Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: jV/pnHpp86TOm/534iz0vxgla+j1sgME8S5SgRgm33w=
Subject key identifier: C6:41:AB:59:E5:69:7F:89:A3:95:03:75:83:A9:61:B4:86:5A:CC:71
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019F90FE73353FCAD1B6EED0450D2D998C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 040F
Signing time: Thu 23 Jul 2026 22:00:22 +0000
Manifest this update: Thu 23 Jul 2026 22:00:22 +0000
Manifest next update: Fri 24 Jul 2026 22:00:22 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: l75Kmnsqy5GC9IAlMgdb/ta+NPSHSLc3/523pEhY7KM=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:73:35:3f:ca:d1:b6:ee:d0:45:0d:2d:99:8c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Jul 23 22:00:22 2026 GMT
Not After : Jul 24 22:00:22 2026 GMT
Subject: CN=c641ab59e5697f89a395037583a961b4865acc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:13:ab:63:0b:a2:f2:b8:b8:07:99:45:bd:
5a:bb:81:fc:91:c7:6f:15:0d:18:ec:5f:15:69:01:
b3:0f:6b:aa:06:f4:dd:81:fe:41:80:5a:a8:29:45:
32:fa:05:5d:e8:2d:f6:e4:b6:b6:90:28:14:cc:84:
bd:33:e7:ea:ea:5f:fd:65:d6:c7:7b:30:f4:ad:f5:
ca:c9:2f:09:fb:aa:6c:dd:3a:ec:ac:c8:b6:88:ae:
b9:80:47:ea:5a:2e:38:28:f6:a7:d3:7d:95:67:9a:
ed:a6:02:62:53:21:03:98:2d:5a:a1:55:83:f5:5d:
ea:ba:bf:4c:40:6a:34:f7:0f:0e:33:88:a1:33:6d:
0c:57:22:88:da:15:aa:9d:3b:c4:82:23:98:bd:76:
c7:f3:b9:9d:e6:e3:48:9c:37:c1:3d:45:7a:37:79:
95:35:73:2c:1a:dc:36:bd:cd:a5:88:a2:b9:a8:60:
08:45:6c:41:af:77:aa:5e:c0:53:2d:33:85:93:ea:
4e:14:2a:03:7f:b9:da:4c:39:39:ea:e9:2a:dd:7f:
42:19:81:61:14:6c:57:94:5c:a7:dc:0e:f3:19:03:
dd:d0:10:01:9c:3a:d6:37:57:b8:27:78:03:48:cf:
0f:56:e4:fa:04:5d:00:21:e0:fe:62:05:a9:13:00:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:AB:59:E5:69:7F:89:A3:95:03:75:83:A9:61:B4:86:5A:CC:71
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:01:ca:f4:40:b9:a9:39:b5:cf:8b:f1:35:de:70:6f:c3:15:
9e:0d:84:dc:97:9e:a2:68:fb:3d:7b:3d:29:55:c1:a6:60:ca:
9a:fc:2b:ac:2f:09:6c:1c:40:b1:01:88:c1:8f:a9:7c:c0:77:
25:5e:e5:33:0e:a2:43:6d:d6:f3:f0:30:7f:95:c1:78:79:af:
8a:be:b5:4f:e0:3b:20:5b:62:81:a9:4b:f4:9f:0d:ed:0e:95:
6d:06:7c:a1:be:f1:b6:58:76:93:59:4f:ce:a7:72:5d:22:bb:
3a:99:46:f0:ea:85:bb:78:8b:f6:18:a2:17:93:f1:65:19:50:
c1:32:d3:d2:0f:fa:2d:ed:2b:e1:d6:fe:3e:bb:23:53:dd:e4:
5d:25:87:fa:a2:35:c4:22:c9:06:40:27:6a:c4:7d:11:bc:ca:
0c:bf:4a:7f:37:f0:3b:e6:47:d0:5f:c4:5c:6a:10:a7:f9:a3:
c3:8a:b2:dc:ee:d9:8d:25:7c:79:c4:fd:42:fa:b8:7a:8e:00:
0f:55:f6:50:56:a5:f2:0b:24:f4:70:d0:9d:01:3e:36:a8:8f:
5d:56:e9:bc:78:e5:9f:47:3a:34:34:f5:95:8e:b8:b9:34:41:
8c:4a:db:ec:09:3c:cf:a2:1f:c9:32:33:c7:ec:1b:c1:13:7e:
39:29:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:36 2026 by rpki-client