Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File: AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier: yS4HlUtaBRq/Ak0h0jIRfRvkop37wbu+kSkqgedOBXE=
Subject key identifier: 69:EC:5C:4A:9F:FD:BF:D0:A3:2C:03:A2:31:BB:4A:5D:C4:7D:FF:9B
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer: /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial: 019F92EDC41E71BD52F6CB72ABA231971ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number: 10D9
Signing time: Fri 24 Jul 2026 07:01:23 +0000
Manifest this update: Fri 24 Jul 2026 07:01:23 +0000
Manifest next update: Sat 25 Jul 2026 07:01:23 +0000
Files and hashes: 1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: mYqnrLks2vp0iBuRCq6OwbUUzNE7V8VwQfS05hiUkmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c4:1e:71:bd:52:f6:cb:72:ab:a2:31:97:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
Validity
Not Before: Jul 24 07:01:23 2026 GMT
Not After : Jul 25 07:01:23 2026 GMT
Subject: CN=69ec5c4a9ffdbfd0a32c03a231bb4a5dc47dff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:c1:e5:bb:ae:39:d3:b7:83:90:4d:6a:0d:
8f:10:9d:5a:a5:1b:4f:71:fb:ca:35:88:5c:68:72:
a1:43:8a:72:3e:65:02:c8:0b:53:b6:66:4c:9d:5b:
cc:d5:a0:74:bf:f2:6e:b0:0b:af:8a:68:09:bc:e6:
00:af:47:d3:97:8c:82:1c:09:f1:c8:db:eb:88:78:
a4:61:1d:2e:94:5a:3c:90:9a:5f:7f:d3:d1:64:61:
c4:f1:71:8f:83:67:05:64:b5:b5:fc:27:ec:85:58:
5f:02:24:e7:36:16:35:ea:04:79:f4:c2:c2:5a:6d:
54:56:62:d3:2e:c4:03:d5:48:49:20:fb:32:fa:40:
1b:17:37:fc:f8:8c:cd:9e:69:65:22:68:d1:a4:b5:
5d:e7:89:1b:b4:59:cd:91:45:21:27:9a:00:b2:6f:
dc:b0:0c:7a:cf:1d:27:fa:10:2d:4a:ca:3d:92:41:
91:64:eb:b0:01:e3:95:3c:d1:44:b8:19:3b:9c:b7:
e5:ba:ba:3e:53:1f:cb:3e:c1:cb:99:d8:c6:02:55:
c3:31:c2:e2:55:25:c9:10:d2:72:e8:35:d8:1b:d6:
02:9c:60:d4:71:41:eb:40:9d:ad:a7:1b:bf:13:82:
72:45:13:81:ca:b4:82:4d:ce:11:31:44:b4:93:77:
46:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:5C:4A:9F:FD:BF:D0:A3:2C:03:A2:31:BB:4A:5D:C4:7D:FF:9B
X509v3 Authority Key Identifier:
keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:bc:9b:38:8d:0e:61:2a:df:e9:03:89:f0:3d:31:79:bb:
ea:f1:3f:ad:f9:64:1a:d4:24:59:24:67:79:d0:38:ea:03:02:
34:57:80:93:1f:74:bf:54:c9:68:e7:f2:41:d5:b0:58:08:75:
c5:c3:70:76:5d:26:66:24:11:4d:aa:59:79:11:b7:a5:a2:92:
19:e9:6d:bd:51:3e:ce:61:53:e5:d2:37:ce:4d:40:80:07:5b:
45:b9:64:3e:17:24:44:28:98:7b:b9:04:b9:67:05:9a:0f:75:
e8:a5:09:39:1d:35:43:15:29:5b:71:b6:80:10:b2:69:2b:2d:
c7:3e:2f:c7:a1:fd:b9:53:ab:44:5b:8b:4a:10:2c:b7:d8:65:
32:6b:7d:3e:19:8e:3e:6e:00:5b:d9:14:2f:06:2f:85:18:d9:
69:f8:1a:72:b0:cd:0d:35:e0:c6:66:0f:d5:4f:3a:22:8d:f1:
1a:45:d8:f1:1e:8f:86:8c:f8:99:2b:3c:a3:4a:e8:39:69:73:
ae:05:ec:95:06:f6:d6:cc:8e:27:d2:6c:36:f8:78:7f:fc:61:
26:90:89:29:2f:cd:c4:92:0e:c5:4f:af:32:74:37:95:14:47:
29:42:e8:47:a3:d1:c8:57:98:b9:6d:d7:f5:47:05:56:a2:2f:
ef:c0:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:03 2026 by rpki-client