Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
File: A2hHspcjX68HFob-0sHpEL9gBIY.mft (raw, json)
Hash identifier: ZzYP7jGawB+InJyMhGPAj5GGWotA2ls/EKcB8k8IZAk=
Subject key identifier: 3F:9F:55:57:AD:EA:2A:EB:FE:A6:55:EE:FD:A4:7D:83:CC:4C:B6:BB
Authority key identifier: 03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
Certificate issuer: /CN=036847b297235faf071686fed2c1e910bf600486
Certificate serial: 019F90FE8F094CA4FF61E2157E7197127BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
Manifest number: 1656
Signing time: Thu 23 Jul 2026 22:00:29 +0000
Manifest this update: Thu 23 Jul 2026 22:00:29 +0000
Manifest next update: Fri 24 Jul 2026 22:00:29 +0000
Files and hashes: 1: A2hHspcjX68HFob-0sHpEL9gBIY.crl (hash: /jYX/3SgGGwoNo15wXT7zGBJWSFqxHfi7RF+XgvJX28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:8f:09:4c:a4:ff:61:e2:15:7e:71:97:12:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036847b297235faf071686fed2c1e910bf600486
Validity
Not Before: Jul 23 22:00:29 2026 GMT
Not After : Jul 24 22:00:29 2026 GMT
Subject: CN=3f9f5557adea2aebfea655eefda47d83cc4cb6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:14:5d:0c:c7:c5:cf:cc:d6:89:29:75:8d:
0c:39:f4:7d:0f:fa:21:86:c5:5b:eb:40:92:41:d7:
c5:7e:cb:1a:e5:58:76:ad:8d:a7:93:6a:7e:ba:02:
57:6e:e6:ad:37:55:2b:0d:f4:1f:78:4f:ef:1f:3a:
7e:86:80:f4:6b:12:52:0d:79:f1:a6:2f:d6:c0:cf:
05:93:9a:9e:63:a5:09:2a:46:76:25:cf:67:bb:88:
e0:35:25:af:56:ea:80:bd:88:93:29:4b:b9:24:60:
d4:53:c1:38:fd:5f:b4:7c:56:b0:8c:95:09:54:c9:
53:29:69:f8:31:50:28:81:15:04:9b:31:0b:6a:c1:
87:b0:99:4e:e9:dd:c9:c9:d5:7c:d5:57:1d:80:88:
e4:a0:3d:1d:00:ca:5a:e3:b4:14:de:94:08:b0:f2:
cc:b4:53:37:f0:27:89:7a:87:ce:87:6a:26:4f:1e:
6d:e1:e3:67:df:cc:3c:1f:ef:87:44:51:ee:94:71:
83:09:38:3a:18:76:70:b4:c3:c6:01:f0:76:73:75:
a7:eb:e8:83:c1:fc:6d:21:17:d1:85:d5:92:72:9c:
7b:9b:d4:ca:9a:79:24:61:80:a3:8d:d6:07:53:34:
35:56:a6:86:6f:0a:0e:f7:e9:0f:b1:52:d5:cb:e1:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9F:55:57:AD:EA:2A:EB:FE:A6:55:EE:FD:A4:7D:83:CC:4C:B6:BB
X509v3 Authority Key Identifier:
keyid:03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:78:b5:7c:de:37:7c:09:89:cd:07:08:a2:93:b2:29:3f:6e:
46:ba:8f:ff:d9:aa:93:0a:cf:11:9c:b5:88:db:e1:97:0f:5f:
ad:10:d2:b4:ce:2e:6f:fb:b6:85:f0:d7:54:c0:c5:7d:78:35:
6d:39:2b:41:60:25:af:60:16:f0:25:8e:9f:1f:21:84:cf:6c:
28:7e:06:0c:be:c8:31:c8:26:38:d4:05:fa:88:52:19:d8:d8:
68:af:4c:c0:a6:00:c6:36:38:18:e6:b0:fe:8d:c3:d5:23:42:
90:d6:03:24:13:00:42:67:46:09:7b:1f:b0:66:49:5b:a7:c8:
f4:2e:65:af:2f:f8:4b:23:36:b3:35:69:1f:d9:e1:7e:48:ce:
6d:41:ad:51:53:f4:e2:4d:6c:be:0e:3f:9d:90:03:5e:6c:dd:
6a:08:b7:00:ab:f1:bf:73:f5:34:64:a9:42:9f:fc:ee:8a:40:
ab:d1:41:ac:31:ee:03:60:ac:90:75:b1:da:3c:e6:eb:1e:47:
7c:a0:b4:a4:d5:83:c8:0f:4f:0d:3e:38:84:b4:e8:a0:12:52:
cc:a4:c2:d3:c0:16:ba:23:60:e2:dd:be:56:96:7d:19:9b:8e:
d0:2e:0f:f3:08:47:0a:14:81:dc:3f:60:d3:0c:09:72:8c:7b:
aa:3f:ca:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:49 2026 by rpki-client