Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json)
Hash identifier: YWJ27Eys4/Lo1OVIYZREFNUXZApktISuNDjhA6cPC4E=
Subject key identifier: 7C:F0:F0:0C:BC:0C:79:7B:AE:BF:B5:FD:09:D9:32:E6:AE:D7:71:DF
Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Certificate serial: 019F9135CC6F72979C91D3711C6A1CBA87F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
Manifest number: 0392
Signing time: Thu 23 Jul 2026 23:00:49 +0000
Manifest this update: Thu 23 Jul 2026 23:00:49 +0000
Manifest next update: Fri 24 Jul 2026 23:00:49 +0000
Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: QOAS9ROItXtTyXy+wjG+nh8Qvhut0i78hQJJeEH9LAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:cc:6f:72:97:9c:91:d3:71:1c:6a:1c:ba:87:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec
Validity
Not Before: Jul 23 23:00:49 2026 GMT
Not After : Jul 24 23:00:49 2026 GMT
Subject: CN=7cf0f00cbc0c797baebfb5fd09d932e6aed771df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:00:81:e0:4d:50:57:f2:9f:34:47:8f:ad:
da:f4:80:2d:25:47:93:c2:88:1b:dd:1f:cc:78:58:
a9:de:d9:9c:da:58:a8:0f:d0:57:b0:88:48:89:84:
df:43:a3:c1:70:90:97:3f:3f:df:2b:dc:24:33:c7:
d6:fb:7f:76:30:15:dd:1d:ae:e9:29:0e:ce:4b:be:
b8:a9:ce:8e:fd:e3:66:60:a9:6d:81:b1:19:d5:00:
df:45:d8:f8:34:1d:d5:33:dc:ee:f7:a6:d5:28:2c:
87:2a:55:fd:e5:33:80:ec:82:1a:ef:f3:cc:c1:cd:
90:2b:a8:2b:ce:0d:3a:1e:79:85:80:0f:67:57:09:
d1:3a:1f:aa:f9:ff:59:f8:87:63:d2:00:68:95:a7:
16:ac:5f:71:02:63:6a:3f:18:cb:3c:bd:50:a9:6d:
0c:24:59:cc:4b:40:83:5e:a1:c8:61:40:b0:a3:1b:
65:81:ad:42:d9:00:75:fb:1f:be:62:21:4d:ad:82:
ef:dc:36:e0:7f:b6:4f:a7:96:c3:0f:60:a9:57:fb:
6b:d9:20:41:97:6a:4b:3a:56:b2:4a:a5:e8:b1:86:
27:00:fd:6e:51:14:49:23:ae:cd:cc:d8:a9:80:51:
45:4e:bc:85:50:fc:1f:18:44:4b:c0:a7:f3:a0:9f:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:F0:0C:BC:0C:79:7B:AE:BF:B5:FD:09:D9:32:E6:AE:D7:71:DF
X509v3 Authority Key Identifier:
keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:ca:9a:d4:4c:9c:5a:77:ab:de:5b:b1:a1:17:1b:b2:f7:1b:
5c:6c:95:5a:b9:41:58:a4:61:42:b0:a5:10:c3:ac:f6:29:24:
e6:83:7d:36:d2:4f:ee:14:d5:d1:a4:17:3d:f8:ad:21:45:3e:
ed:b7:2d:fe:63:18:ce:63:a0:a6:2c:a8:8c:7e:f6:13:fe:ba:
da:b7:f1:3d:c8:ca:62:cd:9a:f2:be:98:f2:ab:59:b2:d8:8d:
a5:d3:63:82:cc:d5:98:8a:a6:9a:68:e6:98:cd:b4:7b:4d:f3:
e8:89:ba:2b:bd:4a:80:c8:64:a6:92:65:20:0b:96:18:5e:43:
4e:89:20:90:f9:83:ce:4f:02:38:ff:05:76:59:a2:af:c2:89:
4e:7a:81:08:ee:89:54:f8:4f:09:f4:15:e2:e0:a0:a0:73:b4:
e3:68:c2:2a:5e:53:c0:78:c7:07:f3:97:49:b7:7d:8f:b6:0f:
56:2a:65:16:2f:04:90:d3:51:c7:bf:78:0c:a2:2f:ed:4a:0f:
a3:4c:1e:d6:95:70:64:24:a9:c2:44:f4:ec:14:a5:28:07:38:
f5:9e:65:89:73:34:48:83:50:f2:9a:99:01:e0:d5:94:8c:d1:
73:dd:aa:ba:76:f0:b0:22:ee:92:a0:c5:ec:03:81:f2:df:d3:
98:7e:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:23:14 2026 by rpki-client