Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
File: A2buGcyLQ0A-42qUouguQBnjUdE.mft (raw, json)
Hash identifier: LFI85DK2am5wvuNpyUk798GnpXptWzmg4D/XhNCnkY4=
Subject key identifier: 9B:CE:4C:21:CE:77:22:B4:63:E0:E4:07:6C:91:1C:66:75:03:94:1F
Authority key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Certificate issuer: /CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Certificate serial: 019F8FB4C1FF6280144970EC049C74687C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
Manifest number: 25
Signing time: Thu 23 Jul 2026 16:00:15 +0000
Manifest this update: Thu 23 Jul 2026 16:00:15 +0000
Manifest next update: Fri 24 Jul 2026 16:00:15 +0000
Files and hashes: 1: A2buGcyLQ0A-42qUouguQBnjUdE.crl (hash: dWkY1R3zhmhpIstIOC2l0WypZXXBBCn0jQ8sDM3CmXo=)
2: sbxckOpdRmsL3IOZkXvPw_lxG8g.roa (hash: +YSKpNz3HshHTq5k+BAAiNGsiW2WG4yJKy7VDrjUYAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:c1:ff:62:80:14:49:70:ec:04:9c:74:68:7c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Validity
Not Before: Jul 23 16:00:15 2026 GMT
Not After : Jul 24 16:00:15 2026 GMT
Subject: CN=9bce4c21ce7722b463e0e4076c911c667503941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:cd:4d:24:79:f2:29:62:4c:5d:af:c9:8b:
67:38:02:87:88:02:c8:9c:b1:0b:0d:b7:34:be:c5:
93:7d:de:c7:ef:d0:57:dd:55:90:61:45:10:e7:60:
9f:1b:6f:0f:5e:b6:55:7b:97:3d:89:dd:a8:c5:df:
53:85:33:f7:6e:0c:f6:c6:07:cf:f8:24:78:0f:a5:
5c:35:ab:36:f0:db:3a:e4:e5:f1:17:49:2d:d4:01:
bd:99:28:95:1c:9d:88:d8:9d:39:f7:a1:8a:e9:a6:
47:b3:21:66:29:51:15:32:c2:ef:b7:36:d3:cb:b8:
c2:1c:39:0b:ae:79:d7:d2:72:6f:26:41:9b:44:d8:
ae:cf:ec:13:ad:5a:cd:d6:23:2f:9b:09:23:6b:8b:
80:5e:aa:10:1e:06:9c:82:7d:29:69:2a:61:d5:bd:
4f:9e:b8:dd:8a:03:96:40:27:c1:72:6b:f4:02:53:
f5:53:23:e3:13:6b:7a:67:58:76:e3:4e:d3:61:aa:
d0:51:9d:72:38:01:9f:a6:6d:b5:e4:a2:67:e1:e0:
0b:83:82:d1:60:90:77:5c:66:0c:cf:93:9c:56:81:
25:1e:5f:79:2f:00:d0:47:1d:85:62:99:6c:05:ab:
e7:62:ed:0c:ab:91:91:aa:0d:5c:54:4e:8f:9e:5e:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CE:4C:21:CE:77:22:B4:63:E0:E4:07:6C:91:1C:66:75:03:94:1F
X509v3 Authority Key Identifier:
keyid:03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ce:df:91:c9:5e:3b:9e:00:bc:78:a5:db:4d:6e:60:e7:92:
b6:44:2d:75:83:46:c2:1b:7e:f8:cb:b5:97:74:81:14:eb:4c:
a5:00:39:0b:37:4c:e8:a3:7f:86:a4:8f:a3:7c:74:ec:a9:fa:
9b:67:74:c7:3e:9d:5e:27:cf:69:23:6e:61:b5:4a:e2:d9:9e:
e7:be:57:f2:14:b7:ba:4e:e3:7b:bf:71:54:f4:62:38:0e:b8:
1e:45:fb:2b:0c:56:aa:84:f5:34:87:b7:68:80:7c:f0:62:23:
d9:22:3b:7e:d1:c9:ae:c7:d1:7f:f4:c0:8d:b6:a0:a8:0f:40:
19:b2:c5:25:8f:76:5f:76:0a:37:49:d6:b2:e7:06:a1:99:26:
c2:bd:ca:4d:9e:1f:b1:9c:02:34:f7:2f:d9:41:ff:27:c2:a9:
54:c0:f2:9b:04:67:27:e0:82:d8:88:4b:61:ca:26:97:5a:f3:
5c:6d:a8:b8:8d:ae:21:f6:a0:a6:59:1f:05:ce:7a:b1:22:fd:
b0:1c:bb:31:4e:1a:52:25:1d:ab:22:88:70:05:e6:d0:59:97:
f0:69:c4:b8:a2:05:5f:92:18:ab:f4:49:54:c8:fe:57:3f:6f:
7b:16:8a:a9:8f:20:7c:f7:68:0a:af:51:3b:63:99:1b:1f:14:
ae:52:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:24 2026 by rpki-client