Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
File: 0aVkCYrHZdC-2EkYgJFvYba48Y0.mft (raw, json)
Hash identifier: etR/Vd85GpQ6rXTKuNmOFazoIEn2StqxpS5OtSvvCwc=
Subject key identifier: 7B:66:7D:D9:6A:EB:9F:6D:E8:81:BF:D4:09:B6:26:D1:D6:B1:11:77
Authority key identifier: D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
Certificate issuer: /CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Certificate serial: 019F90236E195C14DB5A2B01DB1117EAA27A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
Manifest number: 01A5
Signing time: Thu 23 Jul 2026 18:01:08 +0000
Manifest this update: Thu 23 Jul 2026 18:01:08 +0000
Manifest next update: Fri 24 Jul 2026 18:01:08 +0000
Files and hashes: 1: 0aVkCYrHZdC-2EkYgJFvYba48Y0.crl (hash: VKeat58iW5J7Rq2cuw7yjhw98x4oNd+WS1GY2XXqacc=)
2: 0fBOVPEVt_Vn70y4H7R92SYVH6A.roa (hash: AXH0b2vzi3eJ8ZGHrdb03qMvGfl3ImnFJSUpRqXJVtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:6e:19:5c:14:db:5a:2b:01:db:11:17:ea:a2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a564098ac765d0bed8491880916f61b6b8f18d
Validity
Not Before: Jul 23 18:01:08 2026 GMT
Not After : Jul 24 18:01:08 2026 GMT
Subject: CN=7b667dd96aeb9f6de881bfd409b626d1d6b11177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:ee:76:68:22:06:a5:67:25:f9:de:3a:61:
8e:7a:d3:29:30:aa:ec:d9:56:b5:fc:e7:22:b6:a3:
47:68:f2:13:0d:0e:e0:22:b6:84:33:7e:f0:51:f8:
33:98:71:dd:b9:19:22:70:d3:18:ae:e6:cb:96:18:
69:e2:aa:21:3d:a6:64:d8:ac:23:8a:c2:be:a5:05:
84:9b:ca:3a:6f:89:3d:42:e1:b6:1a:a6:9c:5d:a0:
2f:dd:da:5e:1f:38:40:04:38:db:99:63:c3:e7:22:
bc:bd:66:f8:e1:2e:5c:02:a4:db:07:39:88:3d:e5:
7b:04:b6:9c:68:cf:b5:e4:f8:15:4d:2f:a8:64:71:
76:88:be:39:52:cd:62:c3:41:97:7b:d8:8b:d7:30:
79:34:e5:20:01:2e:e6:63:4b:3b:02:98:8f:6c:f7:
3f:84:ba:07:f2:b1:f3:ea:cc:b3:a8:d9:16:7e:9a:
79:63:0e:23:58:d4:18:60:71:e1:dc:c8:81:ff:98:
6e:ab:eb:46:e6:4f:99:e9:f4:24:c3:b4:38:cc:f9:
6c:33:fb:2d:47:64:09:0a:c4:a3:8d:e6:1a:67:b1:
b2:53:c8:0e:fd:2c:ae:a7:d2:4e:2b:9d:cd:34:03:
43:4b:b8:c8:d7:62:9c:97:b6:6c:ef:d7:2e:51:cd:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:66:7D:D9:6A:EB:9F:6D:E8:81:BF:D4:09:B6:26:D1:D6:B1:11:77
X509v3 Authority Key Identifier:
keyid:D1:A5:64:09:8A:C7:65:D0:BE:D8:49:18:80:91:6F:61:B6:B8:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aVkCYrHZdC-2EkYgJFvYba48Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f49f95-bb6c-46c1-88e2-12165f27142f/1/0aVkCYrHZdC-2EkYgJFvYba48Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cf:27:c8:e4:cd:b0:e2:cb:76:9e:3d:51:45:e9:f4:85:ad:
d2:66:8f:e0:99:7f:ea:dc:4a:f6:e9:29:0b:fa:2a:73:d2:58:
0e:7c:4c:9c:06:a4:3b:75:3b:41:7a:d9:87:c0:d6:88:d3:19:
95:a8:6d:ef:e5:22:05:8a:e2:00:4b:0d:14:bd:68:9e:44:21:
cb:45:29:0a:fa:ca:0c:64:4c:0b:e4:59:ee:fe:a0:e9:25:d6:
a5:3a:4e:73:c7:fb:f5:29:99:57:a1:45:92:bc:79:5f:cb:1a:
cb:bb:26:9a:6d:77:93:d6:38:e5:54:cc:a3:74:05:8f:da:72:
d3:12:39:49:bf:7d:24:a0:90:64:5d:37:ab:88:b7:e8:12:74:
53:f5:d1:3d:98:47:15:f1:d8:4f:43:b8:5e:22:6a:5c:24:5d:
94:dc:f2:62:77:a6:36:0d:22:4c:66:19:93:61:8b:c7:92:0e:
f1:02:57:80:e9:3a:a4:9b:55:2a:c0:54:5a:79:d7:e6:22:19:
79:d1:97:99:89:d8:30:7c:33:e9:d8:c9:e7:8d:d8:56:4e:c3:
4b:0a:4d:57:1a:b1:7b:5b:9b:78:3a:12:fd:09:42:1e:f0:3f:
de:85:a5:d2:46:91:2a:4b:ab:94:1a:1d:e4:87:63:54:c8:f2:
88:91:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:04 2026 by rpki-client