Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: tQ+VIXtK8T5c+MnU4cikxdMiGPywVuUxS7DnRpkJxgU=
Subject key identifier: 98:8E:01:86:9F:78:6C:85:3B:0A:E5:DB:E4:0A:E2:42:0F:A1:B1:F0
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019F90C769D8CFB79BC4C50E42CD42D7B3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 13E6
Signing time: Thu 23 Jul 2026 21:00:15 +0000
Manifest this update: Thu 23 Jul 2026 21:00:15 +0000
Manifest next update: Fri 24 Jul 2026 21:00:15 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: 9a+535p09bVkGNasd2BcLk4GKFuCexgktdnP79M5LDQ=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:69:d8:cf:b7:9b:c4:c5:0e:42:cd:42:d7:b3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jul 23 21:00:15 2026 GMT
Not After : Jul 24 21:00:15 2026 GMT
Subject: CN=988e01869f786c853b0ae5dbe40ae2420fa1b1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:95:34:82:44:82:40:4d:4e:b3:d3:fd:79:
9e:68:69:6e:f9:c4:7d:84:d6:46:01:03:71:d2:22:
9d:2f:91:a2:49:34:4b:91:9f:48:66:23:95:3e:9b:
be:16:8a:ed:ed:aa:92:b8:88:3a:13:64:df:dd:31:
b6:ba:43:75:9a:a0:64:53:ae:ef:b6:6d:01:92:a0:
c6:4a:ce:28:f1:c9:41:35:e6:f7:94:b7:55:74:d6:
4f:66:8b:b3:87:95:83:58:20:54:fd:94:84:16:41:
47:4c:c3:92:35:a8:31:fd:7e:75:69:17:11:51:3f:
4d:00:39:1c:51:0a:3e:10:49:f6:d5:ba:8c:82:b8:
9f:56:7a:55:14:28:fe:98:5b:3a:fc:dc:db:01:29:
61:99:25:c0:e9:41:09:e9:36:53:3b:e2:43:5f:69:
7e:9e:68:54:33:cf:ec:91:25:88:0e:3b:a1:62:9d:
24:56:4c:8b:9b:e5:de:64:eb:ef:52:ec:46:ec:12:
b7:e7:2c:45:f8:62:69:90:e8:e8:7e:a4:54:45:03:
f9:00:f6:71:5f:13:76:17:7c:97:51:1c:0b:ab:e7:
70:d0:00:78:06:4b:cb:5e:ed:4a:8e:94:0e:66:7b:
8c:45:5b:a9:5e:d2:3c:6b:ed:b0:12:9d:4e:0d:67:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8E:01:86:9F:78:6C:85:3B:0A:E5:DB:E4:0A:E2:42:0F:A1:B1:F0
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d2:2c:25:72:1c:0c:3b:3c:68:61:14:f0:88:15:39:78:0f:
fc:06:2d:29:08:06:22:ed:d8:c4:83:4f:e5:88:1b:40:59:ec:
ec:9d:d4:14:70:74:a3:22:68:60:47:45:a7:1a:28:de:e7:fd:
66:a2:c0:e6:ed:ab:c7:8a:42:43:8e:f7:6a:60:52:59:a6:b1:
55:32:bd:e1:1e:76:5d:1c:36:09:d9:7e:e7:2b:ca:4f:23:51:
84:1f:1d:9c:38:f2:f3:e0:45:92:fe:4c:fd:94:f2:5d:01:15:
18:9b:f7:64:74:5c:20:9c:f8:cb:11:cf:1c:a3:91:d5:45:7f:
46:da:fe:ac:a3:d2:ff:16:59:83:7a:a9:70:ee:15:93:3c:0c:
6b:c7:90:e4:60:7e:92:20:f3:fa:15:6b:2d:8a:bd:f1:86:5b:
85:20:12:0e:67:15:3a:98:b1:f6:79:f2:07:55:c5:c2:14:30:
d2:1c:be:e4:6b:a4:7c:94:62:f3:5f:b4:03:fe:18:8d:77:10:
d2:90:7f:b3:5f:5b:43:bc:d4:0a:e2:af:48:64:c1:6f:30:ef:
45:55:68:8c:b3:6e:09:f4:a1:d8:03:b8:10:0b:a3:fb:c5:ed:
82:76:4a:65:13:eb:8b:33:ba:57:3c:51:2d:e0:e8:79:cb:64:
c0:be:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:31 2026 by rpki-client