Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: peiK2dc+S3yFBhpWXhxDdiU5hbdQbb1iAzSq8G6DDzc=
Subject key identifier: D7:F0:E6:FB:F8:47:23:BA:4B:53:AE:CE:A9:13:D6:49:DF:F8:C9:33
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019F8E6BE3CEC4F21AE400D3417E5975CD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 0A30
Signing time: Thu 23 Jul 2026 10:01:02 +0000
Manifest this update: Thu 23 Jul 2026 10:01:02 +0000
Manifest next update: Fri 24 Jul 2026 10:01:02 +0000
Files and hashes: 1: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: bXupYrIobaMWv+V8aAfrQcdPpIyO4v2tx8ajO09nkIY=)
2: DALU3tcvOFTYsZrsDs2f4e9axOI.roa (hash: ebFcRHw5U0MTTaA0PwzsRWLgtLL3PnreXj9riBF5Jv0=)
3: ngE7Yefr8Kh8jZEtVDnS3arKhqU.asa (hash: 3GsUcPKh0tqn8pSBgRUlUFyh+eu6y6bpI0iAqEsI4q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:e3:ce:c4:f2:1a:e4:00:d3:41:7e:59:75:cd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Jul 23 10:01:02 2026 GMT
Not After : Jul 24 10:01:02 2026 GMT
Subject: CN=d7f0e6fbf84723ba4b53aecea913d649dff8c933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:4e:ac:f9:85:59:73:58:56:fb:b6:53:5f:
f4:29:ce:26:d0:2a:f8:4a:9f:ec:56:ee:e5:bd:b6:
98:9b:3c:d9:df:f4:a8:de:f6:27:b5:b9:49:3c:dc:
f9:3c:21:8f:df:ef:fa:b4:85:11:be:51:4a:26:8b:
f6:5b:b5:19:55:25:3c:79:e0:3c:b2:a9:25:6b:2f:
fe:ee:fd:00:1f:12:58:42:95:a0:fa:24:87:2f:75:
0c:41:0d:bd:20:58:b4:07:3a:af:1e:8c:5a:5b:8d:
64:a1:06:48:72:23:8f:67:e2:39:7d:0b:71:62:30:
d8:00:73:6e:00:8d:0c:2d:c4:f7:79:ba:17:b0:6c:
dd:e5:54:ac:39:3b:3a:68:82:1e:b3:0e:13:e2:5b:
19:cc:c1:21:19:bf:4b:ce:cf:4d:79:ae:f3:a9:d8:
f8:67:67:e8:8c:4d:82:97:d8:85:10:a8:08:d3:6f:
03:4f:ab:38:a9:69:24:15:6b:7b:75:52:33:9c:bc:
45:19:3b:4b:85:ca:ae:3e:e1:f2:e2:74:bb:7d:7e:
7c:23:70:03:f1:d1:91:1b:7e:34:0b:da:f8:83:5e:
dc:15:01:23:9d:4a:94:1f:ca:f9:79:13:3c:18:09:
5b:f6:2b:3d:67:ca:9e:c5:ee:0a:15:13:5e:79:32:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:E6:FB:F8:47:23:BA:4B:53:AE:CE:A9:13:D6:49:DF:F8:C9:33
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1d:36:fc:b6:22:31:20:8b:7e:71:45:09:ff:44:05:69:33:
62:1f:3a:e7:60:28:33:d5:49:cd:28:e6:f8:46:9b:75:37:56:
19:3c:00:5d:96:85:b4:de:d6:89:02:29:33:c8:c4:c6:ca:08:
bc:29:8d:a9:b9:70:39:26:de:b7:98:c1:4d:de:87:8c:76:69:
ef:32:d1:5a:1e:a2:f1:f2:a0:10:14:f3:a9:fc:55:35:10:d9:
f0:49:c3:5a:df:b9:34:56:df:64:e7:f6:49:db:72:c7:d0:a2:
75:ae:33:45:10:97:00:20:ab:52:7b:3e:b2:75:bf:63:b9:6c:
d6:49:4f:70:70:8b:58:91:5b:34:6f:9e:65:df:8f:3c:cc:e3:
9e:94:f7:84:f1:a1:fb:c6:fc:99:4c:09:f9:2b:42:36:68:78:
9e:27:51:a3:3f:24:07:0f:39:d5:7a:5d:90:7b:11:31:e0:0c:
a9:72:5f:d8:4f:93:e9:c5:23:f7:68:90:10:54:71:a3:22:a0:
bf:35:62:16:e5:5d:00:6c:d0:44:fb:18:f5:f4:6b:20:2b:cf:
b8:5e:e1:5e:92:d8:f5:fa:8f:13:e9:1c:13:01:85:5f:fa:dc:
c1:0a:12:14:34:15:f3:cf:d5:28:ad:9d:8f:80:1f:83:d8:4c:
e4:dc:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:11 2026 by rpki-client