
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: BKpPnjYnKKIBKvnEksiduMfluD8NJUnPIc7DkKyILYY=
Subject key identifier: AA:51:62:17:14:34:23:68:7F:95:5D:06:9E:96:DC:A2:FD:5F:8E:69
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 019F90C7B26EBCC21056AA0E6F159E3B4601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 13C0
Signing time: Thu 23 Jul 2026 21:00:34 +0000
Manifest this update: Thu 23 Jul 2026 21:00:34 +0000
Manifest next update: Fri 24 Jul 2026 21:00:34 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: zCH5Slbf1g4zdg427aJWPIiop3f2LSvDu6LVG3N93Xo=)
2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:b2:6e:bc:c2:10:56:aa:0e:6f:15:9e:3b:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Jul 23 21:00:34 2026 GMT
Not After : Jul 24 21:00:34 2026 GMT
Subject: CN=aa516217143423687f955d069e96dca2fd5f8e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:6f:75:ed:bc:3f:cd:50:bb:45:28:b1:b2:
79:d1:7d:89:2f:b7:72:12:6d:22:67:ed:86:39:87:
5f:32:94:4d:6c:df:9e:f1:ab:23:00:25:55:81:fe:
7a:44:ee:9a:aa:7a:07:53:3d:a1:16:9a:58:38:8f:
0a:d8:f7:1b:2a:a3:f6:21:99:5a:1e:c5:e5:4a:96:
f4:57:24:25:7e:20:be:d0:61:2b:d0:3b:1c:69:fa:
46:12:08:15:e9:1d:3a:4e:86:5d:d7:84:fd:78:1a:
e3:bc:8d:75:2e:5c:95:73:df:0a:be:aa:96:53:5b:
90:e9:1f:5b:e8:c3:d6:6b:02:0d:b6:ff:a7:03:83:
b8:ab:7f:e9:81:11:79:10:b9:46:7b:e8:4a:55:8b:
4e:86:df:bf:17:04:7d:76:07:72:ae:a6:c2:3f:ab:
96:4d:82:b5:ef:fc:ce:ed:f0:9c:a5:20:72:96:eb:
eb:36:a0:af:81:85:79:5f:7b:ea:89:a9:e6:3b:91:
b1:08:5f:c5:c2:46:f5:21:c4:c6:21:fa:90:02:99:
20:1c:66:99:70:07:c3:7d:5a:eb:12:67:4d:66:1b:
45:6b:ea:de:1c:15:dd:60:22:c7:80:2b:7e:2d:b2:
b3:2d:9c:67:a4:8a:2d:97:7c:24:4d:7f:50:d0:63:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:51:62:17:14:34:23:68:7F:95:5D:06:9E:96:DC:A2:FD:5F:8E:69
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8f:9d:08:e4:7d:ca:4a:8b:15:cd:f4:b8:a0:eb:dd:de:ca:
65:74:17:59:71:eb:ba:0b:68:dd:fd:33:56:c6:b4:69:de:f5:
86:59:76:ca:05:f8:4c:c0:60:9d:18:ec:68:bb:cf:48:b9:d4:
6e:b4:6f:f3:1a:8a:bd:1f:ac:b1:dc:ed:ab:49:b4:0d:81:ad:
b8:05:ac:9e:39:90:1f:53:72:ef:a2:f5:60:43:10:f1:ca:d2:
83:eb:5e:5e:fa:24:64:b6:e0:3f:7e:76:0f:39:59:c4:65:68:
33:39:04:f5:1a:2f:fc:32:d2:68:62:7e:54:d8:54:4d:c0:a3:
99:b1:10:1c:4f:7e:9b:7b:c6:aa:d8:ef:fd:59:8b:ab:f8:dc:
58:8f:5e:2e:97:0b:d4:e9:65:11:e1:15:9e:a5:fa:e2:0a:05:
b1:51:c0:6d:7b:5c:89:ca:9e:98:7a:c7:bc:79:8d:bb:c6:95:
1c:57:3b:55:f7:58:6c:c1:28:cc:f8:4d:59:f4:65:d6:ba:91:
9c:08:5d:70:ba:bd:36:34:d4:0f:18:9e:d3:30:97:3a:3c:a5:
0e:e3:4d:58:5b:3d:4b:62:fa:52:3b:13:44:46:0e:cb:01:bf:
d1:74:cf:eb:06:1c:81:8d:84:2c:42:d1:33:39:1b:70:eb:43:
56:1f:28:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:59 2026 by rpki-client