Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: DjEUkDDScgWIrLe/OrQgdUJg72gDB1qqkPtc0JtKFHA=
Subject key identifier: 00:5F:39:6F:86:0B:A7:E2:EC:68:F8:7A:2B:12:48:2A:50:E5:E3:94
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019FA372EE2432C1952574703CA21BCB932B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 19D5
Signing time: Mon 27 Jul 2026 12:00:46 +0000
Manifest this update: Mon 27 Jul 2026 12:00:46 +0000
Manifest next update: Tue 28 Jul 2026 12:00:46 +0000
Files and hashes: 1: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: Htdb8wwsL9zZXgYP+73KX+z6h6HOo5GM6r7OkBfuIVM=)
2: NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa (hash: 41ZTj79rHdcbi2jDyyFI5602VPH0KxIVb+GgQmVExmY=)
3: n00gLZ8RizHXHcJP8n5U2lkHl_0.roa (hash: 7x9iUpgLpEtIBExQu4BUBe9xIOIqTpL6nc56pdzzQrE=)
4: xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa (hash: n/FpmazjblwI/DOGbFxfAt6xbYD4J5uzhPRONKeYoOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:ee:24:32:c1:95:25:74:70:3c:a2:1b:cb:93:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jul 27 12:00:46 2026 GMT
Not After : Jul 28 12:00:46 2026 GMT
Subject: CN=005f396f860ba7e2ec68f87a2b12482a50e5e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:53:9e:b9:8b:12:34:ef:39:6a:2a:30:1b:
7d:00:b1:08:f0:21:ad:ab:dc:c5:a0:ca:87:0e:a7:
94:8d:e5:5e:30:c7:e3:3b:f5:39:b6:56:60:2b:2c:
1f:32:9e:93:a1:0c:d2:15:1f:45:64:27:af:d7:2b:
c3:37:04:23:df:11:f9:95:de:a8:64:50:f6:7c:7c:
55:da:a1:77:a1:23:c8:41:b6:ba:d0:4b:72:b6:d6:
1e:1d:8f:62:e5:5a:a4:d8:f8:39:e6:78:1b:5d:93:
7f:75:21:8e:36:e5:d5:59:97:92:38:84:ea:ac:4d:
45:2a:2b:4b:10:1c:0f:e0:65:ab:e7:81:28:3e:3a:
3f:73:01:f3:18:74:bf:a1:fc:c1:46:8b:1b:94:5b:
de:36:ed:d6:e6:c1:8b:ab:18:b1:1c:40:94:ac:77:
ac:21:4d:25:bb:51:26:01:fa:4b:38:4e:e9:ba:98:
70:16:05:93:da:09:7e:2f:f3:4d:5f:dc:d7:e2:37:
30:c1:84:f0:39:43:fa:30:b6:d8:70:6b:02:f5:89:
59:1c:c6:d4:8e:90:50:a2:ed:da:3e:1c:d7:aa:87:
c5:f1:c5:fb:a6:cc:de:5c:2d:a8:1f:8d:4d:c7:5c:
b4:e8:a7:0a:1a:7d:63:51:d5:c9:e3:72:22:68:8a:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:39:6F:86:0B:A7:E2:EC:68:F8:7A:2B:12:48:2A:50:E5:E3:94
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:33:b7:6d:02:f3:38:41:45:f3:82:5d:fb:31:43:35:b4:
6a:c5:60:9b:24:bb:2e:25:55:62:90:17:a1:83:69:c8:b5:56:
78:c4:49:ef:fc:cc:19:06:6a:92:fb:f2:fa:51:ee:b9:f9:25:
fd:f3:50:b5:8c:1f:82:4b:d0:17:db:6b:16:a4:1e:2e:d7:6d:
27:43:33:24:3d:0f:71:20:1a:65:46:1c:95:45:b3:54:75:0b:
e1:d1:84:e9:a6:88:42:33:c9:30:8a:09:10:25:5d:94:6a:2d:
f2:d9:8d:7c:43:0f:d1:02:10:c0:75:82:8e:e7:0c:a5:e3:88:
26:33:ec:ab:04:27:2c:0a:2e:bd:32:17:9b:cd:04:f2:61:c6:
31:de:67:ac:83:70:8e:18:2c:0b:1e:e6:0d:a5:ab:3b:85:38:
ee:14:07:3c:37:85:30:d1:da:64:bb:01:cf:90:71:33:b5:a6:
b7:c8:26:68:d7:54:9d:e1:7c:53:ba:53:1d:46:e0:15:07:de:
8d:f1:70:0e:02:60:5e:eb:3b:6d:17:92:b5:5c:98:da:33:37:
30:ed:b8:3b:a7:7a:bb:62:27:1d:9e:5d:05:e0:e6:7e:f9:26:
34:db:23:38:10:8b:78:6e:1c:1f:36:19:2b:41:ca:99:a9:ae:
1f:79:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:32:49 2026 by rpki-client