Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: QN0XsyVT4ItUtz+x1+V3lBZeyKtTXxewtgjBLwPTgh0=
Subject key identifier: 3B:35:57:5D:E4:84:B7:80:49:8C:D0:5F:71:D8:C4:B1:D0:70:D0:61
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019F90C7D979A338B8AAFD21EDD373B84563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 21:00:44 +0000
Manifest this update: Thu 23 Jul 2026 21:00:44 +0000
Manifest next update: Fri 24 Jul 2026 21:00:44 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: D0kuCJcu34Wmbtku0/svZtqUTt/gaRLLP5Jpb6ZT/gU=)
2: swB-_KyWrdCTLsFeJA5Bb0yEuQw.roa (hash: Xe4yfVJ7GclnsKO5T3vlkkQQQKjDz34ASisy6nJh1ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d9:79:a3:38:b8:aa:fd:21:ed:d3:73:b8:45:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Jul 23 21:00:44 2026 GMT
Not After : Jul 24 21:00:44 2026 GMT
Subject: CN=3b35575de484b780498cd05f71d8c4b1d070d061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:85:d2:c9:ea:70:f6:7f:19:f2:f1:ae:a0:
53:39:8c:2a:2d:a6:55:91:77:a8:82:ea:21:8b:5f:
66:ca:f8:c3:b0:05:24:ba:8f:1d:ba:15:57:04:bc:
f0:e2:73:2b:cb:d0:ed:c7:94:a9:cf:18:2f:48:99:
a7:84:f1:fb:b6:1c:a7:e6:8f:45:02:4d:4a:70:20:
32:69:79:e6:f1:a1:83:73:fd:5f:1f:3c:03:60:04:
9c:7e:6f:12:eb:a1:59:79:3f:bf:3b:bf:6d:8a:96:
ce:3b:a0:b7:1a:bf:e2:68:3d:b3:80:61:b2:f7:4d:
ae:a7:23:68:83:52:bd:be:b2:c9:42:ba:46:c2:75:
9e:cc:a4:97:95:10:af:f8:03:b2:04:9a:df:0e:7e:
1c:10:ff:8b:10:64:73:30:e7:c8:e9:dd:b4:b9:0c:
c7:63:bd:5f:d5:07:4b:86:0d:ed:d3:08:c3:c0:5d:
ac:db:e8:d3:05:31:a3:a6:c9:27:9a:e0:61:cd:95:
07:b8:58:87:3b:0b:fc:b1:1a:30:61:d9:7b:32:54:
bc:a8:aa:ed:5a:62:d4:40:6c:4f:2c:ca:2b:da:13:
05:eb:48:5c:3f:05:19:68:b1:30:b0:19:eb:2a:eb:
80:69:59:7b:d2:f5:35:96:10:60:29:8d:a4:8a:9f:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:57:5D:E4:84:B7:80:49:8C:D0:5F:71:D8:C4:B1:D0:70:D0:61
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:32:41:7e:e8:30:69:0b:05:ab:7e:1a:53:03:29:b7:ba:0b:
46:28:07:8f:26:01:0d:a3:2d:59:ea:bd:c1:3c:d4:a3:4b:14:
b1:45:25:b0:cb:29:d7:df:c9:95:d3:ec:42:b3:2e:85:c9:7b:
83:32:0b:67:04:81:a2:58:af:58:27:0d:58:0d:9d:4f:e2:f8:
0b:da:44:85:12:d1:6b:52:31:c7:0d:41:0d:4b:d5:6a:9c:0e:
3a:5f:91:50:df:c1:e9:fa:03:df:3f:18:8f:39:56:8f:70:8d:
48:65:41:09:26:22:b8:30:08:c6:6d:41:8a:5b:90:dc:f9:23:
13:ca:ea:6c:12:59:f0:71:70:93:0c:c6:9d:4d:51:95:1a:35:
42:a6:2a:2e:53:5d:65:3c:5f:01:88:c4:37:f7:bc:16:1d:55:
68:a8:47:14:aa:4c:1e:9c:93:13:0d:2d:45:67:b4:24:d0:b0:
dd:19:05:9d:e4:57:25:ab:c4:e2:96:ab:30:dd:ac:7b:21:77:
3d:80:a8:52:b9:c7:a3:42:9b:12:84:95:0d:7b:de:32:0e:a9:
50:dc:07:12:cd:5c:4e:b7:03:a5:db:e5:b5:3a:95:45:5b:37:
b8:78:0b:84:a8:0e:df:d6:3e:8d:93:f9:6b:25:2d:c0:05:6e:
4c:b0:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:31:04 2026 by rpki-client