Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: qdCKRVI+mdmkrlIk3jAjq5tpDuzsii4jtSY8TI9080Y=
Subject key identifier: B3:1E:A5:B9:01:60:46:82:FA:B5:CA:90:E6:F1:92:C1:2C:71:C6:FE
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019F9091808D40AF26B8E62BB1BB349C52EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 0261
Signing time: Thu 23 Jul 2026 20:01:22 +0000
Manifest this update: Thu 23 Jul 2026 20:01:22 +0000
Manifest next update: Fri 24 Jul 2026 20:01:22 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: okxbLrB5f0FG63fkdWzqMXtA3mywXV4F1C7p/Ay6ONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:80:8d:40:af:26:b8:e6:2b:b1:bb:34:9c:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Jul 23 20:01:22 2026 GMT
Not After : Jul 24 20:01:22 2026 GMT
Subject: CN=b31ea5b901604682fab5ca90e6f192c12c71c6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:6c:21:c2:7e:17:27:d2:da:44:23:e2:11:
3a:77:fb:b1:ab:22:5c:8f:eb:f6:4c:a6:c1:f3:23:
ee:59:80:3e:64:a1:6c:72:2a:91:a1:71:a2:4c:a0:
d0:e2:53:04:13:4a:fa:b7:73:af:32:33:eb:0e:e8:
29:aa:02:2b:6e:78:4b:b5:61:8e:1c:4a:ea:a9:05:
3a:b3:c1:da:24:2c:b6:0a:14:04:3d:6e:4c:9b:0e:
d1:45:46:25:0c:24:ae:03:37:fd:e2:32:36:af:10:
2a:82:1c:22:c7:16:01:41:32:b1:77:67:6e:99:36:
74:f3:a6:5e:b7:fa:e6:9b:c6:e4:e7:0d:0a:8d:da:
48:00:a8:2a:48:fe:df:6b:19:fe:71:36:6a:d9:1e:
a0:77:71:93:bf:7f:24:4d:e3:17:8c:a4:5f:76:89:
cd:00:61:80:97:5d:6e:72:8a:d6:14:b9:b4:c9:f6:
00:1d:12:eb:7d:b0:bc:28:f2:09:8d:43:6d:b3:62:
84:ab:e8:12:7a:29:72:a0:e7:34:5f:95:ee:90:28:
b2:d5:28:18:e1:4d:07:23:a4:ca:9b:94:ca:d3:f4:
fc:16:57:63:d4:37:a2:fc:fc:16:df:73:91:e6:b3:
a6:c9:2c:cf:9a:b7:a5:3a:97:21:f1:aa:56:77:f4:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:A5:B9:01:60:46:82:FA:B5:CA:90:E6:F1:92:C1:2C:71:C6:FE
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:d5:6b:b9:4a:19:9d:98:c9:f2:36:07:d6:17:62:bb:f0:75:
ed:bc:50:7a:e0:87:cf:94:ff:fa:5e:52:58:78:4e:c8:95:91:
41:d7:5b:27:f7:6f:12:d8:ee:10:93:b1:9f:8e:54:b9:59:08:
d0:80:bd:40:d7:67:d2:d4:b3:61:ec:d3:5a:f6:fc:97:e8:42:
23:ba:f6:83:8b:16:20:68:21:97:0d:34:a3:7e:c3:9b:86:9b:
80:6b:b3:86:fd:e5:be:dc:51:72:29:02:14:e6:68:48:5e:d4:
3d:40:91:37:6f:34:55:b7:27:5c:f3:9c:8e:fb:b5:56:f7:65:
57:c0:ae:1f:88:17:b3:31:62:af:1b:38:de:59:b4:8b:3d:bd:
a0:1f:a5:82:f5:b8:4c:db:62:5c:0d:2f:74:ee:75:e0:c8:38:
62:b0:e2:bc:1c:bf:ee:40:3b:51:ef:4e:1f:40:32:0f:05:01:
68:90:d9:20:9b:10:ec:2b:09:9a:f4:c4:4d:f4:21:2c:28:0b:
17:9b:3d:52:ab:04:c9:5c:c0:56:db:df:13:44:ec:f9:51:bd:
43:4e:07:c2:fc:12:dd:79:7d:3d:98:45:f0:84:7e:e0:c5:1c:
b2:94:a8:63:16:ff:17:aa:97:3f:b9:5d:ae:a8:2b:65:83:0d:
26:08:d3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:53:53 2026 by rpki-client