Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
File: a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft (raw, json)
Hash identifier: yhhS82afB6Pr3EgoMtuwroXuculQZIet4w4QSregRos=
Subject key identifier: EE:4A:D3:CD:07:89:58:97:8E:46:23:B5:2B:0A:CF:E6:FC:F1:14:91
Authority key identifier: 6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
Certificate issuer: /CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Certificate serial: 019F96255A15D033B13BA9FF3A9136340C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 22:00:57 +0000
Manifest this update: Fri 24 Jul 2026 22:00:57 +0000
Manifest next update: Sat 25 Jul 2026 22:00:57 +0000
Files and hashes: 1: 23Zi6Py4gat9DXMFNsAI-_q8-4M.roa (hash: JvpZNhbX4GuKh0NLAnQpWeYECOq74QqIFmrg5zgTOUo=)
2: a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl (hash: 0vsw/eFFzYht1HnLYbSzwQ6DvR4lNouhYuliF3EBI3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:5a:15:d0:33:b1:3b:a9:ff:3a:91:36:34:0c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b66c53b13566d01c4a893adf130bbb4fa1653aa
Validity
Not Before: Jul 24 22:00:57 2026 GMT
Not After : Jul 25 22:00:57 2026 GMT
Subject: CN=ee4ad3cd078958978e4623b52b0acfe6fcf11491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:f3:c6:1c:ad:53:2c:30:0a:90:a5:a9:4e:
82:fd:9d:bc:46:05:a5:2d:fb:03:46:fb:87:d0:ea:
45:68:c4:cd:52:58:bb:9c:03:1d:30:f7:8a:0f:91:
6b:d0:54:12:85:e8:1e:dd:e1:51:ec:e8:5a:40:eb:
b1:b5:5f:fd:b2:51:3a:09:c5:c3:f9:38:e9:b6:0c:
78:f2:81:13:0b:b5:a1:e2:42:64:ee:14:ea:57:19:
b3:26:38:f8:05:ea:55:10:31:40:63:e2:91:eb:51:
eb:99:ee:b9:1a:45:35:a2:c8:a7:47:45:8f:94:bd:
f3:ad:96:34:e5:30:dc:bb:3d:6d:5c:30:4a:ec:81:
13:80:e2:d0:fb:ab:32:a0:09:c2:fb:8f:1e:ad:8d:
5d:d0:26:2b:b3:a3:68:89:79:76:ed:17:76:1a:1d:
1e:b1:7d:28:50:4b:73:96:5a:42:a0:7f:a5:c1:87:
02:88:76:31:75:05:f9:64:6d:2a:3b:47:49:84:b9:
02:2f:76:3a:6e:9f:e8:f8:a4:d5:95:c5:47:82:88:
f8:33:ec:e5:7f:32:88:8c:0d:e3:1d:b3:58:43:dc:
e6:15:1d:45:6a:e6:6e:b7:9a:55:e3:2f:7a:30:de:
41:7d:35:7e:77:9e:86:15:5b:be:08:a5:28:34:68:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:D3:CD:07:89:58:97:8E:46:23:B5:2B:0A:CF:E6:FC:F1:14:91
X509v3 Authority Key Identifier:
keyid:6B:66:C5:3B:13:56:6D:01:C4:A8:93:AD:F1:30:BB:B4:FA:16:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2bFOxNWbQHEqJOt8TC7tPoWU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/6e5ff1-39f9-466b-827f-7bc268a0b517/1/a2bFOxNWbQHEqJOt8TC7tPoWU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c6:98:3f:47:53:b9:c4:80:49:cc:49:1b:f4:f0:95:02:5f:
69:ab:6b:43:58:79:ae:8c:24:eb:2c:67:bb:2d:07:c3:55:71:
79:a2:b5:d2:b3:f6:7a:ef:36:b7:46:5b:d6:c5:f7:73:7f:d0:
64:b6:13:cd:84:98:3f:c0:e7:5d:a9:f5:d2:66:01:95:8d:85:
fb:a2:86:42:43:50:ea:45:84:ad:fc:3f:c3:f6:00:cd:2b:ee:
2f:7e:65:28:73:be:4e:5f:c0:ca:2d:57:a1:21:c2:f1:3e:ee:
3d:81:86:ab:c6:8a:26:69:6d:9c:a4:f3:1c:f1:21:84:66:9e:
f3:ad:ab:52:f4:a6:e7:d7:ab:ef:e3:a5:97:a4:77:e5:9d:e9:
42:52:dd:49:66:02:4a:7e:b5:b2:26:00:2d:e9:f1:86:5d:bd:
a6:1b:a3:fc:34:71:5f:93:52:2d:c9:6f:44:a3:6d:07:17:6a:
60:bb:84:37:4b:17:1a:a5:80:57:7e:65:ff:93:85:cd:47:cd:
bb:fc:99:9e:77:ce:d0:89:b6:2c:88:ad:32:cd:92:68:c0:75:
72:24:4a:07:ae:6b:6d:ff:99:cc:bc:8a:7e:25:c8:ac:e2:54:
2d:c9:de:0c:33:d7:1e:68:bd:8e:61:c1:89:5d:81:08:e0:df:
ed:a4:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:25:03 2026 by rpki-client