16:0E:C4:E8
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 019F9391FC9A56237DDF0CC30D0F18DA1BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1450
Signing time: Fri 24 Jul 2026 10:00:45 +0000
Manifest this update: Fri 24 Jul 2026 10:00:45 +0000
Manifest next update: Sat 25 Jul 2026 10:00:45 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: YGtpY7sclzvK1K986s0XS+aY04oaZLwsJ2xeLhu78Xg=)
2: lcX_BfSjVldf0AWvAKj1fHUxC84.roa (hash: EI6Mzu5z6YSWUkBvK1kxjCqRN5l7TNUNJw5p8ATCsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:fc:9a:56:23:7d:df:0c:c3:0d:0f:18:da:1b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jul 24 10:00:45 2026 GMT
Not After : Jul 25 10:00:45 2026 GMT
Subject: CN=f790a288d1d9f63ad79dbeca103953b5160ec4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:f4:ba:e1:cc:81:a8:80:9b:0e:84:2f:96:
54:03:24:ff:a0:cc:ea:b7:cc:15:97:53:be:7c:fd:
cb:ae:dd:24:11:8a:78:04:dc:43:fc:fd:29:c1:ac:
e2:c8:21:10:8f:bc:c4:29:ab:27:f1:30:59:b8:94:
11:b2:59:db:7d:06:3d:51:ab:1d:2a:1c:5c:bf:c6:
f5:06:20:ae:2d:33:86:50:d9:63:90:bd:4a:f2:5e:
fc:6b:90:6a:05:06:73:6a:aa:a2:37:db:49:22:86:
97:99:eb:85:d0:5e:5c:8f:b3:db:6e:eb:b2:55:14:
e3:b4:8b:f0:89:1d:d5:4a:21:60:06:2c:e1:b6:ad:
ba:a1:a0:9c:b6:c6:e2:b6:9f:e7:87:30:1f:bd:a2:
da:78:28:96:8a:33:32:43:20:22:23:09:20:ff:be:
1d:fe:a4:ce:52:b1:b1:a7:71:72:f4:28:fd:49:70:
21:f0:b0:2b:33:7f:7b:c8:73:3d:ed:49:d1:59:82:
1a:b9:eb:89:d1:93:47:10:53:3f:47:08:a7:bd:bb:
d6:77:4d:b1:e6:96:d1:68:db:1e:6c:dc:1d:e1:0c:
d9:7d:76:67:8f:68:eb:8d:80:07:1f:46:fc:20:7a:
d5:ed:f4:dc:e6:91:21:de:ac:5a:38:de:84:54:7d:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:90:A2:88:D1:D9:F6:3A:D7:9D:BE:CA:10:39:53:B5:16:0E:C4:E8
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c2:71:1c:81:bf:b0:f9:94:8a:82:2f:62:d4:ee:02:75:ca:
41:8f:0e:b1:82:fb:37:65:a2:85:ff:b0:ab:de:da:08:b7:9e:
e3:d6:0b:b4:7b:9d:9d:f2:76:c2:f1:4a:75:28:4a:3b:96:6c:
a7:f7:a6:dd:fd:3b:b5:6a:b8:aa:31:8d:a4:68:4b:85:3b:3a:
22:2c:2d:a1:14:28:9f:8c:b7:6c:5b:41:8c:9b:23:09:47:9a:
1c:16:5e:2e:74:bd:ce:cf:c1:f9:0c:20:cf:c9:74:e3:57:4f:
e9:d3:c4:13:b1:7f:20:96:06:ce:b0:5e:b2:a6:ab:b1:fb:19:
49:71:4b:2e:e5:a9:12:98:d5:1e:5d:d0:cd:af:e1:e8:ac:7e:
b1:dd:66:5a:2a:fa:5e:a0:43:26:3a:fc:f4:7d:1b:44:60:48:
79:34:0f:77:a0:42:4c:e5:57:20:78:68:a9:aa:38:43:dd:ce:
4c:4b:65:6f:13:e6:0c:3a:03:bd:09:a7:11:af:6b:a9:15:66:
da:6f:c2:9f:1d:eb:88:5b:39:ee:8c:b6:ef:aa:b9:5e:69:96:
10:4b:b8:b9:55:0d:ed:9d:ae:9a:21:09:65:14:eb:6f:54:6f:
65:8f:b3:74:16:fb:7a:46:67:22:45:bc:8e:0d:0d:cf:c5:3b:
02:c4:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:55:24 2026 by rpki-client