Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: /OHAYUAq+mOf2nUs9zM3PdpyYaMxER0+fx2NPEW5hDo=
Subject key identifier: DB:51:6D:EB:8E:5D:93:FE:3D:E5:CB:9D:BA:FC:7D:74:7A:F5:3A:03
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019F830CB7828B1C50B15CAC34C82BB6A477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 025A
Signing time: Tue 21 Jul 2026 05:01:16 +0000
Manifest this update: Tue 21 Jul 2026 05:01:16 +0000
Manifest next update: Wed 22 Jul 2026 05:01:16 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: 5HUFVDmYbL3u8+yTwt+HIj3dAnNA8b+tTQeaOG81uw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0c:b7:82:8b:1c:50:b1:5c:ac:34:c8:2b:b6:a4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Jul 21 05:01:16 2026 GMT
Not After : Jul 22 05:01:16 2026 GMT
Subject: CN=db516deb8e5d93fe3de5cb9dbafc7d747af53a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:35:cb:d9:e5:d0:83:be:29:45:71:5a:8d:
1f:1e:38:3f:64:de:7c:de:bf:d8:1b:f7:15:62:9e:
a4:2e:9d:19:1e:36:df:ac:01:b3:5c:e9:9c:ff:b4:
fa:66:4a:5c:47:15:c5:76:c9:16:80:bc:61:85:62:
cb:dc:dd:b0:7f:48:96:db:89:8f:ca:aa:7b:0b:fb:
ba:6d:03:e9:fd:ca:81:8b:05:38:1f:82:00:99:f7:
31:93:d2:51:5b:51:e8:d8:e0:03:dc:50:5f:ff:06:
2e:f7:1e:08:83:9b:bb:29:76:b2:0c:9c:5b:c2:a9:
1a:48:51:e4:95:cc:53:d7:82:1d:47:4d:8a:3e:4b:
57:f2:02:34:88:e6:73:4d:6e:5b:f4:51:51:ed:80:
85:81:68:28:05:fe:b1:c4:7d:e7:5c:64:f9:62:8b:
fe:47:b3:1f:b3:67:6d:a5:64:d1:3d:ef:92:ee:96:
78:59:5d:85:a8:33:00:d6:01:7a:2d:0b:75:29:24:
85:10:a3:3b:94:75:d7:0e:e9:1b:24:d3:7a:1c:df:
2e:d3:73:a7:c4:8e:17:d1:c3:26:1c:10:52:64:b5:
31:e4:95:5e:2c:74:46:f3:05:4a:ec:26:80:25:a3:
68:4f:75:de:26:52:3e:fe:f4:22:e2:e6:24:d0:04:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:51:6D:EB:8E:5D:93:FE:3D:E5:CB:9D:BA:FC:7D:74:7A:F5:3A:03
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:42:a0:e4:36:29:92:f3:1e:aa:ae:ba:f6:e3:c4:d7:d5:d0:
64:6b:8f:93:48:9d:80:c2:4d:63:9e:2c:75:bc:e1:d7:95:b4:
aa:e2:7e:12:4f:cb:08:c7:a7:57:41:d1:c6:84:15:3a:c0:ac:
4d:95:96:2c:72:09:c7:f6:89:70:8e:e7:a7:61:ff:b8:4e:06:
a3:32:f4:0c:d4:0b:6b:2e:97:f6:9d:52:db:88:4a:ff:5b:c1:
14:10:3d:d3:43:47:ce:8a:d5:1c:da:6a:c1:56:da:05:92:f6:
d5:81:38:c3:8c:32:a9:83:2d:1d:59:c4:25:86:15:7e:16:63:
71:93:56:5d:0a:54:c0:82:8d:ce:45:be:33:36:f8:53:f9:ec:
b3:01:26:d0:fe:6e:0e:b1:0f:8a:7d:e1:d6:7b:8c:5b:e5:41:
08:76:3f:6c:f4:85:d9:2d:31:50:ae:ab:07:0f:50:bb:62:8f:
8d:15:5a:53:2d:5b:4d:5c:44:23:4e:8a:44:22:e2:e6:6c:5b:
6e:e9:25:77:39:74:c1:9d:88:5e:ef:a8:6f:6b:79:44:a4:1b:
c6:8b:75:e2:3f:07:64:71:e1:9b:84:f6:4e:97:a3:81:db:cf:
55:d5:b3:9e:f9:da:0d:28:fc:a8:39:78:05:1c:5b:a0:84:42:
c9:50:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:29 2026 by rpki-client