Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: IN2mcqwXdcz0faHeMfutKYacYBR2THdnGz/oqgClvw4=
Subject key identifier: CB:41:9F:E4:D5:FC:C1:9B:9D:C7:31:9F:FA:E4:F2:14:3D:9D:16:F9
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019F8ED91532396028FDDED30830C33A46AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 15CA
Signing time: Thu 23 Jul 2026 12:00:19 +0000
Manifest this update: Thu 23 Jul 2026 12:00:19 +0000
Manifest next update: Fri 24 Jul 2026 12:00:19 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: eINfr3tekgpHdcbwPOMZWMokM7rPKYxfPHvogbCXBto=)
2: _eHxxT7w7p8zXdXfwOcvwBUWOZg.asa (hash: rPV6p3Oid9sB7zS8sKU/96ebkCjQIbKliHkFe8R+sY0=)
3: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:15:32:39:60:28:fd:de:d3:08:30:c3:3a:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Jul 23 12:00:19 2026 GMT
Not After : Jul 24 12:00:19 2026 GMT
Subject: CN=cb419fe4d5fcc19b9dc7319ffae4f2143d9d16f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:3c:6e:ff:2d:71:70:fa:5a:08:23:b2:b1:
5b:e0:dc:06:c7:20:de:5a:8b:d6:f4:4a:c4:79:c2:
6b:7e:1d:eb:2d:64:23:07:59:74:c7:d4:0a:4d:a7:
7f:58:54:a9:63:9f:04:94:bb:ad:55:18:72:aa:f3:
00:cb:90:60:9d:d1:e7:de:ba:0a:6c:15:1f:28:9a:
a7:f6:0c:65:67:ef:7a:b4:e2:12:56:6c:1c:6e:c7:
23:6a:01:11:2b:ac:bb:1e:11:c1:ad:53:99:5f:a6:
c7:5c:1b:9e:de:0e:3f:6e:db:de:80:8a:de:22:a8:
a0:f0:38:0d:98:af:07:6d:00:0c:98:f7:61:50:08:
cc:0d:5f:6c:58:64:23:48:86:11:ae:65:74:d0:3f:
21:38:36:e4:f9:a8:02:9f:2a:4e:d6:80:68:d6:12:
67:8e:38:45:c3:a3:8d:a0:26:1b:d7:1b:ed:29:02:
35:ea:f7:2d:41:6f:74:56:7c:b0:22:50:e5:6e:0e:
4d:46:8b:0f:93:f3:62:12:85:88:48:71:6b:57:8d:
2b:34:42:c0:87:99:84:99:35:3f:2b:30:b2:50:96:
26:fd:c5:86:53:a6:05:cc:6d:f7:42:ae:42:60:1b:
5e:d3:eb:8c:87:f9:3b:27:49:18:7e:84:3a:1d:02:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:9F:E4:D5:FC:C1:9B:9D:C7:31:9F:FA:E4:F2:14:3D:9D:16:F9
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:14:7e:1e:6c:cd:a7:54:26:e5:b3:e2:07:64:fe:c7:62:6c:
aa:63:6d:df:68:10:e3:a6:9b:01:54:99:31:57:47:77:70:d9:
53:9f:b4:ad:ff:ae:61:05:54:55:94:aa:07:a9:e4:2f:f7:6e:
cc:b8:87:67:3b:bd:53:d0:fc:9d:78:5d:9b:f3:78:96:a2:37:
ac:7e:f1:77:10:ee:21:52:a3:58:5e:ed:6e:7e:cf:c9:90:c0:
1e:08:de:a5:1c:4e:75:7c:4d:6c:0c:d9:26:61:49:25:ab:57:
b4:25:9f:80:0a:bb:ad:0a:5a:2d:0d:2f:78:bc:e3:12:f7:30:
8e:79:17:a5:af:93:3b:e0:f7:55:d1:c1:68:4f:6b:b1:7f:64:
0d:4e:c6:96:6b:2e:f4:1d:76:aa:ef:e7:90:4e:2b:71:1c:a5:
c8:7b:91:e2:db:d9:37:7f:8c:59:a3:37:f0:d6:2b:93:a9:39:
d6:37:50:ba:13:65:c1:e5:2c:b9:dd:a7:92:42:dd:11:d1:60:
f8:47:27:f7:09:86:00:1e:4f:fb:42:ac:17:e0:a0:bf:dc:55:
0c:2a:6c:d5:40:49:b9:4a:c3:d8:c8:10:99:85:cb:87:15:26:
95:cc:18:d3:58:db:3c:77:54:1f:f0:c9:25:59:c1:0d:3a:02:
29:4f:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:28 2026 by rpki-client