Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: nltYueYBtCEGmh36j/stNMJDc0TW+dOExgrG0Lwu3I4=
Subject key identifier: F2:6A:27:B2:D5:DA:EE:7B:9D:BD:31:BE:08:C9:88:25:0D:F2:9A:CD
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 019F90C7BD69E1D3CC3AAEE9E86C133DFE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 06DF
Signing time: Thu 23 Jul 2026 21:00:36 +0000
Manifest this update: Thu 23 Jul 2026 21:00:36 +0000
Manifest next update: Fri 24 Jul 2026 21:00:36 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: w7fX0W1E6VDOh+cxca+YQ8S5Eu6ogmmR8KPL1/K/qBI=)
2: tK1_7kYoh8HPJEz9gt6VcaD4nUE.roa (hash: S18bPoeACVyQQ3iZwMpVkRKWBkpl4d3ZgQ7DJM72ZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:bd:69:e1:d3:cc:3a:ae:e9:e8:6c:13:3d:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Jul 23 21:00:36 2026 GMT
Not After : Jul 24 21:00:36 2026 GMT
Subject: CN=f26a27b2d5daee7b9dbd31be08c988250df29acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:b5:0a:66:a4:fc:37:51:a3:f7:37:c1:02:
46:3d:69:c7:08:65:29:10:70:fb:42:7b:2b:44:87:
d4:81:62:dd:ed:2d:57:49:65:43:fc:6e:50:0b:a3:
de:15:e8:39:a5:8d:e5:00:7e:42:0a:76:ba:8d:f8:
d2:10:2a:72:f2:d2:b6:57:22:a5:b6:e5:73:fa:e9:
ad:bd:40:e2:5e:10:64:9f:e3:9d:48:37:40:80:4a:
ae:3c:fa:89:50:13:45:21:85:1d:17:0b:6f:cf:0d:
7f:a1:8c:7c:70:b2:32:ed:b6:9d:72:a5:27:79:f2:
6f:30:43:77:f3:4c:b6:a4:4d:a3:26:dd:3a:2a:98:
b9:70:ae:3d:e5:a3:4c:89:65:57:24:31:ca:7a:06:
71:a8:95:0c:da:71:7c:99:0d:d1:80:04:84:23:71:
4b:bb:ab:4b:7e:bd:d6:7d:99:d6:ac:3f:e9:02:f8:
91:ed:7b:09:f9:02:8f:a9:6c:63:8c:57:fb:f2:6d:
28:3e:f7:8b:42:4b:b1:19:bf:56:ff:a5:85:92:29:
30:24:4b:2b:72:c5:b4:63:28:91:dc:48:98:7c:d8:
c5:7d:0c:c2:98:0c:3e:f1:4e:4d:6c:f2:c0:53:21:
ef:fd:fe:4e:16:32:de:3f:31:05:bd:7b:15:39:8e:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:27:B2:D5:DA:EE:7B:9D:BD:31:BE:08:C9:88:25:0D:F2:9A:CD
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cd:b0:d7:68:94:a0:33:7c:38:be:48:8e:51:04:34:42:c7:
d8:85:b0:5c:21:d8:3a:d9:51:e9:35:2a:6b:0d:2e:c4:a2:c6:
60:8d:7b:ed:45:3d:18:32:72:7f:56:42:63:d5:7f:3e:37:26:
07:ae:2d:96:28:dc:5b:a1:f1:9e:fc:67:02:ed:88:30:74:fe:
48:b9:79:3c:6d:95:19:94:b2:1f:72:c8:3a:72:06:44:4e:1f:
02:07:8c:0c:b6:60:4f:e1:bf:04:37:f4:c6:f9:59:e5:9b:6c:
6d:88:57:8e:67:3e:d8:66:05:7f:ec:0c:f6:25:0e:52:39:c4:
81:47:4b:22:83:d1:d3:17:fa:67:cc:92:2f:74:55:6b:d2:3d:
39:bc:45:19:2f:4f:13:0e:d0:82:11:76:7f:ea:0c:7f:23:2f:
38:5d:05:65:83:92:27:ce:62:d3:eb:14:cf:6b:48:b1:87:b3:
c6:36:90:98:9c:16:32:43:f7:ba:a4:90:a9:a3:6c:4c:ef:9c:
45:b5:8c:a0:7b:43:4b:d7:90:87:a0:5b:63:4e:8f:69:10:fe:
53:3a:cc:da:db:79:7b:f6:81:bb:01:5f:25:64:c2:56:25:69:
83:92:92:7a:ef:97:80:d5:e7:e4:0e:df:12:75:f7:1c:b3:7f:
5e:3a:b8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:18:16 2026 by rpki-client