Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
File: AU97fVHlCBgO5zzt292VXDl3SCI.mft (raw, json)
Hash identifier: QF0N2w1+IVYr/8fCmxNA3U1V9WFhPeTQxH2X4zfV7uQ=
Subject key identifier: 41:4B:4E:FA:B5:47:55:4E:A7:95:B5:90:C2:4E:A0:BD:1C:96:77:A8
Authority key identifier: 01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
Certificate issuer: /CN=014f7b7d51e508180ee73ceddbdd955c39774822
Certificate serial: 019F8F7DD406F22139DFFD9A915BF64322AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 15:00:15 +0000
Manifest this update: Thu 23 Jul 2026 15:00:15 +0000
Manifest next update: Fri 24 Jul 2026 15:00:15 +0000
Files and hashes: 1: AU97fVHlCBgO5zzt292VXDl3SCI.crl (hash: Dl2H4SADnozPbVL+g7cFgN0MQ+Djv4Ko/5hAcmClDTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:d4:06:f2:21:39:df:fd:9a:91:5b:f6:43:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014f7b7d51e508180ee73ceddbdd955c39774822
Validity
Not Before: Jul 23 15:00:15 2026 GMT
Not After : Jul 24 15:00:15 2026 GMT
Subject: CN=414b4efab547554ea795b590c24ea0bd1c9677a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:17:84:28:3e:a9:53:9d:b2:92:69:bf:30:
da:fc:3f:11:15:7c:98:11:0c:94:92:00:e5:84:4d:
e1:de:f9:9a:a4:f3:da:7b:92:78:db:34:35:da:3d:
d1:3a:c1:7e:5a:b4:0a:e5:bd:7a:5b:0e:a4:26:3c:
42:ea:65:b8:70:08:82:44:39:5d:47:31:03:09:20:
10:59:62:69:f1:6a:40:dc:8a:40:57:40:14:3a:78:
53:68:52:d6:b7:b7:80:35:83:4f:6f:2a:79:38:65:
06:5d:05:af:28:32:80:d9:e7:2d:01:4c:8d:22:f7:
52:03:ef:a4:53:23:6b:87:21:58:00:fd:79:6f:ca:
fb:e9:8e:ab:f1:c7:f3:47:4e:fe:17:29:96:bf:8c:
e9:3b:44:93:7b:74:17:7c:c3:3b:d4:e2:47:8a:fd:
66:a7:ee:2b:43:8c:da:62:45:ad:31:68:af:e5:c4:
f4:1a:59:96:2f:53:e3:01:8c:45:d9:5d:c8:ad:48:
88:45:81:33:bc:f9:32:30:2d:73:bf:ee:06:a9:00:
3b:49:bd:d1:4a:1f:ea:1c:08:0a:d4:61:da:61:b8:
56:f3:be:7d:f7:22:38:72:b9:f0:be:69:66:97:6c:
9e:44:e4:d0:33:26:e3:d0:dd:44:4e:bb:ff:a6:7d:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:4B:4E:FA:B5:47:55:4E:A7:95:B5:90:C2:4E:A0:BD:1C:96:77:A8
X509v3 Authority Key Identifier:
keyid:01:4F:7B:7D:51:E5:08:18:0E:E7:3C:ED:DB:DD:95:5C:39:77:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU97fVHlCBgO5zzt292VXDl3SCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/17aa67-8fe4-4a43-aadd-c4c51fcff497/1/AU97fVHlCBgO5zzt292VXDl3SCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:80:70:e2:6e:16:35:cb:33:ea:4d:62:bc:47:c3:8d:a3:40:
3f:8d:7b:7d:05:de:0e:c2:f8:2e:8f:40:e6:99:cf:05:81:cc:
4e:62:1d:08:7f:69:26:b6:9d:42:7f:45:43:7c:fc:7a:15:47:
20:37:ac:34:9f:93:3d:27:00:b3:16:da:07:6d:37:83:91:45:
58:b7:fc:e2:6a:64:a0:17:fe:d1:05:56:bb:d6:3a:a9:01:15:
52:3a:ec:5f:b5:4f:7d:0c:3b:25:b1:5c:44:9e:5c:fe:0e:95:
07:82:7b:1c:49:9b:a4:5b:2a:72:71:61:a8:96:b2:3c:39:b6:
fe:96:61:ca:20:71:d4:64:cc:34:b5:96:5a:60:ff:be:a4:94:
c8:b7:32:af:8e:82:6a:8f:aa:7a:0f:82:9c:b7:fe:d2:4b:cf:
ba:e8:08:5a:05:ea:a8:17:78:2b:0f:8d:3a:c7:7f:b8:d3:f7:
42:f3:bf:96:f3:cc:1d:fa:0a:12:69:eb:d6:71:e0:46:66:2e:
fb:df:13:ac:bc:94:14:8a:b0:32:2f:66:01:a4:14:72:69:0b:
3e:94:4b:83:d7:94:39:3d:e7:ce:4a:fe:44:33:b4:cb:04:81:
a0:fa:00:c2:aa:40:3f:54:67:85:3d:6f:68:3d:52:fc:92:23:
2b:b3:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:25 2026 by rpki-client