Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: Ar7qmJ3vwnc615QH8ejxpampzJg5FEV+ZcPwzkGU6Cc=
Subject key identifier: EF:FE:00:8D:5D:B7:F1:BC:58:66:90:C0:52:F0:EF:23:88:CF:39:5E
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 019F93C8F9B461EE603F55AD81FC4D174F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 11:00:49 +0000
Manifest this update: Fri 24 Jul 2026 11:00:49 +0000
Manifest next update: Sat 25 Jul 2026 11:00:49 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: eayLV+3zbFNsOaATIEE+c0BfBznV7EVey16vlu28tyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:f9:b4:61:ee:60:3f:55:ad:81:fc:4d:17:4f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jul 24 11:00:49 2026 GMT
Not After : Jul 25 11:00:49 2026 GMT
Subject: CN=effe008d5db7f1bc586690c052f0ef2388cf395e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:c8:22:00:56:e6:b3:82:86:63:c5:d1:c1:
c7:22:6f:e7:a9:91:12:71:be:b4:08:61:b6:de:9c:
ad:3b:f1:8c:fd:4b:e7:d8:c8:17:5d:85:b3:f3:25:
9f:34:e3:5a:e0:04:16:05:73:8a:ef:9f:66:ea:43:
f7:72:a5:f7:b4:8d:aa:01:27:da:18:1f:b7:86:8b:
35:e8:5e:7c:c9:48:2e:ce:a0:40:85:c3:a9:66:0b:
eb:6e:f7:a7:f3:f4:77:27:99:93:43:3c:bc:28:b9:
76:bd:9e:6b:b7:31:53:a9:86:d6:2b:d3:6c:20:70:
d5:68:0b:b1:d4:c1:8b:8d:38:38:c6:8b:eb:47:ef:
dd:57:2b:a6:7d:d5:46:5b:37:5e:24:f7:7e:7c:20:
fd:bb:0f:32:5d:e9:ed:dd:c2:a4:95:1d:c6:cd:33:
f0:43:01:f2:a0:d4:2d:26:31:f4:59:1e:a8:0a:b1:
9a:ec:2f:2f:2f:a4:1c:ec:62:71:bd:86:6e:53:43:
f9:f8:6f:4a:33:35:e7:7b:a5:64:2f:36:4c:64:a7:
31:4e:f0:c2:64:66:7d:bd:a4:51:66:9e:17:5e:26:
92:67:4e:0f:33:04:b9:a7:de:69:0c:8b:f7:86:14:
9c:c8:a4:f4:73:39:7e:0d:2c:70:96:08:a0:b7:50:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FE:00:8D:5D:B7:F1:BC:58:66:90:C0:52:F0:EF:23:88:CF:39:5E
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:b0:b4:47:37:51:a7:04:1d:0a:42:cc:03:7f:f4:63:17:
3e:84:d2:6f:0b:10:5a:2c:b3:3a:b1:15:e5:70:fd:92:77:b8:
f7:b3:96:53:11:45:b8:d9:5c:0f:3e:5a:f6:17:e5:fc:69:5d:
ea:ce:bb:25:51:c7:10:13:19:51:b1:56:a0:7c:34:d6:a7:2d:
4e:77:89:4e:39:2e:af:57:ea:cd:5e:47:f5:40:0e:1a:dd:8f:
9d:1b:ca:93:4b:5c:23:cc:d4:9c:02:08:ef:e8:21:76:7a:93:
a8:f6:a9:90:e6:23:a6:14:b2:c9:55:21:1a:45:c1:cf:80:75:
59:84:9b:29:7c:6d:b8:99:4d:53:27:69:4e:e9:fb:09:db:f9:
45:95:6f:9b:62:1b:67:c1:95:da:c4:0f:70:81:c7:a8:d8:13:
66:1d:59:89:fc:d4:90:06:ce:05:75:78:6d:a2:d1:be:b6:70:
63:90:28:e1:ea:61:02:c6:20:a3:18:05:76:b2:88:ce:83:90:
e0:e5:76:42:d1:0c:2f:b8:1e:56:36:e2:ee:1c:24:64:8f:2c:
cb:77:5e:6b:46:71:3e:27:5c:03:38:f1:b7:18:d7:7f:d7:cc:
54:66:85:1f:6c:97:8d:b5:9b:a3:5f:20:8f:ed:07:a9:b9:a8:
ff:e9:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:32 2026 by rpki-client