Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
File: AEzwfH0FkwK1YGaq9svuwTUYakQ.mft (raw, json)
Hash identifier: XeDkovhCwb4LGZriyVPzUsnYU4H4njhW0S9iDc0PgVk=
Subject key identifier: 53:50:D9:56:CF:FD:55:3B:56:07:BE:FA:5F:BE:A1:A6:76:91:B0:E3
Authority key identifier: 00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
Certificate issuer: /CN=004cf07c7d059302b56066aaf6cbeec135186a44
Certificate serial: 019F8F47327C182F7BAC1805AEC3C408842D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
Manifest number: 19C4
Signing time: Thu 23 Jul 2026 14:00:35 +0000
Manifest this update: Thu 23 Jul 2026 14:00:35 +0000
Manifest next update: Fri 24 Jul 2026 14:00:35 +0000
Files and hashes: 1: AEzwfH0FkwK1YGaq9svuwTUYakQ.crl (hash: PoJD1+zlJaCaMIPUXxMgJylX3kKjAL9ASx2OihMcX+4=)
2: eTrUoV1B4bRDuSSd3vjzahf5Fv0.roa (hash: IbkmdqkTYW4Kd/WPuzbn4B9/sqXybS99skf40EqigTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:32:7c:18:2f:7b:ac:18:05:ae:c3:c4:08:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004cf07c7d059302b56066aaf6cbeec135186a44
Validity
Not Before: Jul 23 14:00:35 2026 GMT
Not After : Jul 24 14:00:35 2026 GMT
Subject: CN=5350d956cffd553b5607befa5fbea1a67691b0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:f5:7e:cd:5c:56:03:d2:af:cc:5a:d7:f8:
95:80:d0:dc:aa:88:3e:5b:b9:c3:21:9c:dd:53:98:
1f:73:4f:20:c9:e0:a6:c2:1c:e6:83:36:e0:23:1f:
53:54:98:f5:fc:32:b1:18:f9:32:8a:94:0b:de:60:
9b:8a:43:a5:aa:ea:0b:cd:5b:8c:42:94:cb:e5:75:
ea:cc:7e:dd:0e:a8:cc:03:ed:4f:da:e0:b7:47:c7:
70:3d:a6:f2:f7:cf:d2:42:32:1a:ea:a7:c8:26:1f:
b9:d6:6d:0f:ca:67:a7:59:14:64:e0:b9:c6:6b:17:
76:ce:94:19:22:ea:af:cb:c0:31:ee:36:04:67:cc:
04:ef:03:e2:4a:58:04:0a:db:6c:94:bc:52:83:f4:
b7:0a:aa:31:7f:40:de:39:ac:23:dc:04:bd:b0:1e:
17:12:2b:dd:02:31:72:b1:50:f0:56:a7:85:80:a1:
a0:3c:09:e0:7f:0d:7b:3d:39:4a:4b:40:3f:ad:ee:
bb:ac:59:53:c0:17:d1:75:21:05:dc:d4:6e:87:4c:
61:78:82:0f:da:1a:68:02:d2:e3:a7:32:ad:43:65:
35:35:70:02:74:44:d0:c6:19:d2:2f:91:55:a5:33:
d9:50:b2:f2:d5:b3:47:d1:7d:e6:cb:53:3f:e9:d6:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:50:D9:56:CF:FD:55:3B:56:07:BE:FA:5F:BE:A1:A6:76:91:B0:E3
X509v3 Authority Key Identifier:
keyid:00:4C:F0:7C:7D:05:93:02:B5:60:66:AA:F6:CB:EE:C1:35:18:6A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEzwfH0FkwK1YGaq9svuwTUYakQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4f37a8-b937-4c6a-9912-6e545b6c43b0/1/AEzwfH0FkwK1YGaq9svuwTUYakQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:98:5a:3f:8f:56:2b:3c:76:ab:17:89:f0:02:c8:9e:31:a4:
f0:9b:e0:1c:3f:e6:15:46:02:98:b4:c3:21:52:fb:d2:9c:ca:
4a:b1:38:1f:c6:74:21:b9:17:45:2a:34:3a:94:3c:2e:c4:a7:
45:ea:da:dd:05:73:0e:8a:93:c9:ea:29:39:c6:1e:57:e4:79:
c1:22:32:91:9c:98:66:ab:d9:4c:54:4d:73:80:14:ed:4a:f0:
5b:92:a3:2c:00:4c:d9:20:b5:93:b8:bc:d9:c1:e6:03:73:9a:
32:f2:3c:2a:d5:62:4b:97:93:e8:1f:5a:e5:e7:51:ea:ed:e7:
5d:36:a9:83:03:44:b6:4b:47:7a:89:65:a5:59:42:b4:5c:c3:
89:30:73:a2:28:44:e4:21:43:0b:34:ff:d9:55:20:4d:f0:72:
4c:35:2e:45:8b:b3:bc:76:55:87:6a:52:af:4c:4d:77:0b:b2:
13:b7:fd:c0:9e:07:09:25:e7:c5:de:f2:79:f0:8f:a2:ca:cb:
4f:85:93:cf:1d:a2:5e:6d:df:08:66:93:bf:2f:9a:f1:bb:4d:
d6:38:f1:5f:6f:e3:a2:41:b0:77:f1:e7:f5:0f:b7:dd:b8:6f:
8a:00:80:31:0e:d0:02:26:ac:29:14:bc:b9:44:f8:84:64:9f:
25:41:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:05:26 2026 by rpki-client