Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: CpLzuK6dnS4NIUAwRGQlnhj69xCVSG9wmVUOoaDke6c=
Subject key identifier: 80:AC:C9:A6:01:5B:D8:A1:86:F4:41:94:D5:72:42:71:AE:A9:50:A2
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 019F9211C21837CAB6D9B70D751BD2DC8642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: 0455
Signing time: Fri 24 Jul 2026 03:01:05 +0000
Manifest this update: Fri 24 Jul 2026 03:01:05 +0000
Manifest next update: Sat 25 Jul 2026 03:01:05 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: Yo7s/JiXoo1C5JeaQ9xlvJtSQQP5+GEKSm6uXYOumAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:c2:18:37:ca:b6:d9:b7:0d:75:1b:d2:dc:86:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: Jul 24 03:01:05 2026 GMT
Not After : Jul 25 03:01:05 2026 GMT
Subject: CN=80acc9a6015bd8a186f44194d5724271aea950a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:92:99:8b:3d:05:dc:37:01:90:ca:aa:56:
e0:81:25:03:01:cb:ab:05:be:17:fe:6d:d1:46:2f:
f7:12:84:93:7c:bb:d4:f2:30:e8:54:8b:f0:d0:24:
c8:c5:b1:1d:cf:2c:96:2e:2a:c8:8b:4d:4d:ab:19:
1c:c1:78:5c:19:a9:f3:0d:fa:bb:9c:18:34:14:de:
c0:6d:ef:b2:58:84:25:88:f9:63:90:8b:6a:2c:91:
01:84:67:2d:1d:99:31:f6:be:24:5d:8a:64:1b:61:
d5:af:7c:f2:54:bb:23:a6:39:ae:4f:49:6b:7d:4e:
3e:3c:70:f1:3e:fc:f5:c1:46:7a:d8:7d:54:f1:dc:
14:84:a5:2f:ff:fe:c0:82:0a:b3:89:06:44:67:8d:
a9:67:8a:14:88:00:45:58:30:8b:2a:a8:2b:db:93:
e2:bc:05:b0:00:c5:1e:93:81:92:8c:c9:b8:de:cd:
5f:c6:be:24:24:b5:07:6f:be:3d:e3:a9:7e:1e:e7:
35:af:58:a9:68:23:44:e2:cf:87:47:97:c6:a8:03:
0c:14:6e:4b:3b:73:2f:9a:90:9d:bf:89:8b:54:9f:
6f:89:12:f8:7d:82:ce:19:30:6d:b4:20:1c:d7:88:
85:93:f6:5d:34:89:c4:4b:9b:54:2c:f0:ea:6b:bf:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AC:C9:A6:01:5B:D8:A1:86:F4:41:94:D5:72:42:71:AE:A9:50:A2
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d7:83:0a:37:41:49:57:3a:98:06:d8:bc:90:ee:76:44:8b:
57:16:49:fb:73:79:d8:6c:5b:b3:28:0c:29:3e:f3:13:35:03:
7e:73:68:d7:35:17:7f:40:6f:ba:a7:1e:35:b3:92:77:35:c2:
35:53:69:65:8c:d4:58:13:21:04:66:78:fc:64:cd:99:cf:2a:
38:e8:5f:99:a6:24:c6:f2:c9:f9:a5:cc:89:08:cb:16:1a:6a:
6c:3a:87:a2:4b:87:13:d8:d6:72:14:48:72:01:bc:8d:5d:bf:
a1:36:2a:3f:4e:db:09:9a:dc:38:f4:41:5e:fd:8d:c8:c5:ea:
d6:54:f4:04:78:f7:a6:7a:17:b0:df:ff:b4:d7:79:58:5e:9a:
d8:46:95:ff:6d:f1:25:4d:e3:51:52:31:ce:42:82:a2:15:d8:
21:1d:02:48:b6:06:ea:8e:84:7b:6a:ce:66:46:2c:a0:ed:50:
77:00:f9:63:52:7a:de:7a:b5:d3:a6:b2:b8:c8:11:23:87:f2:
2d:a0:d9:e0:08:5a:b4:98:d6:80:08:54:a9:03:75:4e:8a:86:
00:90:0e:41:bd:c3:76:de:7f:99:b9:62:ca:fc:a3:a3:cd:46:
81:a8:b0:eb:b4:46:3c:0b:f8:f4:57:5f:81:2a:18:c5:52:92:
ae:1a:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:51:34 2026 by rpki-client