Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: WDOUkVTjMCH5i1zbSBcUNcqg/oefwqzw6HZPISAqOL0=
Subject key identifier: 19:F2:69:D0:07:42:4B:F4:E5:B7:70:CB:E7:56:2F:2B:8E:D7:19:AA
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 019F8F4713FE2632AE98C4594244D3726CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 12FC
Signing time: Thu 23 Jul 2026 14:00:27 +0000
Manifest this update: Thu 23 Jul 2026 14:00:27 +0000
Manifest next update: Fri 24 Jul 2026 14:00:27 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: JtKMCNN9b7mmkRCY4cYIBqEPvtWbraoS94c+Wvy/S9Q=)
2: FSxy8Ovh14yqtFHhoBFX5nBXdNU.roa (hash: duw06+xYQMFPNJS8Nqk1JSY0w1hNxbHtXY/z+S+qyJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:13:fe:26:32:ae:98:c4:59:42:44:d3:72:6c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Jul 23 14:00:27 2026 GMT
Not After : Jul 24 14:00:27 2026 GMT
Subject: CN=19f269d007424bf4e5b770cbe7562f2b8ed719aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:91:f3:b2:b9:6e:44:ca:be:84:2b:17:1c:
d8:d2:72:43:ea:9d:1e:20:60:c3:3a:97:81:80:0c:
e2:50:2d:d8:30:01:68:5e:37:46:70:5e:ad:e7:99:
fc:78:0d:c5:e7:e2:16:ce:19:df:a0:51:2f:55:39:
f0:41:1a:63:37:0c:86:04:f8:13:d7:01:88:84:f6:
0c:03:16:17:71:55:ea:19:7a:87:ad:6b:35:70:57:
b0:8d:b5:ca:b9:b2:23:96:17:11:83:d0:bf:1a:9d:
d2:ba:ef:aa:9a:ff:01:b8:b8:5a:5e:21:9f:b1:a4:
bd:e2:10:94:a3:7a:49:98:67:cd:2a:d8:5c:8f:d4:
e5:96:58:4d:3f:7d:ae:a1:14:bc:41:9b:9b:cb:81:
90:9e:e8:6b:41:5c:52:4a:c1:3d:b9:a7:69:82:96:
25:85:07:0f:74:f4:e4:3a:0d:ec:65:8e:40:89:fb:
fa:07:c6:e2:c4:43:c6:20:76:4a:e6:c0:32:dc:b0:
ea:dc:ca:3e:76:22:7d:3a:4d:b6:9f:ee:99:03:e5:
eb:3d:9e:6e:a4:b5:06:90:09:9d:f0:da:71:aa:4c:
e9:c3:fa:8f:67:aa:7f:76:7c:07:5b:e8:65:24:d9:
6b:ac:c6:79:3d:7c:c5:7e:df:1a:84:c8:af:8a:b5:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:69:D0:07:42:4B:F4:E5:B7:70:CB:E7:56:2F:2B:8E:D7:19:AA
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:29:09:11:93:e9:47:bb:58:d1:9b:85:88:5f:58:62:05:56:
57:8c:a1:47:7f:87:a5:4d:a9:e1:cc:28:c1:b1:8a:be:0c:ba:
76:12:65:f3:d0:4b:1c:e1:fe:93:de:75:f3:52:20:56:1d:db:
bf:0b:ca:1f:40:9f:33:1b:de:db:b2:8c:b2:30:e0:54:a2:15:
f3:b0:58:24:82:ca:52:57:22:b7:e4:47:4c:f4:54:14:c5:be:
6e:9c:c5:c3:9f:b8:df:94:ce:48:a8:8b:8f:41:1a:78:db:b9:
b6:ea:13:6d:a2:17:34:0c:f8:83:a4:dc:62:d8:3d:9c:a0:a5:
ae:b7:c6:ab:67:cf:3e:63:df:65:b9:f3:08:e8:d6:e0:3a:ca:
5c:85:83:49:97:6f:b8:91:3c:c1:ac:67:84:80:ab:64:5a:7e:
89:cf:2b:03:9f:45:bc:c5:27:6a:40:d8:74:2e:ce:05:2c:88:
15:34:21:84:c4:ae:d9:b5:83:7e:b7:33:09:15:43:e3:e6:d5:
8c:48:7f:e8:9e:92:4c:14:c3:33:04:4f:d1:8f:01:07:9c:53:
56:08:6a:b0:f3:88:ea:77:aa:b9:b8:9b:98:3c:e0:b8:e6:7e:
8c:ef:fe:97:4a:9a:de:aa:94:2f:45:e4:d9:bf:19:73:e9:0d:
92:2b:27:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:48 2026 by rpki-client