Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
File: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft (raw, json)
Hash identifier: zZWSB12fJl3uPsmkO3m2zm4lZHoxuR70STxtM/r4PSk=
Subject key identifier: 1D:43:58:ED:92:F7:C4:D3:C2:3D:BA:21:73:C6:50:DD:3E:E5:71:F3
Authority key identifier: 02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57
Certificate issuer: /CN=023d0542210850cbc6639638cf7fffbcfbaf1e57
Certificate serial: 019F92EDA67B2C7FB9FA34B96C2AE74301AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
Manifest number: 01BA
Signing time: Fri 24 Jul 2026 07:01:15 +0000
Manifest this update: Fri 24 Jul 2026 07:01:15 +0000
Manifest next update: Sat 25 Jul 2026 07:01:15 +0000
Files and hashes: 1: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl (hash: O7RkFRQNAzGeFB57Z6Q4W31PpCg1LRidnuHGbKUu6ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:a6:7b:2c:7f:b9:fa:34:b9:6c:2a:e7:43:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023d0542210850cbc6639638cf7fffbcfbaf1e57
Validity
Not Before: Jul 24 07:01:15 2026 GMT
Not After : Jul 25 07:01:15 2026 GMT
Subject: CN=1d4358ed92f7c4d3c23dba2173c650dd3ee571f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:f6:59:bf:a9:8d:32:4b:d9:e8:76:c5:2d:
df:c2:c6:16:47:55:ec:f6:bf:8e:f7:64:85:02:61:
2b:f1:3e:ba:5a:5e:88:b0:9a:70:86:48:73:61:1b:
c7:24:61:27:62:7c:78:79:3f:7e:37:bc:21:e6:8d:
82:7e:29:ee:57:55:d5:ca:7a:2e:4c:69:1b:89:bd:
9a:91:e7:4d:17:c2:e1:42:67:c6:47:22:8f:2f:9e:
72:96:70:6a:53:10:51:d7:5d:79:d2:79:cc:06:aa:
e0:84:0d:16:ee:52:8b:6e:74:ab:f5:c1:c5:10:0f:
72:95:61:2b:34:ee:6a:a8:83:af:31:3b:56:17:19:
5c:15:56:7d:b1:62:37:bc:bb:b4:c1:c2:6f:08:0a:
48:29:81:08:fa:39:35:80:6c:3f:40:7c:61:87:b4:
4f:be:71:16:21:48:53:c8:df:f1:08:19:5a:be:90:
56:64:7e:4c:95:77:db:40:8a:8b:78:ac:50:99:af:
65:03:4f:36:ab:bf:7e:6a:e2:cd:59:10:83:e6:d2:
8c:58:4e:3d:0e:0b:67:35:64:ff:d5:f9:0d:9a:6d:
d8:be:4f:60:f9:8a:b5:be:02:6a:a4:bd:b1:bf:3a:
91:16:a7:47:31:22:29:df:b3:1b:fa:d5:b5:8c:a2:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:58:ED:92:F7:C4:D3:C2:3D:BA:21:73:C6:50:DD:3E:E5:71:F3
X509v3 Authority Key Identifier:
keyid:02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:20:37:c3:1f:c0:62:5b:aa:ee:60:26:60:aa:04:ba:1a:cb:
9e:22:88:b3:08:55:eb:86:b9:18:5f:c1:f0:e9:b3:20:5d:ad:
6a:bf:e2:e0:f2:1e:aa:b3:af:92:48:95:7a:3c:ab:f0:2c:42:
2a:0f:31:8d:05:7b:3d:2f:21:ab:b6:a0:18:da:26:c0:bd:57:
25:72:ab:86:42:65:ce:83:dc:01:5c:0f:70:b2:cc:5b:a0:13:
5f:23:8e:6e:a0:1f:f0:46:d6:b0:60:94:f4:7a:bc:4b:e3:89:
de:3b:ab:74:06:60:1f:ae:a6:14:79:91:82:39:c5:00:c4:09:
4a:6c:09:8d:cc:ce:f5:f0:bb:e9:a6:6e:dd:fa:4e:7c:d5:b2:
06:09:39:05:a2:86:4e:19:0f:66:41:06:d2:71:76:89:1b:63:
d2:23:20:6a:cb:55:88:a2:94:5d:30:c1:85:58:72:e8:bb:06:
3f:83:4e:c0:d4:44:d4:02:fb:51:b0:aa:29:d0:ff:c3:e4:e7:
48:e3:68:2e:80:ae:11:8e:cd:bb:a9:ee:18:9c:23:89:fa:8a:
7d:31:36:7a:79:95:d5:ef:71:73:29:c7:d9:0b:84:43:01:08:
d2:be:ed:14:35:b2:54:8b:7b:af:ef:83:88:53:d1:49:28:0a:
81:d0:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:59:46 2026 by rpki-client