Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: 7aqcenOIaK6F0S17oZ9koAfIPHadBE4tW9cbaciepsg=
Subject key identifier: 67:DE:20:C5:92:85:CC:B3:F5:B2:F5:60:A8:D5:31:0C:5B:8C:0F:7F
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 019F8BA1F4E8A92EC2BACD38955D4C8AC668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 1066
Signing time: Wed 22 Jul 2026 21:01:14 +0000
Manifest this update: Wed 22 Jul 2026 21:01:14 +0000
Manifest next update: Thu 23 Jul 2026 21:01:14 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 2qPSZok21df+agKJWnpV1X6i5dyvcZPxUtlcHn5hewE=)
2: NuTfBaNx5-ikgD9VsD-ewdJsssQ.roa (hash: ZH+Uro3cwYk0dMiNqpHPXKzrQiE4Q5ScW3QXng4UDdQ=)
3: szELXMMZDl10r61Z-sPdEgawXsM.roa (hash: tZdz9tbK5EcrYgaSOLiWdcaYZFFpvCka0dgVAUXxuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:a1:f4:e8:a9:2e:c2:ba:cd:38:95:5d:4c:8a:c6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Jul 22 21:01:14 2026 GMT
Not After : Jul 23 21:01:14 2026 GMT
Subject: CN=67de20c59285ccb3f5b2f560a8d5310c5b8c0f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:0a:4b:63:54:bf:97:6a:17:62:a6:af:12:
54:af:6c:25:a6:37:f4:b2:03:ac:23:be:03:91:c7:
20:1c:64:a7:b1:fa:10:99:ca:7e:8d:6c:78:90:2d:
e7:7d:8b:b9:14:ce:93:74:36:42:a6:96:d0:d6:ee:
0f:1d:12:98:97:70:00:76:fe:88:82:18:c0:d9:f8:
e8:7f:41:7d:01:29:37:c1:f3:8b:3a:92:77:da:50:
b2:37:c1:3d:56:ad:27:65:9b:ab:34:95:cb:36:cc:
93:66:40:09:1d:dc:17:6c:34:1c:44:6f:02:dd:10:
4e:d3:9f:ff:72:e9:ce:3c:5f:32:71:be:ea:d3:c1:
8c:0d:dc:ca:1d:4b:dc:fe:96:9d:6c:b2:b9:3f:d4:
b0:08:78:71:88:d4:f0:86:f6:25:43:9e:c8:60:cc:
bf:44:fb:e1:3a:0f:bd:9f:e9:8c:8d:29:1e:25:41:
24:ec:80:8d:a9:35:e2:c2:4a:0a:c5:fc:cd:97:52:
5e:36:a3:41:b6:0f:b6:d5:39:56:8a:38:8c:44:d7:
fe:a4:85:eb:bf:52:67:7b:88:f6:71:b3:02:41:9e:
6a:8d:28:d1:ff:02:59:00:4f:a1:6f:39:f3:3f:31:
25:a9:c3:e2:c6:fc:d4:c4:0c:1f:0d:92:6b:03:fe:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:20:C5:92:85:CC:B3:F5:B2:F5:60:A8:D5:31:0C:5B:8C:0F:7F
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:25:44:32:e7:d1:40:46:dd:c1:19:69:52:9b:e0:4a:76:0a:
b3:ff:a9:f7:1e:a9:bc:21:f9:cd:60:f6:71:18:11:ec:55:3f:
61:0a:66:b8:f4:c7:03:d2:b7:b9:b8:d9:54:b8:0d:2d:87:cb:
3f:c8:51:1a:8e:73:63:76:12:d1:20:43:4d:46:80:88:45:9e:
83:26:d0:d5:3b:91:84:43:9d:e7:fc:0e:cf:4f:ee:27:ea:8d:
0d:3b:f1:f8:19:c9:9d:79:d2:a3:42:e4:1f:d4:ba:77:93:6b:
47:97:da:67:9f:29:5e:73:26:35:73:80:e8:91:95:6b:5c:f4:
5c:cc:bc:0e:f6:25:49:be:92:91:f6:d0:7b:33:71:b8:89:30:
cc:96:89:81:fa:96:19:14:d8:f7:8a:81:cb:04:6b:a5:a1:ed:
68:0a:e2:84:f8:7a:7f:ff:23:dd:87:8a:21:31:38:cf:70:ca:
da:be:5e:67:1a:b4:b3:d6:9b:6c:dc:12:ac:d5:27:c7:68:79:
af:ba:f7:9c:36:8c:5c:50:59:00:1a:ee:be:11:9e:ed:7f:71:
44:f3:1e:13:60:23:72:a6:e1:16:ec:3f:e0:8f:f3:f8:8e:39:
38:1e:b9:18:86:3e:40:f1:b6:6b:b5:55:5a:0f:27:15:04:b5:
b3:71:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:08:22 2026 by rpki-client