Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: OZT8ShwH9TiLaTtIA9tw+ZsBd5WacXVb5aUkw8n/BXM=
Subject key identifier: 7A:7A:F6:FF:09:64:35:24:B1:85:24:EC:00:CA:53:E2:25:03:49:99
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019F916D6F0331EC8C2E63A00E46CA9E1198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 19C5
Signing time: Fri 24 Jul 2026 00:01:35 +0000
Manifest this update: Fri 24 Jul 2026 00:01:35 +0000
Manifest next update: Sat 25 Jul 2026 00:01:35 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: IiLnN+y7BUQWthXEImcnKgI6PE7IEwlwz/tgRoBSKAs=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:6f:03:31:ec:8c:2e:63:a0:0e:46:ca:9e:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Jul 24 00:01:35 2026 GMT
Not After : Jul 25 00:01:35 2026 GMT
Subject: CN=7a7af6ff09643524b18524ec00ca53e225034999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:94:01:79:82:89:a2:92:42:d7:be:2c:e3:
f5:97:53:f3:c0:d7:1d:45:8b:37:43:6b:02:ca:8f:
52:54:cb:c5:69:82:bf:30:2f:40:4c:ef:99:51:e2:
d5:85:a4:7b:86:d4:6c:f0:7c:86:b9:38:dd:7d:f9:
4d:6f:ff:51:93:7a:8d:df:79:8f:8d:ec:bd:d2:61:
4b:cd:d3:3e:52:9e:ff:b1:1e:62:34:47:cb:a9:7a:
e0:00:40:80:3c:a6:4e:54:bf:10:75:9e:fb:13:72:
78:0c:05:77:e2:4b:89:13:33:88:cf:54:d6:12:59:
0a:a6:28:cb:d4:a1:44:cb:63:55:73:25:ff:5e:6f:
a4:a8:1d:d4:69:13:50:a8:b9:f4:9b:b9:96:78:11:
f4:b9:a5:9a:65:f4:3a:b8:02:50:93:21:46:2b:bf:
bc:3e:66:1a:2f:52:21:02:13:a1:32:e5:bd:e4:d2:
62:58:b2:aa:50:35:3a:70:19:94:92:78:ad:82:ca:
9e:7d:ea:a6:e2:8d:17:50:a2:48:b4:22:ad:1c:c6:
75:b6:d3:e4:08:42:95:c9:44:e6:c2:63:aa:e8:5f:
3a:80:d6:4e:2c:7f:6c:d8:30:f4:ce:24:bb:cd:4d:
54:ab:22:5a:de:c2:be:e6:5a:c2:17:af:6c:ce:d2:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:F6:FF:09:64:35:24:B1:85:24:EC:00:CA:53:E2:25:03:49:99
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:18:66:a6:00:22:a6:d3:32:30:cc:89:71:1f:20:04:48:c1:
83:93:1c:0c:8d:20:1f:56:9a:f6:fd:4f:66:9d:70:d3:60:21:
6e:b5:73:03:de:1d:b1:51:24:c4:3e:e9:1c:7d:51:7f:ac:4a:
77:c3:88:3b:5e:d3:87:8d:f4:56:c7:ed:af:9c:a7:ac:af:e4:
38:56:24:9a:23:af:67:b6:30:71:65:f0:db:0f:d0:9d:5e:ad:
c6:9a:6a:3f:c3:4d:37:5f:84:c7:5c:ca:f5:fe:c8:7c:fd:26:
72:e7:cc:99:5c:2e:ae:6d:8c:dd:f6:72:f3:8a:42:0f:fa:5b:
12:76:7b:26:0e:aa:5a:45:dd:d6:90:f8:f6:7d:44:aa:e0:58:
ed:45:af:d4:3b:bb:ba:7c:92:52:50:fc:d1:df:53:93:a7:3a:
2e:4e:4a:b7:85:88:fd:2e:38:4f:a0:71:2a:ce:b0:f6:bc:45:
6c:9a:a0:d4:cf:3d:23:28:f7:bf:42:aa:89:7b:50:df:3b:2f:
06:77:f4:fc:5f:0f:8d:44:2d:87:74:67:7c:3a:c4:d4:ea:eb:
ea:7f:01:a3:da:41:66:f7:8a:93:97:19:90:e6:de:80:04:14:
6d:e2:75:3d:b2:e1:58:4f:e9:55:5e:ff:a9:99:28:18:86:17:
00:48:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:56 2026 by rpki-client