Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
File: A15Shd7cNatjUnBIs2buVTgGzgQ.mft (raw, json)
Hash identifier: VwC63aWhbMIJVvcWkPOi7sC4oB6tRocowpTdF7OzUOk=
Subject key identifier: 68:BB:F0:FB:A3:C7:E2:9D:0B:2B:09:AF:67:10:FE:B6:12:31:95:E2
Authority key identifier: 03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
Certificate issuer: /CN=035e5285dedc35ab63527048b366ee553806ce04
Certificate serial: 019F8FECC6B9C972134914F85001FC17FC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 17:01:26 +0000
Manifest this update: Thu 23 Jul 2026 17:01:26 +0000
Manifest next update: Fri 24 Jul 2026 17:01:26 +0000
Files and hashes: 1: 5e54oDyTiKHtp31vWJTP5XM-iV8.roa (hash: CoEKmyPCbM+6ZClHX32yt6+iaogZBQ0nDalNysMTb0w=)
2: A15Shd7cNatjUnBIs2buVTgGzgQ.crl (hash: BqP9y+7MYPRQzAtn3Bx9aOeejuvgyyRw7CpgmqTwOV8=)
3: a9-K1ivOCvz-9NS5y-m9N_wQbLg.roa (hash: AgOLgLCoRLeLBpsFxIaxdPidPtjKcQxD7cSUkwZOIgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:c6:b9:c9:72:13:49:14:f8:50:01:fc:17:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035e5285dedc35ab63527048b366ee553806ce04
Validity
Not Before: Jul 23 17:01:26 2026 GMT
Not After : Jul 24 17:01:26 2026 GMT
Subject: CN=68bbf0fba3c7e29d0b2b09af6710feb6123195e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:6a:bd:3a:bc:4a:ab:07:67:62:47:79:6e:
7f:ea:5f:51:24:62:ba:94:32:4b:43:fd:56:32:57:
d1:b2:e7:cc:6a:c7:eb:b3:7c:7e:21:44:2d:37:36:
f5:1a:07:23:51:31:da:37:89:71:28:b8:f1:22:25:
6e:05:50:07:07:38:dc:5c:52:d5:49:a2:f3:c8:93:
7d:2b:c4:60:32:dd:98:ec:49:8a:74:12:23:af:d9:
ec:ee:df:c3:41:20:0f:9d:e0:9f:4a:35:28:fd:73:
c1:b9:ba:61:8c:ad:3c:68:8e:f7:63:99:26:d9:b8:
e7:61:56:c3:00:17:23:1b:73:03:e5:7b:ad:c8:2b:
7a:3e:e7:a6:50:74:25:29:62:82:57:50:86:c1:f0:
70:5c:55:14:e4:30:a5:9a:32:35:e5:12:c7:7f:7d:
d3:4e:d1:c9:db:cd:77:2f:f7:0e:cc:7a:4e:ea:4c:
eb:5d:4b:39:34:44:43:cc:17:c0:00:46:cb:8b:2a:
87:9d:43:43:0b:d1:6d:25:ed:58:03:81:c5:ad:72:
34:d4:94:fc:72:84:07:11:50:bb:05:2a:74:0e:fd:
c4:9b:18:bf:ad:86:30:39:58:a7:81:33:21:e7:d9:
79:c5:54:1a:31:0f:06:8d:d8:91:7a:9c:81:45:f8:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BB:F0:FB:A3:C7:E2:9D:0B:2B:09:AF:67:10:FE:B6:12:31:95:E2
X509v3 Authority Key Identifier:
keyid:03:5E:52:85:DE:DC:35:AB:63:52:70:48:B3:66:EE:55:38:06:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A15Shd7cNatjUnBIs2buVTgGzgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f1944b-101a-4181-a36b-2c2707736fdb/1/A15Shd7cNatjUnBIs2buVTgGzgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:89:74:b6:0f:c6:8c:60:d2:c4:13:1a:73:6b:af:15:f5:
f4:61:11:4c:e7:83:79:ec:7c:06:73:9b:4e:93:47:c7:83:2e:
1f:fa:f7:35:f8:62:99:d9:02:96:78:ed:61:88:7d:c5:69:28:
86:46:5f:0e:d4:a4:72:03:9f:0a:fd:fa:cf:46:64:37:4e:fb:
af:ed:97:79:f8:6a:df:14:ff:63:f3:f8:5e:4c:f8:39:24:f6:
71:f8:00:e6:1e:26:18:24:62:e7:a5:3b:a5:60:be:b9:03:75:
74:0b:69:d2:07:43:16:3a:de:e5:2b:69:5c:15:05:b5:4c:f8:
28:07:ef:fd:fa:43:99:55:63:89:d7:46:20:ad:99:48:cd:5c:
d2:ce:66:ce:13:25:1e:aa:ac:8a:5e:17:a4:25:b7:7c:41:a6:
f0:d9:3f:bf:19:b1:04:41:e0:0f:0c:24:ab:1e:01:ea:52:11:
0d:cf:55:61:d5:ee:44:6e:a5:99:c2:e1:98:2d:a3:c9:f7:f9:
7c:0f:b5:eb:58:71:67:66:86:66:f4:52:96:63:e6:6b:c5:ec:
95:43:5b:bf:2e:6d:e4:14:5d:8c:a9:67:17:72:ed:4c:67:bd:
f0:7a:97:c4:07:e0:7d:1a:b8:05:1f:ab:e9:73:75:60:c8:25:
26:18:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:21 2026 by rpki-client