Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
File: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft (raw, json)
Hash identifier: O4qslvhjwEqNR6jlYD2nQe1mSxI0dSn/wiRyfEoR3kg=
Subject key identifier: 85:3F:B7:2C:1E:5F:B9:C0:AB:D8:DA:36:BD:7B:4E:D8:A5:7F:AF:2D
Authority key identifier: 03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
Certificate issuer: /CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Certificate serial: 019F9211606DCE6C3F8C9EA3DC5770BF161B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 03:00:40 +0000
Manifest this update: Fri 24 Jul 2026 03:00:40 +0000
Manifest next update: Sat 25 Jul 2026 03:00:40 +0000
Files and hashes: 1: AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl (hash: LXUpgqZyqGalmFNpVMea8QzsKUc+1rehPlOm/Z5xmus=)
2: nu_nfWvngwD8Y74CXi065T5OVuQ.roa (hash: d92WDDshr8YLz0+Twkg4dzAWaxn6uiHcpqEqs+83HsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:60:6d:ce:6c:3f:8c:9e:a3:dc:57:70:bf:16:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324d16977eee2f58beb1bb7aa2f4b2fa1abfc48
Validity
Not Before: Jul 24 03:00:40 2026 GMT
Not After : Jul 25 03:00:40 2026 GMT
Subject: CN=853fb72c1e5fb9c0abd8da36bd7b4ed8a57faf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:e2:c0:94:fc:36:67:3e:42:05:9e:dd:97:
aa:3b:d3:5a:ec:a4:94:a4:23:9f:3f:cd:11:09:2d:
8a:2e:33:3f:0e:75:6a:7f:6e:a4:2a:7e:d9:32:36:
f1:0e:db:1c:11:3e:ee:fc:a9:63:9d:4a:ad:3f:d5:
b1:39:93:2a:d4:82:52:d7:06:d4:0e:dc:0f:66:83:
4d:9e:ae:2d:fd:42:66:44:ff:9e:8e:e1:a1:fb:71:
90:8c:00:a6:74:80:79:3c:38:1d:ed:8c:94:f3:49:
65:99:b4:5f:a7:36:13:25:98:78:43:eb:db:4c:f9:
35:0c:1f:db:04:9f:f2:39:d1:e7:b0:9b:16:8c:ec:
3f:0d:d8:c9:73:b6:de:3f:c9:6b:dc:a2:8a:42:aa:
77:a0:54:6e:ae:7c:ee:4b:4d:20:a5:01:6f:1a:04:
41:0b:b5:be:66:b0:c4:73:81:5a:56:be:d9:41:27:
59:38:3d:07:df:12:81:03:8b:7e:96:d0:c8:95:72:
8b:75:0b:1b:15:ed:45:ed:0a:e7:4f:06:e7:15:72:
85:11:07:09:ec:fa:a1:91:22:a8:76:49:db:84:ac:
12:58:33:74:29:80:9e:86:23:ee:66:97:71:b6:bf:
65:be:83:63:35:34:64:42:c2:ad:86:7d:67:c6:90:
51:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3F:B7:2C:1E:5F:B9:C0:AB:D8:DA:36:BD:7B:4E:D8:A5:7F:AF:2D
X509v3 Authority Key Identifier:
keyid:03:24:D1:69:77:EE:E2:F5:8B:EB:1B:B7:AA:2F:4B:2F:A1:AB:FC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4578a6-1a1c-4944-a773-c25d7fca0037/1/AyTRaXfu4vWL6xu3qi9LL6Gr_Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:f5:6d:8e:83:53:32:4c:2d:4f:b3:5f:d2:a5:fc:cc:97:
8f:33:2f:c7:97:59:91:4b:4c:6c:07:a6:73:77:7d:79:3f:65:
ea:50:51:7c:93:62:83:eb:72:f7:22:7d:8f:59:81:6c:e9:3c:
ba:f3:fb:ba:e9:02:a9:4e:b0:19:7d:58:1b:39:3c:39:cb:f2:
da:52:68:df:94:74:3e:f0:73:80:3c:a1:60:15:3e:a6:5e:20:
7e:0b:be:fb:a5:c4:0c:a1:a8:e4:74:2f:0c:54:6a:6a:ff:d1:
db:8e:f0:cf:3d:01:b0:b5:df:87:0e:12:fa:c0:57:5e:50:5d:
85:db:43:65:c2:42:73:95:35:62:13:14:07:b8:44:3e:d5:85:
83:4a:0a:dc:be:41:45:7a:e4:de:28:58:fd:06:b2:0d:63:0b:
22:77:72:25:a5:79:eb:8b:b0:17:01:30:76:12:fc:5e:72:90:
d5:5b:02:33:a7:c2:bf:dd:08:4f:2f:2c:34:34:eb:58:16:1b:
ee:8d:60:8f:9e:b3:6e:1a:0c:4f:34:ab:e0:31:c3:c8:80:ee:
68:b0:cb:43:ad:b2:8a:8c:20:91:e6:66:41:5a:3f:68:4a:27:
08:af:3f:8b:bd:2a:72:87:24:e3:37:98:af:bc:b0:8a:d2:a7:
57:78:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:43 2026 by rpki-client