
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File: Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier: S8/W5SWAm0c1D8Gv0+TTbc/RWnHC83REUK5Yf8Wtd3U=
Subject key identifier: B9:59:10:D3:33:F2:D7:32:FD:8F:EA:24:33:8B:77:ED:2F:89:31:B4
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer: /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial: 019F8FB5637BECF7D5916551FB7630A3AF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 16:00:56 +0000
Manifest this update: Thu 23 Jul 2026 16:00:56 +0000
Manifest next update: Fri 24 Jul 2026 16:00:56 +0000
Files and hashes: 1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: o3YzYE/SKP+oZAmdGYjAJCocfEniZuF98bJt8g7BsSg=)
2: DAfU0D6FgxQd5_vEH2Qpid-IR7g.roa (hash: fxIk5AsChzngQysfi5it8JFJ1Q8x41MNpVTTV3uuLiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:63:7b:ec:f7:d5:91:65:51:fb:76:30:a3:af:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
Validity
Not Before: Jul 23 16:00:56 2026 GMT
Not After : Jul 24 16:00:56 2026 GMT
Subject: CN=b95910d333f2d732fd8fea24338b77ed2f8931b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:fa:4b:01:1e:74:9d:87:24:53:ca:d8:f9:
43:4c:c3:4f:8d:6b:96:e4:93:91:27:ae:40:9c:f1:
0b:50:b1:ea:ad:98:96:33:20:a8:26:73:94:dc:c1:
4c:dc:7b:62:e7:20:ef:39:88:30:74:9d:6f:d2:ac:
6f:82:3e:d3:12:1e:e7:48:c2:f5:65:57:52:5a:72:
1b:3c:a6:ce:d5:57:be:c6:1e:42:58:fa:a6:88:38:
48:f2:fb:61:57:ea:98:5a:f4:53:35:9e:53:ab:70:
b6:87:58:03:1c:2e:96:2e:f0:54:fb:fd:31:90:46:
de:1d:65:2f:96:aa:dd:ae:4e:28:b3:9f:3f:13:1d:
44:23:4c:24:43:24:bc:b5:86:b9:66:10:5f:17:e9:
df:04:9a:82:a3:0f:43:74:0c:ef:4b:d3:3e:73:a3:
6a:08:f5:88:c5:f7:02:24:15:6e:ee:00:e9:d3:a1:
73:c1:76:c7:f5:4c:0f:9a:6e:2a:93:af:97:03:52:
91:5f:f4:7b:c7:cf:37:3b:88:fe:b8:d5:e1:de:83:
60:a0:f8:79:03:f6:5d:26:7e:09:b9:6b:78:5c:da:
92:20:5b:51:a3:01:7d:ba:3e:03:32:d7:8d:16:c4:
2d:d8:fb:18:55:d9:45:a9:75:e5:4f:d6:0e:94:62:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:59:10:D3:33:F2:D7:32:FD:8F:EA:24:33:8B:77:ED:2F:89:31:B4
X509v3 Authority Key Identifier:
keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:75:32:9e:65:58:e2:59:2f:92:c1:61:50:40:11:a5:12:3e:
28:c2:fc:ab:b6:a4:cf:64:c0:1a:a8:74:b1:d7:6c:d9:5f:d5:
57:ee:e9:69:4c:2d:d6:9b:fa:4f:dd:b4:3f:73:4f:a5:17:f7:
ed:47:1e:4c:1e:73:61:b8:11:55:ad:f2:6d:1d:bd:79:0b:81:
b7:53:5b:4c:73:12:c2:76:b8:bd:8c:e5:fd:57:5c:fa:2b:71:
29:cd:56:ff:f2:06:fe:69:bd:0e:38:65:42:45:7b:96:af:7b:
d2:85:a7:b3:fe:dd:92:f8:eb:c9:27:a8:2c:43:00:da:22:b4:
10:d4:93:d3:b1:7a:38:89:01:84:40:25:2b:ef:04:de:86:78:
ea:2a:60:48:d7:0d:51:14:5f:d6:54:8d:0f:b7:e0:8f:7e:e9:
fa:36:67:28:61:09:d7:f6:ab:1c:c7:a8:1d:42:3a:d2:38:b9:
47:da:1b:d2:8b:b8:d2:c0:c4:b5:b5:9a:3d:d6:c9:3c:bd:78:
5d:6f:39:bf:4e:95:7d:af:2e:0d:79:84:58:9d:a0:70:d1:55:
7a:8b:fd:0c:71:0b:7f:76:5f:9e:b1:5a:99:17:4d:48:75:d3:
55:45:ff:54:b1:05:4b:2f:b0:fb:b7:7a:3c:40:42:92:b3:c2:
d2:ae:cf:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:01 2026 by rpki-client