Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File: A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier: rpUA2ajNjlnQrFD9TAXJcYk10MJWKUMGvYIgMyoPM6Q=
Subject key identifier: CF:B2:6A:52:C6:DE:EE:12:08:DB:B1:67:E7:DB:4F:0A:B2:AF:DF:FA
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer: /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial: 019F93241EE00D53435B4AE27DBF265A9EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number: 0683
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: k0WvcIF4ZXiGOygUqH3wuWyi2I1IkPERebKOKPt6LPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1e:e0:0d:53:43:5b:4a:e2:7d:bf:26:5a:9e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=cfb26a52c6deee1208dbb167e7db4f0ab2afdffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:9b:17:ee:5c:06:38:2c:d6:c9:0d:ef:7f:
3b:6f:f8:42:02:60:f1:8a:58:2d:91:c9:d8:68:d5:
38:54:f9:b2:f4:44:dc:40:b8:63:10:ae:8c:b7:2d:
d0:88:f7:6a:83:21:b7:cd:a4:e5:4d:78:17:1b:1e:
56:ba:1f:1e:b5:09:c9:54:df:d2:ca:40:41:29:49:
0e:c3:54:fe:a5:b9:cf:c4:dc:df:ed:81:c4:6b:42:
15:87:aa:2c:94:51:23:74:d3:50:50:a4:87:94:13:
b4:45:60:76:43:93:eb:fd:4f:7f:85:d8:70:08:bc:
3e:f9:d9:fd:27:d4:8a:72:c8:80:76:98:73:7d:9f:
fe:13:69:30:f0:bb:4d:f0:96:d6:7d:57:3f:4a:dc:
b0:47:51:d1:d9:ee:3d:4d:b8:2b:90:75:3e:46:84:
91:01:7f:ed:9e:ce:44:55:85:8c:66:9b:1a:16:bf:
bf:75:2a:4a:76:03:06:4f:b0:96:54:20:52:c9:42:
8a:54:df:b9:8e:9f:f9:d5:8a:48:c8:79:26:a3:04:
d5:c3:04:56:bd:c2:43:f6:fc:66:f4:a8:67:1a:af:
98:29:3d:f5:b5:97:aa:00:2b:f8:4c:bc:6b:fc:68:
2d:6a:17:85:3f:d9:de:29:1f:d5:b9:dc:46:6b:90:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:6A:52:C6:DE:EE:12:08:DB:B1:67:E7:DB:4F:0A:B2:AF:DF:FA
X509v3 Authority Key Identifier:
keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b2:1f:99:b0:08:b0:22:87:20:c1:90:bb:b7:6e:22:51:e5:
c8:58:96:7f:34:18:98:ac:83:25:d8:91:24:12:bf:22:5e:f9:
f0:23:60:e5:8a:25:fe:78:8b:43:37:54:12:26:49:e3:f0:1b:
e4:84:7d:95:d5:7d:a6:29:5a:93:72:ad:d9:fa:6c:66:8d:c6:
40:0b:07:c0:c8:b1:b4:7c:40:dd:ef:05:ca:11:ba:1f:cd:0d:
e2:56:f9:8f:4c:7a:9d:6f:86:f9:36:f2:68:af:6d:93:a0:9b:
86:23:7f:bb:68:3d:d5:ab:63:33:63:4a:9d:6b:14:fa:37:dc:
e9:3a:85:03:a4:dd:b1:0c:1f:46:20:e1:3d:2c:94:f2:f3:57:
7b:c0:26:e3:cf:72:80:26:29:d9:91:32:ee:ac:44:e8:0a:55:
c4:e9:c3:d0:a6:2b:15:d1:25:d8:03:dc:c4:64:bc:0f:a5:45:
10:4c:a1:5f:60:ad:ae:46:5d:98:12:5a:b4:34:eb:b7:82:e4:
53:28:50:61:90:22:88:c2:83:f1:5a:37:5f:4a:4e:a5:1d:e6:
69:76:71:93:3b:33:04:e8:da:ca:82:d9:ce:9b:19:1e:2b:84:
50:e0:96:32:ab:68:79:19:49:99:fa:9e:f5:d7:29:4f:bc:9a:
cf:04:35:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:13 2026 by rpki-client