Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier: wXCKb544zN/p8tHw4Bkk5a4sgmGs0Hlurp9b52CGM00=
Subject key identifier: AF:C7:82:1E:F9:CB:89:AA:2E:BF:68:F8:6A:B5:9B:96:E5:9E:58:67
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 019F91355FE1BDA1FBAF7223403922C4DA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number: 0BE7
Signing time: Thu 23 Jul 2026 23:00:21 +0000
Manifest this update: Thu 23 Jul 2026 23:00:21 +0000
Manifest next update: Fri 24 Jul 2026 23:00:21 +0000
Files and hashes: 1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: KrDQlI6HztZrhDwZF3b76mRK4IJuWgY+VBsW4naNolE=)
2: YEziWd2u7JNVBZhfbqD7tAgw6N0.roa (hash: MKjaPlRYWsRt/x04oa9rkmteLx1QuLJM6GSjP/NuL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:5f:e1:bd:a1:fb:af:72:23:40:39:22:c4:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Jul 23 23:00:21 2026 GMT
Not After : Jul 24 23:00:21 2026 GMT
Subject: CN=afc7821ef9cb89aa2ebf68f86ab59b96e59e5867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:1a:2b:4e:da:e6:cb:cd:34:8c:fa:c1:27:
c1:ca:24:cc:db:65:f4:2c:72:d1:a6:d5:70:02:a3:
0a:42:40:ff:ee:a4:60:8d:67:6f:34:48:04:19:94:
58:61:df:3e:62:f5:2e:33:7c:50:b0:9a:1e:e7:62:
69:99:41:03:ea:e4:cb:5c:0f:f1:1b:74:e6:5a:75:
88:7d:11:3d:e3:74:f1:ea:57:39:22:e1:3c:6e:37:
d6:e6:93:82:fc:c4:ee:15:24:20:20:0b:19:de:f2:
c5:43:ff:52:fd:af:c1:aa:86:df:0d:6d:13:35:6e:
18:ef:6c:8c:07:b2:df:a5:33:e7:1e:ea:bc:25:df:
c8:ac:5e:5f:f6:db:82:27:2c:a0:4f:78:13:f9:53:
0e:5c:cd:99:33:4c:b8:12:b1:e8:c2:6b:06:73:6c:
69:06:39:a6:73:45:47:48:59:47:d1:c4:a7:d9:54:
ad:c7:f9:cc:c5:83:d7:a8:bc:07:4d:ea:c4:44:3b:
a0:e6:0f:1c:70:98:58:d0:d2:ea:be:a4:f0:e9:10:
bd:3d:d4:8a:57:47:81:e6:68:7f:ff:48:98:c1:72:
62:07:8c:70:1c:89:e3:57:3e:ec:d8:ea:7e:3f:60:
e7:9d:3c:f8:59:1f:d0:aa:57:28:5f:a8:48:6c:70:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:82:1E:F9:CB:89:AA:2E:BF:68:F8:6A:B5:9B:96:E5:9E:58:67
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:05:28:bf:7d:f7:65:44:ed:8d:7b:10:1b:39:7f:7a:42:
e5:5a:6e:8d:59:e5:cd:93:65:89:82:30:f8:20:ea:a1:24:4e:
0a:be:92:1f:9a:37:42:84:dd:4e:72:c1:5f:31:ea:5c:a9:8d:
ff:f5:d1:25:16:8a:ed:d8:08:dc:c0:61:22:59:a2:e2:12:05:
a6:5c:dd:19:a6:35:86:b9:df:5c:0c:aa:41:46:ec:5e:3b:4a:
96:b6:dc:40:85:fb:8e:5d:81:4c:9c:a1:a4:85:29:1a:a4:9f:
5e:db:f6:49:c2:57:b9:d4:19:6c:48:6d:5f:b3:81:a0:9a:26:
75:ea:2a:40:ee:87:d7:6f:ea:e9:2f:e5:37:bb:f7:57:4a:6c:
14:06:0f:3f:d5:e6:d6:31:15:39:c1:39:eb:ba:95:a0:ba:39:
53:95:6a:03:6d:78:d1:7a:95:d8:da:ea:02:aa:04:23:09:b6:
b5:0e:32:cb:c1:a1:d6:35:26:ee:90:b0:96:5f:35:17:ba:d1:
db:00:46:72:52:86:ab:1f:ed:12:15:98:48:b9:db:32:2b:d1:
ae:c6:3f:78:c0:8b:b3:45:25:e7:58:d1:f9:51:11:6f:7a:db:
9d:19:dc:e0:24:12:d1:5e:8c:50:cf:ed:fb:b7:48:7b:47:8e:
0f:0e:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:33 2026 by rpki-client