
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
File: A8faYZwwdCdMsGlarsoJxTn-aGM.mft (raw, json)
Hash identifier: +qzY/psCFv+00tfWbarf0JdexgQX07f0R/CBY2Vc1CE=
Subject key identifier: 9B:1E:55:14:BA:5E:72:7F:1C:0F:4E:C2:D5:C4:C6:E6:03:9B:68:7F
Authority key identifier: 03:C7:DA:61:9C:30:74:27:4C:B0:69:5A:AE:CA:09:C5:39:FE:68:63
Certificate issuer: /CN=03c7da619c3074274cb0695aaeca09c539fe6863
Certificate serial: 019F90917761385B3AC1A22BBAE165208D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:01:19 +0000
Manifest this update: Thu 23 Jul 2026 20:01:19 +0000
Manifest next update: Fri 24 Jul 2026 20:01:19 +0000
Files and hashes: 1: A8faYZwwdCdMsGlarsoJxTn-aGM.crl (hash: tkwfVSaZEiOWdHuOO/kDPdBuSCJnOyXhGN9QoBMyqrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:77:61:38:5b:3a:c1:a2:2b:ba:e1:65:20:8d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c7da619c3074274cb0695aaeca09c539fe6863
Validity
Not Before: Jul 23 20:01:19 2026 GMT
Not After : Jul 24 20:01:19 2026 GMT
Subject: CN=9b1e5514ba5e727f1c0f4ec2d5c4c6e6039b687f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8d:63:99:94:fc:5f:fe:22:16:8b:d0:8a:52:
b2:3a:d3:96:82:84:2e:5d:04:cc:0b:bf:11:c6:c0:
5e:f8:af:e3:09:0c:6d:d1:b1:4e:df:5a:b4:dc:55:
55:09:68:9c:11:50:14:3f:2c:e7:41:0b:26:49:1e:
56:af:23:2e:8d:36:b8:e0:08:d6:9a:a0:eb:2e:43:
29:3e:b0:58:19:b8:5b:2b:63:d1:95:31:c0:a7:8b:
17:34:8a:b8:d3:a5:f7:f8:74:61:fe:6f:f5:d8:31:
1f:d7:a5:77:1d:aa:88:25:a6:f8:6d:28:44:7e:eb:
40:1f:c3:93:3d:7f:c9:fd:1b:c4:3a:e8:0e:13:e4:
a6:e3:42:c6:c7:65:3a:dd:0c:0b:bb:2b:fc:01:e2:
a8:55:64:67:02:a8:9d:3b:83:3a:d4:cd:75:85:5a:
b5:39:20:1e:ec:49:72:85:ee:df:fc:0b:29:a3:0e:
5d:76:85:67:d2:44:57:1b:64:21:ba:1c:4d:92:43:
59:b9:36:9b:b2:5c:87:b8:37:58:e4:73:90:0e:59:
e2:21:0e:72:89:68:59:a6:3a:b9:65:c2:98:ee:fd:
2c:03:f0:94:fb:b1:53:d7:18:58:11:28:f5:c7:11:
46:81:96:9a:e2:3a:5d:dc:8f:73:a5:62:d3:94:95:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:55:14:BA:5E:72:7F:1C:0F:4E:C2:D5:C4:C6:E6:03:9B:68:7F
X509v3 Authority Key Identifier:
keyid:03:C7:DA:61:9C:30:74:27:4C:B0:69:5A:AE:CA:09:C5:39:FE:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8faYZwwdCdMsGlarsoJxTn-aGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b792cc-ab96-456e-9d3e-a1ee440ffe3e/1/A8faYZwwdCdMsGlarsoJxTn-aGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:a3:0e:db:50:ec:6e:42:cb:74:fa:58:41:75:19:b5:08:
77:e9:70:14:e9:e7:0c:a8:e2:bc:fd:2f:29:0a:07:75:f0:c1:
b7:ba:a3:7c:02:94:e7:7c:7a:88:58:77:a3:e6:c9:3d:cb:0a:
5e:63:47:eb:21:b1:67:47:52:cf:44:67:32:ae:5e:8c:36:5b:
7a:20:8e:5f:78:6a:d5:6a:d2:37:34:6d:2f:8b:35:6c:35:f5:
36:72:33:65:b6:c2:1c:52:d6:f8:42:fa:ae:91:ca:6f:a5:bd:
61:54:69:81:d8:65:da:1c:65:49:ec:fe:7a:41:65:c6:c3:31:
d5:74:57:07:b1:78:5a:df:c1:3b:0e:0b:80:69:13:64:92:75:
33:ff:5b:61:bd:b5:9a:96:df:14:c7:6d:96:91:f4:d5:0b:c7:
b1:62:0b:65:af:7c:39:62:e0:15:34:51:75:34:5f:20:b8:90:
42:4f:c7:1c:82:d4:29:35:57:a1:ff:2c:d7:62:70:f0:0b:02:
f5:a7:d1:ff:df:4c:b5:59:53:c7:12:2a:fe:9f:f5:0f:26:39:
51:c0:9c:4d:1e:7d:03:8a:f8:58:5f:d8:20:96:45:b7:ec:c8:
e8:da:53:b5:49:d7:6d:6e:30:a4:30:1e:9d:1d:02:92:00:1a:
58:5e:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:27 2026 by rpki-client