Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft (raw, json)
Hash identifier: 7cyff5Lnv8GKzjzYiJaHMFwwuzHDec6SgoAS8llC87M=
Subject key identifier: 42:89:F2:63:5B:A0:56:EC:A2:89:27:3B:0A:BD:BC:28:69:98:08:95
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 019F90230084312DE7ADF7F4AF1208F4F6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
Manifest number: 0FCE
Signing time: Thu 23 Jul 2026 18:00:40 +0000
Manifest this update: Thu 23 Jul 2026 18:00:40 +0000
Manifest next update: Fri 24 Jul 2026 18:00:40 +0000
Files and hashes: 1: Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl (hash: pbrNCuBmKahVlAb3VnQMc1vFn2N4h2yH/j0oiW+X4Eg=)
2: wx4jf3r0v_RD4WGbwjNb9_66YeA.roa (hash: Yg61lLQnPGGlaDhOZEVebkyWouHjvzVXcfasCV97MNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:00:84:31:2d:e7:ad:f7:f4:af:12:08:f4:f6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jul 23 18:00:40 2026 GMT
Not After : Jul 24 18:00:40 2026 GMT
Subject: CN=4289f2635ba056eca289273b0abdbc2869980895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:ff:59:84:74:80:1e:ac:ba:be:66:3e:06:
94:ab:45:3d:4e:d8:bb:f5:6b:fc:64:37:b7:10:4e:
ea:5f:7f:6a:2b:bf:55:bf:66:70:06:33:8c:f5:b8:
5f:e7:cc:14:76:5b:e5:38:89:15:ab:e9:fb:55:72:
dc:c9:99:2e:c1:0e:0d:87:f1:b7:f1:05:d8:51:17:
fb:a7:4b:3b:dc:82:ac:16:45:07:dc:6e:ce:13:c5:
81:b3:35:78:f7:01:3c:6f:72:2b:50:bd:cc:f7:e2:
db:81:d3:76:c7:1a:46:c7:7e:f3:73:60:83:3e:cf:
f9:33:3b:72:3d:db:3d:b9:fd:4c:14:a8:da:73:20:
43:d2:fb:d0:7f:2f:db:b3:0c:c7:cc:72:f0:ba:40:
69:93:6b:f1:a3:34:c6:df:9d:00:fa:c3:0f:8a:a4:
f1:b3:72:6b:c3:03:45:ac:e3:da:c5:ea:0f:55:11:
48:94:d4:ae:e0:86:9a:44:40:e6:b0:86:5e:44:af:
f3:a7:64:cd:9b:5f:d1:78:4e:8f:23:88:74:fe:f8:
54:43:e0:45:77:2e:87:3a:fe:2b:25:1f:7b:20:33:
98:db:a5:29:4c:a6:1f:28:8f:a0:e8:a4:1f:bf:3a:
53:3d:d2:ac:37:19:e1:c9:68:de:48:8f:5b:41:4c:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:89:F2:63:5B:A0:56:EC:A2:89:27:3B:0A:BD:BC:28:69:98:08:95
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bd:41:d8:3a:0e:7e:b0:45:e0:8e:26:19:c7:bf:e4:a6:99:
f5:a5:8f:52:15:ed:72:b3:cb:8e:50:33:cf:a7:49:de:c7:95:
da:b6:f6:9c:23:40:8b:4a:b9:7d:48:cb:28:d1:95:ce:7b:bd:
61:2f:ae:1e:64:41:9a:ff:20:29:34:96:e1:bf:a9:48:a6:94:
35:01:bf:d0:bc:12:e5:37:8a:0f:e4:40:cc:08:92:2b:02:81:
d9:1e:0b:2a:63:79:14:d9:c5:0e:90:81:48:08:e4:41:7f:a3:
34:b0:15:23:3e:5d:89:56:66:f8:f9:20:3e:ff:18:af:2a:68:
d1:f6:40:33:e5:bf:04:65:08:1b:f7:60:64:47:ec:37:b9:72:
d0:51:a7:3f:a1:f2:07:3e:8e:22:5f:a9:6d:f4:b1:a2:5b:b1:
39:91:ab:90:72:fe:a0:66:9f:da:a7:e2:b2:41:de:51:ec:07:
b6:fc:78:b9:3f:7d:57:b1:db:f0:52:44:3d:33:57:3e:a9:06:
81:72:ee:6f:47:48:28:7c:04:fa:02:8c:f1:b3:60:65:f8:1c:
43:8f:ae:da:c6:0b:66:3a:d9:ec:e5:e3:5d:3a:d4:32:b6:c5:
49:2e:dd:03:ed:72:63:30:da:d0:65:cc:f0:49:8e:a1:d1:33:
2a:a6:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:43 2026 by rpki-client