Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: G9c2HGzAZYDfvIpUK8V+9oxsb37BcxxAMqIFZm7lRFg=
Subject key identifier: 0C:80:FF:90:CB:59:C3:F9:AA:97:08:12:F4:2F:AF:8A:4C:F3:5F:FB
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 019F946D842E2E27ADF9058399FE5F91AED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 14:00:32 +0000
Manifest this update: Fri 24 Jul 2026 14:00:32 +0000
Manifest next update: Sat 25 Jul 2026 14:00:32 +0000
Files and hashes: 1: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: 21Yhxv17rc5RXoGTgKArDcMCUa5G7oHiG2JjhuYEdSk=)
2: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (hash: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:84:2e:2e:27:ad:f9:05:83:99:fe:5f:91:ae:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Jul 24 14:00:32 2026 GMT
Not After : Jul 25 14:00:32 2026 GMT
Subject: CN=0c80ff90cb59c3f9aa970812f42faf8a4cf35ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:68:64:b2:51:d0:27:62:a2:e6:de:b2:68:
ae:9c:80:e9:d2:2d:70:d0:34:c9:49:f6:31:e4:71:
6a:43:e7:2b:ee:bd:eb:aa:02:61:6c:32:51:ea:96:
51:1c:37:f9:fb:1e:e8:8d:af:8d:2d:68:53:85:f6:
99:ba:e8:11:3d:bb:90:a3:07:b8:ba:ec:92:61:9b:
34:f2:86:b2:4d:3f:38:18:a1:63:63:71:f5:ee:8b:
42:a9:cb:38:20:9b:73:bf:ae:7b:4e:b3:10:2f:d6:
36:7d:b7:7d:80:fe:b3:0a:1a:fd:41:5f:92:47:c4:
ec:92:1d:b9:b9:d1:c0:ee:2e:3b:69:41:4d:c1:5d:
a2:5d:0d:59:d3:04:47:b6:19:e7:f8:7a:10:5d:50:
68:cd:5e:c7:83:72:c9:a3:56:d8:42:a9:3f:62:ea:
d7:19:6a:4f:b6:cf:72:f3:6e:c8:98:24:af:e7:c5:
5f:4d:7a:62:66:e9:7b:f8:66:7d:b4:82:aa:7b:a3:
50:86:54:55:03:1d:b6:ac:5a:19:3d:af:56:87:97:
17:e8:0e:05:f7:dc:b2:a3:7b:1b:65:8a:35:c3:3f:
b7:9b:29:08:b4:7f:a9:3a:7c:71:2f:23:03:ab:1c:
2c:8c:3b:6a:48:ec:e9:9f:4c:0f:a9:ad:39:1f:99:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:FF:90:CB:59:C3:F9:AA:97:08:12:F4:2F:AF:8A:4C:F3:5F:FB
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:76:fc:ac:33:35:8b:bd:77:8e:9a:fa:05:97:d9:ed:27:19:
46:15:91:8f:4e:cd:c1:f1:90:10:b0:42:f1:74:27:45:ef:34:
4e:9a:a8:9a:ef:0d:c1:fe:8a:1f:49:77:58:d2:89:39:b2:51:
64:29:0a:bc:a2:6f:f8:4c:d8:71:b6:c6:ed:fd:d5:e8:49:63:
26:dd:da:87:7d:18:b2:0a:d2:52:f7:a9:da:23:1b:fe:42:63:
6f:b5:20:48:46:04:53:73:c7:db:ec:c2:49:60:d1:16:71:fa:
f0:70:c2:08:b4:3d:e8:0e:d7:c0:cd:2f:83:e5:93:99:20:8a:
39:d5:23:cd:00:72:bc:6c:9e:f3:2a:af:2c:22:2d:de:69:a1:
6f:9b:f6:78:5d:e1:b3:34:69:5c:31:fb:3b:d3:8e:2a:39:65:
3c:03:b2:36:e4:5a:da:a4:88:1b:26:aa:60:13:d8:4b:6a:a4:
c0:6c:2d:aa:d7:7e:18:c5:59:64:61:c0:d6:eb:21:1c:65:d0:
44:a2:be:ff:84:27:d5:48:38:fe:29:f9:17:7a:fe:8c:f3:d6:
8f:0e:5b:00:dd:ff:2e:b4:52:ec:7a:9f:e1:7a:6a:4b:af:21:
f4:44:31:6d:49:43:d6:b9:8d:ce:ec:59:b6:60:27:52:9b:da:
b0:0e:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:01 2026 by rpki-client