Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
File: A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft (raw, json)
Hash identifier: suuxf+P5T5JxWKw5lRWy30rafZuCVfv+DQnIQYgXJKw=
Subject key identifier: 98:7C:85:23:EB:17:BA:7E:7A:AB:0A:1F:69:F7:CE:C9:4A:4B:0E:FF
Authority key identifier: 03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
Certificate issuer: /CN=03820e964dfd3d281420afda20ce949e60d4cc44
Certificate serial: 019F9059D0595884B8A8634BA4BE246FCAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 19:00:32 +0000
Manifest this update: Thu 23 Jul 2026 19:00:32 +0000
Manifest next update: Fri 24 Jul 2026 19:00:32 +0000
Files and hashes: 1: 1-7mCdJzh3AJCBzQkr7Lm8UYkVoI.roa (hash: 8hePNi3TWg9ikxMqqbDcHn46RE1As5QHT7LFgD1DtFs=)
2: A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl (hash: 4+uBZ4GQTdHqsXFTs6kSRSRtXPKyspdWCkNsuUdy3+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:d0:59:58:84:b8:a8:63:4b:a4:be:24:6f:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03820e964dfd3d281420afda20ce949e60d4cc44
Validity
Not Before: Jul 23 19:00:32 2026 GMT
Not After : Jul 24 19:00:32 2026 GMT
Subject: CN=987c8523eb17ba7e7aab0a1f69f7cec94a4b0eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:0d:32:e8:6d:73:49:ed:10:44:74:24:9b:
1d:7d:fe:27:d8:c0:5a:9d:74:f4:da:d9:69:92:cf:
86:da:ae:b3:e9:67:77:6e:ad:b6:a9:47:c0:4d:1d:
cb:4c:4f:35:10:87:09:2e:5d:8a:2a:d0:d5:7e:c4:
80:46:11:7f:3d:7e:0f:c3:50:92:98:18:f6:66:81:
ba:01:93:78:61:61:53:85:49:1d:55:3a:75:c3:c7:
5b:00:ab:81:ea:0b:31:5b:8c:2c:9e:85:61:2b:3c:
2c:41:2a:a2:38:75:fd:3e:99:b1:ee:44:3c:75:34:
27:0d:b9:36:13:ca:12:eb:6e:26:d3:6d:7b:06:7c:
b6:da:49:63:14:25:44:f2:a3:61:93:46:d0:da:c2:
55:72:64:bd:92:df:3f:51:fe:cb:e3:7e:39:aa:94:
cd:0c:e0:8a:81:b4:1d:23:70:61:d7:15:a4:3c:0e:
5f:e3:e5:fa:c5:b1:4b:a0:6a:fd:26:1e:13:2f:b4:
cb:4e:48:05:5c:2f:eb:e4:f7:4a:13:7c:70:56:ec:
92:17:c0:f9:b2:08:24:46:40:86:d6:9c:98:df:d6:
47:ff:7f:0a:65:0a:ce:1e:0e:4c:c2:42:1a:34:07:
25:fb:4e:59:e0:26:5c:26:6a:45:f0:53:8c:9a:d6:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:85:23:EB:17:BA:7E:7A:AB:0A:1F:69:F7:CE:C9:4A:4B:0E:FF
X509v3 Authority Key Identifier:
keyid:03:82:0E:96:4D:FD:3D:28:14:20:AF:DA:20:CE:94:9E:60:D4:CC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4IOlk39PSgUIK_aIM6UnmDUzEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2ed5da-85cf-449f-bd85-628b0fbcd0b6/1/A4IOlk39PSgUIK_aIM6UnmDUzEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c8:9b:aa:51:49:3b:52:b5:b8:c5:3d:72:16:1d:61:0e:6f:
9b:9b:11:e2:a7:f8:e2:6e:93:5e:73:a5:c1:d8:68:ce:10:b2:
82:e3:97:96:9b:c9:53:ad:d7:cc:fc:c6:bb:9b:d8:6d:5f:1f:
ac:5a:ef:5f:d8:d5:98:1d:1d:92:9b:d0:79:b8:59:e9:c5:f8:
c1:80:13:12:0d:19:1a:ee:9c:61:6c:e1:99:83:89:e1:fa:21:
97:80:dd:93:6e:2c:ed:a5:5b:76:78:61:0a:b5:91:56:36:d3:
6f:4f:ca:d7:e8:aa:75:66:ec:13:13:93:17:09:92:5d:36:85:
e6:cf:f0:e7:71:44:13:cb:3d:9f:37:6b:1b:b4:96:e7:9d:26:
36:07:c0:bd:58:8a:05:44:f5:dc:db:af:9d:6e:17:39:89:69:
49:a5:f3:c6:91:5e:93:07:8e:8b:b8:da:7c:55:c7:7b:f3:ff:
1f:ce:e5:11:1f:88:88:cb:b1:88:b8:75:b1:88:c3:b6:83:f7:
44:6c:c9:3f:58:0c:24:54:79:f0:05:17:10:14:d4:50:c3:46:
a2:3c:b0:c1:8a:c6:a4:a4:00:d8:fc:71:c2:f4:64:eb:f7:93:
fa:29:89:36:0d:1d:7f:bc:74:99:34:09:55:c1:bb:bb:5f:c0:
b0:5b:01:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:29:38 2026 by rpki-client