
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
File: aNVC9HJ2FI-se4mU780q8Q56SEo.mft (raw, json)
Hash identifier: fhNEPBlnpBFiDOJZM6xEAgvqi87r97Hl9NAavAAhSUw=
Subject key identifier: C1:36:F2:4F:AA:AE:68:E9:D8:57:8E:EA:BA:56:BD:B8:46:8B:60:62
Authority key identifier: 68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
Certificate issuer: /CN=68d542f47276148fac7b8994efcd2af10e7a484a
Certificate serial: 019F95496C6DE437E165BEA598EA8D9EC68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:44 +0000
Manifest this update: Fri 24 Jul 2026 18:00:44 +0000
Manifest next update: Sat 25 Jul 2026 18:00:44 +0000
Files and hashes: 1: HSSRUKBEGAwzctbuSfK5pqFW7og.roa (hash: JzHF9cnYKiNULXtoW5fjwRQd1kJW6OGN1ZbOkNwiJFU=)
2: aNVC9HJ2FI-se4mU780q8Q56SEo.crl (hash: meCHNDcRcqiIQgt0qYHMUaI6H/M5Ksy+IxAdhgCE0P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:6c:6d:e4:37:e1:65:be:a5:98:ea:8d:9e:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d542f47276148fac7b8994efcd2af10e7a484a
Validity
Not Before: Jul 24 18:00:44 2026 GMT
Not After : Jul 25 18:00:44 2026 GMT
Subject: CN=c136f24faaae68e9d8578eeaba56bdb8468b6062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:b0:de:56:61:9c:6e:ae:84:9e:5d:91:d7:
1a:10:a7:8a:83:61:84:8f:33:36:cc:4b:91:f0:95:
10:94:ef:a4:13:fa:c6:b2:b4:96:77:48:89:ec:26:
89:f3:ee:f6:01:e7:b9:f1:69:cf:e8:39:c6:52:30:
4c:7b:a2:79:86:ae:fa:8d:7e:2d:25:09:11:49:db:
9f:9e:b9:72:29:41:31:07:b8:da:01:31:9c:31:2e:
79:da:80:ce:fe:ac:d0:5d:bc:ea:80:60:8e:a0:a2:
d7:e1:aa:47:aa:d0:ed:d9:f1:85:b7:f8:8a:de:bc:
eb:90:1c:24:28:39:77:ac:66:7a:07:21:05:44:07:
80:2c:99:d4:ba:a0:77:93:76:48:cb:b3:ad:15:d9:
83:ea:6c:90:22:d3:7b:ce:e9:83:f1:13:d5:71:d1:
61:7e:6c:c7:10:b7:ea:49:14:0e:13:24:99:ce:dc:
83:8c:ad:f9:b6:f8:43:87:e0:3b:17:c9:c6:c8:e9:
05:ea:24:6b:a0:ec:56:20:b0:e4:9b:6e:06:cf:94:
ba:4c:6b:18:18:c7:85:1c:8b:01:41:0d:c7:ea:5e:
f0:c0:dc:ff:cd:52:e2:85:59:38:66:18:9e:35:8e:
83:01:f1:c0:85:58:d8:42:16:55:18:0e:f8:9e:45:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:F2:4F:AA:AE:68:E9:D8:57:8E:EA:BA:56:BD:B8:46:8B:60:62
X509v3 Authority Key Identifier:
keyid:68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5d:97:39:9d:37:5d:a8:ec:f2:08:3e:33:86:e5:05:75:d6:
19:90:8e:5c:a6:63:3e:05:8c:3f:bf:59:45:ce:87:49:96:8a:
af:06:a5:36:da:4c:8f:f7:aa:cc:65:f8:41:d4:c9:38:e7:b5:
d7:a5:4d:b2:f1:a3:be:13:55:15:e4:c1:96:db:2a:ce:26:dd:
c5:8c:7d:3f:69:d7:ca:05:40:53:94:5e:ec:49:f0:f4:47:0e:
18:c5:83:b5:ec:3e:4c:fd:e0:b8:82:7b:81:6a:ce:08:64:f0:
e2:cb:c0:b1:29:00:32:65:15:e0:17:50:79:84:d4:ca:ee:9a:
17:d3:64:e2:7e:a2:f9:d9:77:e5:bf:ab:86:52:9d:8a:45:91:
aa:37:ee:b8:83:af:bd:19:0f:eb:85:32:d8:e7:14:b0:5c:26:
8b:7b:b9:e3:30:d9:e0:a3:84:e1:8c:91:21:e0:6f:8c:3e:14:
7e:d2:43:86:ee:eb:29:0b:87:40:dd:06:36:29:aa:89:8f:39:
c9:e9:5f:8a:aa:8c:68:2b:91:18:d2:be:50:79:04:5f:23:44:
c6:e1:48:50:e1:82:a4:22:21:c9:a3:87:b0:0f:77:e1:77:e6:
f3:bb:17:38:ab:65:f8:95:d4:c9:21:23:32:9b:4d:36:0d:ef:
af:0e:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:09 2026 by rpki-client