Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
File: Ailn4M12ou9IKENytcPFQZ-TKgw.mft (raw, json)
Hash identifier: vYYaL7AI7DttdOaCaF3eSttxhdUqMNAmgmYYzz9J7Lk=
Subject key identifier: 1D:BF:0E:D0:F5:C9:93:A1:DD:76:CC:FD:E2:F4:D0:95:B5:94:38:B5
Authority key identifier: 02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
Certificate issuer: /CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Certificate serial: 019F8ED93A7834C5B6E3F38704CEF63772BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
Manifest number: 18
Signing time: Thu 23 Jul 2026 12:00:28 +0000
Manifest this update: Thu 23 Jul 2026 12:00:28 +0000
Manifest next update: Fri 24 Jul 2026 12:00:28 +0000
Files and hashes: 1: Ailn4M12ou9IKENytcPFQZ-TKgw.crl (hash: PGx2ucWpufMTgW8ONgmCpOYFUionTs38gKTyA3M/zJY=)
2: n8TPT7CRKn1Mn5L4K6mumPY_u2I.asa (hash: FpmaFJDT25wJPGSsanK09Hz1zRivL1ng9GmIas6DUVo=)
3: wROddSYepcKFBJuKhnhqKktwrhE.roa (hash: ckFxFlRt9odYX8HCvzcnB7HwosCrL/n2CQ7qoo3Y57k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:3a:78:34:c5:b6:e3:f3:87:04:ce:f6:37:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Validity
Not Before: Jul 23 12:00:28 2026 GMT
Not After : Jul 24 12:00:28 2026 GMT
Subject: CN=1dbf0ed0f5c993a1dd76ccfde2f4d095b59438b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:c6:21:3f:83:d2:b2:de:c7:b5:bc:d4:6f:
61:a2:37:bd:3e:b8:f4:28:c6:ff:57:1a:34:a6:cc:
bd:81:c0:c6:76:ac:90:2f:15:18:92:df:8a:9c:69:
26:95:7b:c7:5c:85:85:f4:8b:df:95:2d:3e:09:b6:
df:f3:46:46:88:54:c6:e9:95:f2:19:0e:c7:ef:db:
38:23:2a:16:9b:50:77:5b:d5:21:fa:88:4b:da:93:
01:82:77:47:a6:fd:18:96:44:87:48:b4:f1:f0:33:
15:ef:99:21:90:e3:d1:8a:cc:e2:47:32:f0:67:5c:
ab:af:e0:e8:27:48:31:67:61:55:41:d6:ef:95:3e:
13:6c:f2:cb:e1:3e:ef:84:61:8d:c1:04:d6:a4:57:
24:e9:8e:b5:39:95:05:f8:af:c7:ad:45:3c:a5:af:
d7:a3:16:52:53:b3:e1:2c:ce:88:b5:9d:48:cf:b5:
8d:a3:70:de:f9:6e:c5:a4:9a:40:3f:b6:f7:d5:e7:
4d:b3:92:29:5b:cc:b4:5d:67:c6:f3:24:89:22:ba:
0e:db:a4:07:c3:88:06:e5:29:6a:2e:a5:c2:05:36:
39:b4:ce:2b:f5:2e:20:bd:29:f0:20:83:8e:04:51:
ac:77:e7:dd:e9:04:35:fe:8d:2e:c3:da:57:f6:38:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:0E:D0:F5:C9:93:A1:DD:76:CC:FD:E2:F4:D0:95:B5:94:38:B5
X509v3 Authority Key Identifier:
keyid:02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1a:7b:80:de:3b:7b:0a:a8:ea:76:cd:b4:c0:96:76:09:0a:
54:8e:23:f8:da:a8:68:02:3b:75:9b:36:bc:bf:50:7e:02:a9:
5e:82:65:f6:a3:8f:51:f1:34:de:15:9a:e5:0e:53:cf:3b:c3:
34:c5:c0:6f:87:7c:4c:13:92:c6:21:b2:e1:58:24:93:46:16:
fd:28:1d:f9:3a:de:6f:a2:98:97:0b:fa:11:ed:a6:a2:b3:ce:
11:c4:e5:c0:37:bc:6c:ce:ef:e2:6f:2c:56:6e:b3:c8:7d:e6:
df:14:56:7f:dc:73:37:24:dd:39:09:ef:50:09:74:c4:da:06:
39:4e:dd:6e:5e:da:85:22:6c:d0:4f:d0:38:88:9a:94:d8:16:
7a:69:a4:be:b7:e0:2f:28:8a:e6:1f:10:98:af:46:ee:26:4a:
53:29:fe:88:98:11:54:33:92:75:8e:c7:12:a4:8c:22:1d:04:
31:1e:ac:13:11:f1:52:94:33:22:bf:ac:39:f3:8b:f7:98:ce:
e6:ef:47:5c:ca:79:3e:39:2b:9c:65:67:ee:4a:1d:a6:8c:97:
59:30:8d:a9:92:13:65:31:75:cf:09:57:0c:bb:30:3b:71:5a:
97:3c:a6:b2:65:5c:55:2a:bd:ef:eb:da:ce:73:31:45:ab:ed:
73:7f:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:43 2026 by rpki-client