Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
File: AIZWyhRKM5MRaFzl-oq_HScFoeI.mft (raw, json)
Hash identifier: H4kjeihrnPBMwgsF/stQsDwCMf2qDO1ozHHrYRL/UfQ=
Subject key identifier: 32:F6:05:BA:97:48:0D:35:25:96:11:9C:D7:04:DD:2C:A7:77:EB:27
Authority key identifier: 00:86:56:CA:14:4A:33:93:11:68:5C:E5:FA:8A:BF:1D:27:05:A1:E2
Certificate issuer: /CN=008656ca144a339311685ce5fa8abf1d2705a1e2
Certificate serial: 019F8FEC5D2C8ADEB23EF857FDC843382C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIZWyhRKM5MRaFzl-oq_HScFoeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
Manifest number: AC
Signing time: Thu 23 Jul 2026 17:00:59 +0000
Manifest this update: Thu 23 Jul 2026 17:00:59 +0000
Manifest next update: Fri 24 Jul 2026 17:00:59 +0000
Files and hashes: 1: AIZWyhRKM5MRaFzl-oq_HScFoeI.crl (hash: pXZm7jCloJ73tuRVIw4re/kLT3SVs4OC8067+/ZqCYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIZWyhRKM5MRaFzl-oq_HScFoeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:5d:2c:8a:de:b2:3e:f8:57:fd:c8:43:38:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=008656ca144a339311685ce5fa8abf1d2705a1e2
Validity
Not Before: Jul 23 17:00:59 2026 GMT
Not After : Jul 24 17:00:59 2026 GMT
Subject: CN=32f605ba97480d352596119cd704dd2ca777eb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:3e:13:b1:71:c0:0b:06:11:67:af:72:e4:
c2:30:60:ba:67:39:f8:08:b6:15:79:66:0e:e6:ae:
ec:73:e9:16:82:e3:0b:70:4c:e1:5f:80:70:6d:20:
bb:2a:9e:f1:89:ef:38:3a:14:a9:f9:dc:94:f0:dd:
7a:54:89:11:51:83:81:a6:8c:04:f2:0f:b7:bb:f1:
48:c1:06:f3:2a:31:c3:de:0b:7a:89:9e:13:f3:ea:
e2:78:5d:58:c5:e9:d6:00:25:1f:b7:13:88:78:74:
51:d9:ba:7b:b2:c3:e2:dc:75:9b:46:9b:cf:ae:30:
c9:7f:26:da:18:ad:61:00:fd:5e:a1:3a:aa:be:41:
81:87:d6:b8:fd:e3:14:93:52:4e:43:40:4a:14:9f:
af:9d:c2:12:8d:30:6a:83:2a:2d:12:72:6b:81:21:
6d:91:de:50:cd:75:96:81:73:cf:f7:08:d9:2c:c7:
dd:07:e0:fd:35:9c:63:f2:5f:99:93:71:82:27:64:
14:f8:17:0b:91:a2:1d:28:b8:c9:a3:3a:33:72:63:
b5:1a:69:7b:2b:34:1c:8b:94:2e:44:13:21:66:cf:
f7:17:a3:e5:e8:4b:55:09:90:19:60:5a:c1:7b:39:
db:0c:9b:3f:df:47:9c:08:88:55:a3:d2:61:bf:7f:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:05:BA:97:48:0D:35:25:96:11:9C:D7:04:DD:2C:A7:77:EB:27
X509v3 Authority Key Identifier:
keyid:00:86:56:CA:14:4A:33:93:11:68:5C:E5:FA:8A:BF:1D:27:05:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIZWyhRKM5MRaFzl-oq_HScFoeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3a724-68e9-4a9f-adb6-0d4e39eb8723/1/AIZWyhRKM5MRaFzl-oq_HScFoeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d2:5b:80:c7:d6:a4:e2:05:d0:2c:7f:8f:e6:24:0d:6d:fc:
9e:77:6b:a1:1c:ac:76:29:df:be:d7:da:92:77:4a:d7:27:2f:
61:ba:65:e2:8b:62:78:55:a5:27:9e:38:4f:a6:5d:68:62:2f:
6e:08:c7:06:0c:4d:88:1e:b2:02:89:f1:e8:aa:03:ae:0a:27:
68:1a:80:29:f0:3f:f8:03:82:ce:76:43:b2:c8:d9:75:c3:e2:
a3:c9:79:5f:7c:fa:e8:b3:48:a4:70:62:f6:6f:81:62:d3:9e:
c0:01:59:e5:56:fa:f5:43:2e:65:46:96:15:3c:1c:f0:a7:07:
a7:3a:61:48:ea:cc:66:a1:29:cc:69:1d:b4:67:29:a0:45:8b:
c4:6d:61:a7:1f:2a:f6:4b:4a:4c:10:aa:35:01:6e:84:b7:69:
8f:4e:79:ba:ba:9f:12:13:56:b4:11:41:79:c8:56:73:48:81:
52:05:0a:35:70:12:37:f1:dc:d3:a8:80:19:70:c1:88:56:15:
e0:b6:37:91:ff:40:bc:6b:a8:ea:fe:76:66:0b:5f:ed:a8:01:
2f:70:3e:c9:3b:8f:3d:b5:59:d8:a9:a7:ae:d4:c0:4f:1d:ad:
05:91:08:ee:d4:7b:9a:d5:f2:9a:73:a5:8c:e2:9a:39:dd:bb:
d4:3f:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:34 2026 by rpki-client