Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
File: aA4gzPstWJjCFikA0UaAcKcCSVY.mft (raw, json)
Hash identifier: VBTMPKwxSwpFf9tu1rTo1so3gNe3vfJrq5ZFIV5G1kk=
Subject key identifier: EA:C2:46:F5:8B:5C:29:54:A7:CD:38:D0:D5:6F:78:4E:A4:1E:10:8E
Authority key identifier: 68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
Certificate issuer: /CN=680e20ccfb2d5898c2162900d1468070a7024956
Certificate serial: 019FA52A8BFB056D93D2347E29D8BB0AE3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
Manifest number: 0DC9
Signing time: Mon 27 Jul 2026 20:00:56 +0000
Manifest this update: Mon 27 Jul 2026 20:00:56 +0000
Manifest next update: Tue 28 Jul 2026 20:00:56 +0000
Files and hashes: 1: MPB9CkoghVUPFrXOQKAmKQU_wx8.roa (hash: SBYmHn0Lh08hIxRKwJZvwv+ggtONWPJMq80oRcsft2g=)
2: aA4gzPstWJjCFikA0UaAcKcCSVY.crl (hash: NO4FrG8DKBxOZmTGQmDqMb7Jh/avC744k0XggZWxu8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:2a:8b:fb:05:6d:93:d2:34:7e:29:d8:bb:0a:e3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680e20ccfb2d5898c2162900d1468070a7024956
Validity
Not Before: Jul 27 20:00:56 2026 GMT
Not After : Jul 28 20:00:56 2026 GMT
Subject: CN=eac246f58b5c2954a7cd38d0d56f784ea41e108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:b1:01:c9:e1:c6:5e:be:aa:35:51:97:0f:
ab:d4:20:28:73:df:05:a0:40:f2:c3:c1:ae:dd:a2:
88:a9:4b:98:d5:50:5a:04:2b:0f:ff:ee:74:c3:22:
31:69:18:a6:fe:ea:1b:1b:94:87:d2:93:f8:b7:69:
4d:66:01:6b:17:33:bd:e3:1d:5a:ee:45:e0:74:17:
32:1d:22:20:52:f5:e8:74:c0:e6:6c:28:e1:2c:05:
f1:46:59:b2:6d:ba:9c:a5:e5:71:c9:15:b0:24:75:
18:1e:f1:3d:70:a1:17:a1:9d:01:7b:0b:97:77:ec:
cf:33:ae:09:12:15:a6:33:5e:3f:ea:ef:f7:24:b2:
83:f3:7f:6a:e7:fd:55:1f:93:0e:3b:c9:94:47:3c:
a5:80:b4:c4:50:e6:64:5a:1d:84:c7:88:4f:fd:a8:
9f:46:a4:46:b8:84:3e:a7:06:f8:82:5c:0a:54:34:
27:15:e8:36:fb:28:13:f1:3f:f9:61:5e:52:ea:d7:
6b:3a:97:51:c4:7f:dc:d8:23:c6:ff:e7:55:31:4f:
ac:3e:93:ef:f5:40:87:80:d3:60:e9:53:54:13:d0:
74:18:f1:6b:8f:de:c0:86:41:7a:96:f1:69:de:6d:
df:1f:2b:67:d1:2a:06:80:2d:16:f2:8f:79:79:4c:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:46:F5:8B:5C:29:54:A7:CD:38:D0:D5:6F:78:4E:A4:1E:10:8E
X509v3 Authority Key Identifier:
keyid:68:0E:20:CC:FB:2D:58:98:C2:16:29:00:D1:46:80:70:A7:02:49:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aA4gzPstWJjCFikA0UaAcKcCSVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/796f8c-bdb7-441f-bdbb-03541d231574/1/aA4gzPstWJjCFikA0UaAcKcCSVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:48:54:81:2a:1d:cc:14:de:09:d4:ba:80:f2:2f:27:f2:75:
ed:96:95:27:42:fb:ab:70:74:c0:8b:98:57:cc:1a:e8:fb:5e:
b8:99:93:20:df:f4:80:bb:74:ad:32:39:99:9a:70:a7:7a:c2:
d2:05:39:84:a4:b6:16:98:09:34:20:8d:11:a1:0d:4a:e4:09:
10:fd:da:e5:32:75:69:74:76:0a:33:84:14:0f:b6:ea:8b:43:
25:4c:75:64:14:84:12:94:bb:01:ae:55:97:a6:75:fa:cb:04:
94:48:91:ac:8b:d6:e5:c7:05:04:d5:c3:5e:3d:ee:0c:24:37:
a4:44:1b:68:c4:cc:03:85:03:75:2b:c5:24:47:7c:9a:3c:5e:
53:9f:2f:a0:85:26:62:e2:b1:23:19:0f:40:aa:58:23:ad:73:
9e:26:f3:ce:fc:8b:ad:c9:67:92:ca:93:b4:87:ce:f1:16:05:
d3:d3:c6:83:4b:99:cb:35:08:e2:12:31:08:32:e9:46:9a:07:
d1:d3:94:2d:6e:d5:d0:ac:37:bc:f6:ac:20:eb:39:7e:cc:c6:
13:5b:4f:e2:44:d6:81:d2:03:c7:34:8c:d5:f5:70:93:84:2a:
3f:75:89:28:b1:08:b4:ae:46:9c:42:fa:86:5e:83:c3:52:e0:
79:55:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 01:00:24 2026 by rpki-client