Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
File: A56X4z1nx-KVACipQeW9DbJmV_0.mft (raw, json)
Hash identifier: Ii5ZQ87X60JjsE6h8HgKa4DpsaUMflb6k6hZwVrXd0o=
Subject key identifier: 76:DA:2C:34:7F:18:B4:DE:93:3A:5A:AA:9B:E3:92:55:42:3F:75:49
Authority key identifier: 03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
Certificate issuer: /CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Certificate serial: 019F6CBC4FF7D05496DF980028C9E8D01521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
Manifest number: 2D
Signing time: Thu 16 Jul 2026 21:01:48 +0000
Manifest this update: Thu 16 Jul 2026 21:01:48 +0000
Manifest next update: Fri 17 Jul 2026 21:01:48 +0000
Files and hashes: 1: A56X4z1nx-KVACipQeW9DbJmV_0.crl (hash: Onnlwk9bekj/PRwN1Q7qBwnLszOSJAmwy0iJwShVP/U=)
2: gTLQO7IRUIt1he_tfQZ5R50CmzQ.roa (hash: 13NsbCK446j3nwsRrmw3vucE5FkbNbCaICNVdshkbns=)
3: hvfAzCtoE0ORBMYjcGw8oigdKcw.asa (hash: 72h3L4hXBvMvuCPqYCl4ziMbL9JELyu/c1jTdEmyvUA=)
4: xRkuggtUsWPX1CZItcVFqyWAcxw.roa (hash: m7exX/tnvEsWXCcIVUMghbchGT+uUqq23xo4bmK0dao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:bc:4f:f7:d0:54:96:df:98:00:28:c9:e8:d0:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039e97e33d67c7e2950028a941e5bd0db26657fd
Validity
Not Before: Jul 16 21:01:48 2026 GMT
Not After : Jul 17 21:01:48 2026 GMT
Subject: CN=76da2c347f18b4de933a5aaa9be39255423f7549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:69:63:9a:1f:df:96:44:54:75:cc:31:8e:
e9:b3:02:75:44:91:12:3d:c0:85:5d:16:99:98:3b:
a2:13:c9:fa:67:0f:c4:51:95:a8:8f:d8:8c:9f:29:
55:2e:e7:23:7e:e6:3a:29:22:11:8c:69:c5:c1:4b:
e7:3c:54:de:37:41:d6:f2:01:76:a9:9b:7c:ce:92:
8e:43:b0:87:50:24:2c:f9:f8:52:ae:35:d1:76:24:
92:8e:ad:05:5a:c0:07:2e:4f:4e:03:d8:b3:e3:61:
21:9d:ca:bc:99:89:5b:79:6a:af:c2:7d:f3:66:d2:
30:b8:c1:4d:9a:41:80:b9:3e:bc:fc:06:e5:e2:54:
ea:33:da:a3:fc:9a:d8:1e:29:05:1f:a2:e3:aa:bd:
fa:c8:f2:da:ab:8a:91:26:d1:00:5c:15:cb:8d:c6:
3b:db:b5:2b:3e:6e:de:39:f8:4c:72:1e:63:e9:ab:
16:26:77:20:8c:25:06:a9:e3:8a:48:0e:23:21:93:
af:eb:6a:54:6f:b3:99:39:a4:34:d4:c3:2a:27:12:
8b:a5:5e:22:d6:36:99:b8:6d:72:f4:24:2a:2d:24:
6e:6e:e3:64:2b:05:c1:7a:04:95:11:79:15:a1:21:
b5:0a:fd:95:7b:3c:d2:4c:70:cf:a2:7d:eb:f3:4d:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DA:2C:34:7F:18:B4:DE:93:3A:5A:AA:9B:E3:92:55:42:3F:75:49
X509v3 Authority Key Identifier:
keyid:03:9E:97:E3:3D:67:C7:E2:95:00:28:A9:41:E5:BD:0D:B2:66:57:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A56X4z1nx-KVACipQeW9DbJmV_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07f907-f796-4d7b-b1cc-72b8d6dd37b3/1/A56X4z1nx-KVACipQeW9DbJmV_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:83:f9:2e:fa:81:9d:3a:58:13:cd:5e:0f:30:e9:16:d1:ef:
84:d9:6e:a0:9a:1b:51:cc:9e:c1:0f:ea:2a:39:91:a6:ef:0c:
65:ee:18:2e:7e:32:57:3d:ce:6e:4c:ce:3d:72:61:fd:64:96:
87:81:16:87:87:d1:06:92:d0:e1:ef:64:26:9c:a5:f7:07:d6:
8d:0f:59:66:c1:1d:1e:f4:87:5b:07:a5:dd:d1:72:ae:27:24:
bf:05:e8:fa:b2:22:47:64:01:fd:45:7a:91:ff:23:b5:8e:dc:
d9:38:82:84:c0:67:4c:96:e2:44:f3:b3:ed:66:31:5d:25:40:
b7:8b:7b:ed:50:88:e5:89:29:e0:d9:ea:5d:6b:e1:7d:ee:d9:
88:fe:e5:53:76:cf:8a:1e:67:d6:fa:e2:93:5f:02:71:2c:b1:
60:a7:25:8c:5e:87:88:b4:59:05:18:3e:dd:4a:74:47:3a:17:
d7:31:50:db:b7:99:54:72:b8:84:0d:cb:43:e4:d9:91:23:c9:
ac:2c:4f:2f:c5:41:ec:b5:40:7b:c8:e2:c4:aa:b8:4a:bb:05:
a4:4a:6b:4e:29:2d:2f:8f:6f:9f:a7:c0:fa:9e:7f:9b:06:b2:
31:60:08:d5:64:2c:8e:e7:39:bf:f9:ee:f8:d3:2a:e2:88:b5:
1e:c2:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 04:59:26 2026 by rpki-client