Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
File: A6QSK0og8cymB4qR2ai7HAP7n80.mft (raw, json)
Hash identifier: z3tojxbv7iirg0HchfHWbip1mFTkOZHgtX2lCvnhAr4=
Subject key identifier: 52:B2:4C:3D:83:CA:BB:B7:20:A6:A2:36:39:32:BF:DC:42:97:6E:0F
Authority key identifier: 03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
Certificate issuer: /CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Certificate serial: 019F9323EE9C13889EB63DF3E60B90F003E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 08:00:33 +0000
Manifest this update: Fri 24 Jul 2026 08:00:33 +0000
Manifest next update: Sat 25 Jul 2026 08:00:33 +0000
Files and hashes: 1: 0jj85-oYukZPfmdDqoWSsZvTa3s.roa (hash: 9CTe2BfWzoRqe7mB+Ls1PH8RMNgBpSi/kK2iHWVfBTg=)
2: A6QSK0og8cymB4qR2ai7HAP7n80.crl (hash: MVomMW8xqB5W+a0CSy2fGEoR/vDoxnIGI3BvgeTJTmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:ee:9c:13:88:9e:b6:3d:f3:e6:0b:90:f0:03:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a4122b4a20f1cca6078a91d9a8bb1c03fb9fcd
Validity
Not Before: Jul 24 08:00:33 2026 GMT
Not After : Jul 25 08:00:33 2026 GMT
Subject: CN=52b24c3d83cabbb720a6a2363932bfdc42976e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:0f:6c:c5:7f:54:0a:06:cc:9e:2a:30:6e:
33:63:f1:c2:6b:8e:46:8c:a4:a9:0a:87:07:ce:6f:
d7:74:1f:f2:f0:43:35:5f:f1:11:32:9f:9b:42:60:
a9:fc:72:a2:fd:85:eb:23:53:77:5e:16:85:17:7a:
01:89:63:c9:bf:0b:5c:c9:2c:7d:ae:fe:ee:d6:34:
95:3f:dd:07:3e:f1:a5:3c:c3:db:83:6c:55:56:f5:
b0:dc:2a:95:b0:0c:4d:ca:96:17:d5:3c:1a:5f:52:
b1:3d:ca:23:80:ed:74:ca:d6:59:aa:48:a0:15:d4:
56:88:69:e6:1d:6f:39:50:3e:d4:9f:c7:c8:21:96:
7a:18:b0:c0:7a:05:37:29:26:e3:e0:23:aa:a8:8e:
81:f6:5a:22:25:d1:52:43:41:dd:35:56:94:02:83:
23:05:2a:24:be:e7:dc:0f:bb:ae:54:08:e9:11:65:
1c:4a:56:29:12:ed:96:e9:5b:24:d2:6e:7c:58:29:
3e:98:41:44:d9:f9:09:23:a1:1f:75:64:9e:44:c0:
6c:0e:a7:cf:c7:75:3a:b8:63:89:0f:47:71:00:4f:
dd:82:eb:06:f3:70:2b:c7:34:c9:73:50:67:94:f3:
3f:55:7f:20:51:ba:68:71:7f:96:a3:be:5c:b3:16:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B2:4C:3D:83:CA:BB:B7:20:A6:A2:36:39:32:BF:DC:42:97:6E:0F
X509v3 Authority Key Identifier:
keyid:03:A4:12:2B:4A:20:F1:CC:A6:07:8A:91:D9:A8:BB:1C:03:FB:9F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6QSK0og8cymB4qR2ai7HAP7n80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/dbc06c-a612-4db0-a856-787238415b08/1/A6QSK0og8cymB4qR2ai7HAP7n80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:de:2c:0b:7d:a5:d6:48:37:4b:90:52:80:54:c1:8e:b1:
65:17:e0:84:e0:82:27:e7:50:9f:7b:d6:a0:dc:62:7e:57:f8:
22:2e:ae:86:a0:46:6c:12:52:ca:4a:43:d2:3d:ee:b1:45:e1:
0a:fa:f1:50:35:4f:69:c4:87:f3:88:61:cc:05:9f:0f:63:32:
0d:75:4d:c1:71:92:05:5e:2b:a1:dc:06:eb:67:e8:81:ea:1c:
5a:4d:ca:7a:b6:f4:d4:7a:9f:8d:34:9b:e5:62:ec:2c:3b:ae:
ce:43:68:91:e0:40:8b:54:da:53:9b:a0:f3:bd:74:e8:33:b9:
cd:a7:56:5b:0e:57:df:c5:a5:d1:92:1c:c9:c7:13:92:62:8c:
28:59:c6:09:91:08:42:69:06:2e:d6:68:f3:e5:96:b8:30:b4:
0b:c3:5f:1a:75:6e:87:f5:44:bc:a4:2f:7f:08:67:12:71:6b:
27:e9:c6:c2:67:9c:45:a3:89:8e:20:aa:e6:6d:51:36:68:c5:
c3:c2:43:2b:2a:2f:a3:df:f0:37:ad:de:c0:7c:98:a5:1a:81:
c4:6a:85:d2:07:85:7e:03:4a:f1:27:21:20:ad:d7:4d:36:fa:
19:c8:92:d5:1b:a3:e0:8d:6e:98:9b:07:f6:19:da:e4:f0:6e:
b6:98:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:52 2026 by rpki-client