Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: MUlro23s6KE4jxurinmLKscNPivqCFqnxfuwBSIgs7Y=
Subject key identifier: 93:73:9D:72:C3:12:85:A2:94:AD:41:E6:09:C7:ED:F9:1A:39:FD:C9
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019F91DB300AF60071E08A9D456E89A67919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0DBF
Signing time: Fri 24 Jul 2026 02:01:28 +0000
Manifest this update: Fri 24 Jul 2026 02:01:28 +0000
Manifest next update: Sat 25 Jul 2026 02:01:28 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: +EKiQoNEyLcD0sPP2+OXxoaUN50VsRAHv+4Xd9DRtH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:30:0a:f6:00:71:e0:8a:9d:45:6e:89:a6:79:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Jul 24 02:01:28 2026 GMT
Not After : Jul 25 02:01:28 2026 GMT
Subject: CN=93739d72c31285a294ad41e609c7edf91a39fdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:09:2b:fe:66:cd:22:15:19:b7:ae:06:06:
8a:0e:57:de:82:f3:a8:60:ec:b6:28:c9:6c:fa:5d:
c8:70:e0:8d:b4:e4:25:74:1d:24:bf:9e:71:c8:f3:
42:e7:10:12:60:42:3c:40:35:da:04:2a:94:95:d2:
ab:d0:95:a7:d0:5d:a2:0b:2f:ef:73:df:77:e0:67:
27:56:dd:4c:1b:6a:78:67:2f:90:ea:08:58:4e:fb:
ed:f3:a2:be:ab:40:48:38:a6:ab:ec:23:8d:0b:8c:
82:e1:30:d2:4b:29:88:60:02:f7:8f:74:e5:1d:3e:
14:2c:a2:8d:2c:ae:fa:e6:24:50:fb:b6:48:f7:09:
f9:5d:28:49:4b:1e:30:c8:85:89:33:6b:3a:b9:2b:
02:d4:dd:b0:e3:f3:87:e1:fc:55:44:01:9a:6d:b4:
1f:a6:02:01:eb:20:b6:77:e0:64:7d:34:a6:3c:e5:
98:f4:8b:25:85:f4:08:1d:94:9c:c7:65:c1:d8:d1:
d4:5a:54:1f:d7:83:e8:0d:fe:dc:cf:00:53:5b:bf:
c6:40:38:61:de:b2:50:2f:5c:b3:90:4c:3b:b3:68:
69:c9:4d:df:3e:10:f6:b9:24:f6:77:db:dd:98:99:
f3:72:12:4c:17:af:b5:14:49:58:47:e0:0b:88:c2:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:73:9D:72:C3:12:85:A2:94:AD:41:E6:09:C7:ED:F9:1A:39:FD:C9
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:fc:ea:a1:ea:d7:b6:0c:e9:c4:8a:88:c1:a4:8a:ae:96:
f9:6a:e6:a4:41:1f:30:d6:7f:17:17:ba:26:14:01:9f:c3:bc:
d5:1b:85:fa:82:05:03:df:6b:ec:ad:04:11:26:f3:f4:c2:d5:
dc:fc:9a:b5:68:38:c6:d5:89:f7:1c:0d:ad:be:4d:dc:12:57:
64:43:c8:53:3b:8f:ff:7b:77:df:9a:95:85:dd:e1:90:87:33:
8d:38:c1:ef:ce:1d:31:ac:e2:15:16:c9:65:c3:4b:03:6f:12:
9a:c0:ce:eb:a8:7e:22:e5:15:22:7f:50:06:f6:b9:63:aa:fd:
df:09:fb:26:f6:92:e6:1c:e2:fe:09:91:61:bd:5c:6a:4d:7e:
d8:2f:15:36:be:ad:42:11:64:e0:ea:90:c9:a0:3a:37:b5:09:
39:be:28:83:71:a7:db:19:e1:b2:90:44:8c:5f:bb:8a:30:ac:
38:ca:eb:d8:61:15:21:19:74:f8:9e:51:58:6e:48:21:8e:f8:
1d:9a:16:d4:58:87:12:c8:3d:df:55:58:cf:61:bb:9f:64:e5:
3b:da:c7:be:b3:1a:fa:2d:68:8b:7e:2d:2a:19:dd:bb:d6:0d:
23:55:da:62:53:5a:26:30:5c:a7:e3:7e:d0:ee:74:e6:91:bd:
3a:8c:76:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:26 2026 by rpki-client