Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: NahnMBKL5fMEZ5YThrp/26Ua/qODr7tAD6h+Lb8bzSk=
Subject key identifier: AF:98:A5:0F:02:40:D2:5D:3E:DE:A3:0A:A7:18:DB:3D:97:A9:BC:FE
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019F9D708823C2B4E4B467495160A2CA7657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 19CB
Signing time: Sun 26 Jul 2026 08:00:25 +0000
Manifest this update: Sun 26 Jul 2026 08:00:25 +0000
Manifest next update: Mon 27 Jul 2026 08:00:25 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: j6O+L6hDZl4XrmwpVGDLfQdy2rRvbClnxOq65ktL6rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:70:88:23:c2:b4:e4:b4:67:49:51:60:a2:ca:76:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Jul 26 08:00:25 2026 GMT
Not After : Jul 27 08:00:25 2026 GMT
Subject: CN=af98a50f0240d25d3edea30aa718db3d97a9bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:73:67:6e:15:da:fd:34:23:55:da:9a:5d:
5a:00:b3:42:b8:4f:5b:27:76:40:b4:e2:ab:4e:3f:
65:8c:0e:55:a1:9b:14:50:9e:16:72:21:da:b6:5b:
3c:a5:ae:7a:d7:04:c8:b3:4f:1d:1a:66:b4:06:90:
a2:e2:92:85:f1:71:53:72:25:74:b1:1a:69:8a:44:
36:fb:0a:c3:2d:54:bb:cb:7c:29:97:53:4f:a1:67:
49:76:b5:26:a9:fb:aa:0b:b2:cc:80:95:7b:d6:c4:
04:8e:dd:15:a4:71:42:88:11:33:88:a1:68:63:44:
6d:72:e4:b7:61:e1:88:57:dc:85:38:60:5e:85:76:
1b:d0:59:ad:fc:af:49:d2:59:f0:cb:de:87:52:46:
c6:fe:56:6b:ff:42:3e:a5:ea:92:d0:4c:92:72:b8:
47:4c:7f:d8:75:01:7f:f7:c3:48:9c:42:0d:23:c9:
1e:1e:f2:10:41:e0:b5:cb:f2:b9:9b:88:ce:d2:24:
c8:ce:6c:36:f2:0d:fd:9b:00:2c:e4:d6:4a:36:ce:
19:ba:70:fc:b0:bd:3b:b3:a1:20:58:9d:6b:e4:0a:
08:2a:be:ab:8f:d0:28:17:af:17:8d:c6:a1:5d:a7:
80:da:d8:65:b3:15:1b:16:09:3f:97:7c:6f:8b:2a:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:98:A5:0F:02:40:D2:5D:3E:DE:A3:0A:A7:18:DB:3D:97:A9:BC:FE
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:da:c6:28:02:72:47:00:fe:ea:28:ac:06:4d:f2:08:37:
8e:dc:fe:84:ee:db:30:7a:15:82:33:6a:ff:a9:b8:c4:5b:c9:
ac:67:a4:10:78:c9:e1:8f:9b:9f:6d:88:ab:d0:0f:95:4b:7d:
20:a3:b0:e2:fc:af:e3:80:00:1e:64:e6:d7:ce:46:3d:c5:37:
b2:de:33:86:48:f9:83:f2:89:43:5d:7d:a4:5c:96:49:12:23:
99:e6:72:d3:2d:e3:2b:b8:66:80:3e:18:14:02:a5:86:6b:f1:
ed:01:df:d7:ce:e2:91:e2:ca:b8:79:9f:a7:11:d9:75:e7:ba:
84:05:24:dd:18:13:ca:ab:45:55:9f:4a:0c:a9:01:47:e6:ec:
de:00:4e:05:24:92:66:43:8e:76:01:a6:d7:09:1e:91:ac:43:
55:e2:68:37:da:19:f2:ff:b2:cc:2c:fd:32:d5:de:fc:47:cd:
d8:dd:bb:26:7e:53:11:c6:eb:42:02:86:0e:d5:50:cd:2a:e9:
dd:4c:66:a0:5e:ca:56:2c:ea:74:0a:98:26:c4:07:cb:0f:a9:
a3:2a:64:42:ab:4f:61:c2:56:e9:24:c6:68:f6:1d:b7:77:3c:
3e:f0:63:85:fd:3b:27:1b:c0:8b:e2:8f:38:97:b2:1e:58:7e:
1e:fd:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:51:20 2026 by rpki-client