Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: f329a5h+Y8HoxGR3MUrZ0H+9Al680dEBH6GS7ISoiDE=
Subject key identifier: 49:75:2D:6F:D2:9A:DA:DB:4A:EC:F0:5C:A1:60:58:55:C6:35:EA:21
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019F916D20A2FB379266EE052B71DF7710BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 1069
Signing time: Fri 24 Jul 2026 00:01:15 +0000
Manifest this update: Fri 24 Jul 2026 00:01:15 +0000
Manifest next update: Sat 25 Jul 2026 00:01:15 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: NHP4gAQSr66ewOU9WL6HQKaWiycqp7HmeqAO9hVpiEY=)
2: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (hash: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=)
3: szELXMMZDl10r61Z-sPdEgawXsM.roa (hash: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:20:a2:fb:37:92:66:ee:05:2b:71:df:77:10:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jul 24 00:01:15 2026 GMT
Not After : Jul 25 00:01:15 2026 GMT
Subject: CN=49752d6fd29adadb4aecf05ca1605855c635ea21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b7:44:31:9b:8f:69:ce:10:b8:b4:f8:43:c7:
24:9e:0c:56:e0:2f:5f:cd:30:f1:81:49:fa:e3:19:
da:04:4a:28:6e:9b:3f:c0:ee:3f:d7:14:0a:9b:4b:
62:30:57:70:c2:fd:64:29:06:4b:46:6f:74:ba:ad:
51:e1:da:f1:a3:9c:aa:f3:c6:54:00:ec:a1:ae:29:
99:bb:11:a2:4b:31:cd:82:ff:28:af:99:e0:91:8d:
04:43:fd:6f:e3:af:91:2f:7e:10:2e:b6:45:c0:ef:
55:84:e6:4b:1d:ef:d4:6a:04:37:b4:bf:36:1f:08:
80:ec:08:16:42:a5:fc:f6:79:6b:fc:65:2b:28:20:
f8:9c:81:b2:67:f2:fa:af:9e:82:aa:66:e8:e5:4b:
4d:be:0b:1f:4d:10:da:fe:16:c6:e8:fe:af:f4:23:
c8:a6:54:c5:b4:2b:1e:49:84:d4:86:a2:6f:3d:de:
cf:34:ef:4d:85:3e:ba:ad:58:da:50:da:50:ee:dd:
9f:20:7b:e9:b7:7f:77:74:19:de:0b:10:90:2a:f1:
5d:2d:b3:63:29:95:4f:92:7f:54:99:a2:4f:da:14:
07:ac:4c:44:c0:b2:88:16:69:68:65:26:76:87:b6:
16:b9:bb:a8:23:2c:f5:b7:f0:b5:2c:e9:74:74:38:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:2D:6F:D2:9A:DA:DB:4A:EC:F0:5C:A1:60:58:55:C6:35:EA:21
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:44:21:f1:5a:b0:00:70:c7:1e:89:66:4d:06:c9:02:8c:66:
51:dc:d0:be:98:db:c2:e9:3f:f6:86:fe:b7:f8:d5:b9:a1:70:
71:0d:61:ff:de:7b:c7:c9:3d:74:c6:8c:71:16:63:ac:07:bb:
cd:41:4b:93:16:61:0a:a1:f4:2d:21:0f:e5:78:49:0d:9c:be:
08:60:99:cb:cd:f0:d1:cd:42:3a:5d:69:8d:fa:13:6b:5b:5d:
4c:33:40:54:e7:82:cf:d0:28:59:eb:43:54:7b:f3:e3:ed:bd:
ac:8b:7a:1b:1b:de:c0:f6:02:77:05:0e:7d:c0:0f:2f:bb:60:
26:16:3d:ba:d3:41:1d:99:f9:68:af:ab:9a:90:89:e4:a9:6f:
7d:53:80:36:ed:da:07:33:3e:f2:74:4e:dd:9d:eb:b5:eb:1a:
df:71:8b:4e:4f:d5:b5:de:c5:72:a0:43:d6:2b:f9:96:5a:23:
0f:02:87:7b:5d:d6:0b:dc:5b:3c:1c:ec:27:fb:86:1d:4a:51:
a0:2c:a8:79:82:0a:0a:65:67:d2:d4:22:c6:36:93:43:2b:24:
32:2f:bf:03:a7:be:df:5c:ce:af:0e:fb:8b:e4:c3:75:80:b2:
3e:2d:49:d0:e7:f4:c7:d3:81:cd:7d:8e:2d:50:00:46:72:36:
e5:f8:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:33 2026 by rpki-client