Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
File: A2loTGfKqZ_8AYS-rMrw6oipISk.mft (raw, json)
Hash identifier: FOoNGM+ASq9aeLJ9xinAWyx9ZQP4/t++QrY8g8aVdbY=
Subject key identifier: 26:1E:88:20:19:A0:76:6E:AE:27:DE:5E:BA:1E:12:56:1B:02:09:31
Authority key identifier: 03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
Certificate issuer: /CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Certificate serial: 019F935B9B86BFCB7E2A8E494E0AE6CFCD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
Manifest number: 0C9E
Signing time: Fri 24 Jul 2026 09:01:22 +0000
Manifest this update: Fri 24 Jul 2026 09:01:22 +0000
Manifest next update: Sat 25 Jul 2026 09:01:22 +0000
Files and hashes: 1: A2loTGfKqZ_8AYS-rMrw6oipISk.crl (hash: U4kUE+QYcrsq49FXUA5c/CHifKsfyZErj7qs8woUo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:9b:86:bf:cb:7e:2a:8e:49:4e:0a:e6:cf:cd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0369684c67caa99ffc0184beaccaf0ea88a92129
Validity
Not Before: Jul 24 09:01:22 2026 GMT
Not After : Jul 25 09:01:22 2026 GMT
Subject: CN=261e882019a0766eae27de5eba1e12561b020931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:dd:54:c9:52:3f:35:04:1d:2e:35:b3:40:
96:9f:68:05:0d:c4:af:d7:4e:73:c9:69:be:51:53:
35:16:d1:29:ff:55:6b:91:1a:6c:4b:a3:3b:9b:e5:
53:5b:ea:04:ad:7f:29:d0:67:aa:3a:8b:74:39:c7:
8b:72:80:85:14:a2:37:21:a3:4f:20:8d:7b:44:47:
f3:11:2e:cc:3b:1d:82:46:97:48:b4:61:6a:67:bb:
e1:e3:0e:a8:20:ce:81:8b:99:3f:da:a3:3a:00:f9:
a7:5e:01:77:a9:9a:22:ec:d9:37:77:c3:eb:25:2a:
b8:41:92:91:6a:c5:d6:7f:57:85:d1:da:1b:aa:00:
d0:16:4e:91:6d:02:cd:ca:c5:a7:11:9f:64:61:3f:
66:f7:9d:74:26:d8:5d:af:23:4c:65:5c:78:b6:f8:
43:b4:cb:03:25:44:90:d6:6c:d3:6b:fd:5f:de:86:
af:17:48:ef:fd:7e:ae:d1:3e:b4:6f:fd:ca:5b:84:
f8:e2:fd:53:2d:84:0c:8b:60:87:d9:07:6b:cb:3e:
f8:be:02:c3:ee:8f:37:0f:60:06:6c:1e:d2:43:ad:
dc:4f:8c:7b:e1:31:bb:4c:79:bd:b6:7b:ff:d4:6a:
ca:45:43:24:54:d1:ee:55:16:d1:1f:0c:bc:40:98:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1E:88:20:19:A0:76:6E:AE:27:DE:5E:BA:1E:12:56:1B:02:09:31
X509v3 Authority Key Identifier:
keyid:03:69:68:4C:67:CA:A9:9F:FC:01:84:BE:AC:CA:F0:EA:88:A9:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2loTGfKqZ_8AYS-rMrw6oipISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0b3621-80d3-4796-8735-157562499908/1/A2loTGfKqZ_8AYS-rMrw6oipISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f9:08:74:02:43:d3:32:60:3c:7f:e7:d0:12:64:49:a6:d1:
5e:3d:62:57:87:11:c6:fc:0a:ca:a6:e0:aa:f0:2f:b9:77:cb:
e3:29:59:e9:41:89:5f:c8:99:0c:61:f1:70:d3:f2:78:d5:f1:
16:47:66:ea:9e:cb:70:ab:ad:cf:fa:d8:95:52:a2:3b:a2:21:
c4:58:e6:86:4a:da:d4:60:a2:79:ab:46:61:5e:fe:e8:6f:1b:
8c:bd:39:16:21:85:2f:59:de:31:f1:3e:14:71:c5:7c:92:93:
36:75:6d:ea:f6:88:cf:f5:0c:84:d2:7e:8f:a3:81:24:a3:14:
a2:0b:e7:31:21:a3:c4:93:75:53:2e:84:9d:b5:f1:a5:34:84:
9c:d7:9d:81:bf:3b:d3:94:ae:0e:5d:de:f0:a9:67:fb:8a:d2:
1a:67:d7:be:90:98:51:c2:52:a8:36:11:88:09:83:4d:af:b9:
ca:b7:7b:17:49:80:d8:d2:0c:a7:e3:e7:eb:1e:49:00:6e:95:
f6:ef:1f:1f:f6:dd:89:a8:1d:e0:0d:89:ec:3c:ef:e6:13:25:
17:72:2a:c9:2e:de:ca:11:dc:37:5d:69:6f:fd:e5:b0:92:9d:
9f:c5:29:30:8b:b0:51:07:ea:e8:86:2a:88:c0:f2:55:b0:6a:
8c:6b:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:42:26 2026 by rpki-client