Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: FT9eiV5N/qjrnAb3phsklB0hknqbH39rKVR+AxHvwaE=
Subject key identifier: 78:2F:1B:EC:64:59:20:DC:FA:38:78:DB:27:3F:4F:04:2A:63:31:FD
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 01A000CA9CDCEA423AA55931746982B5BE47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 0719
Signing time: Fri 14 Aug 2026 15:01:13 +0000
Manifest this update: Fri 14 Aug 2026 15:01:13 +0000
Manifest next update: Sat 15 Aug 2026 15:01:13 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: suAcp1lazU9xe3NOC/m1uxSuBg+H7CR2fifKfakNCws=)
2: tK1_7kYoh8HPJEz9gt6VcaD4nUE.roa (hash: S18bPoeACVyQQ3iZwMpVkRKWBkpl4d3ZgQ7DJM72ZW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:9c:dc:ea:42:3a:a5:59:31:74:69:82:b5:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Aug 14 15:01:13 2026 GMT
Not After : Aug 15 15:01:13 2026 GMT
Subject: CN=782f1bec645920dcfa3878db273f4f042a6331fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:00:4f:96:6b:48:14:fb:08:f9:2e:ce:4b:
a9:8c:08:83:7b:84:7d:89:0d:b7:2d:67:54:d6:27:
a6:b6:ca:eb:87:d3:fd:e9:1d:4a:1a:4c:4f:af:db:
2c:d3:43:1e:5b:8f:b9:4a:5c:5e:48:7e:59:54:cd:
94:f5:30:e9:79:e5:9e:cc:8f:85:59:11:bf:88:b3:
6d:74:5d:06:5a:1f:eb:6f:64:3c:87:00:d9:f4:b6:
c9:e8:89:3e:71:ef:3b:6d:4a:6e:56:44:c5:2b:2b:
47:86:b7:cb:08:d8:d3:fe:df:6c:57:f4:a4:ba:cb:
80:3c:fc:22:f6:54:e2:99:b6:03:64:ce:71:68:65:
84:5b:2a:e3:fd:b0:a6:5c:6c:c1:c4:6d:a5:cd:d7:
14:6f:87:2b:0b:3a:c9:2e:d9:70:a5:7b:84:1a:f2:
7c:9c:9b:3b:b9:f8:47:60:70:40:72:90:f8:f8:61:
13:95:ad:cb:e6:7a:90:de:07:7b:da:2e:b3:91:6b:
7c:3b:32:39:5d:7b:8c:f5:a1:b6:b3:8a:42:2b:e7:
95:0a:58:df:6e:9f:53:64:32:04:c2:e0:26:c1:22:
5f:3f:77:c7:4d:11:80:38:db:9a:37:9a:07:29:fc:
a6:48:3a:f2:66:3e:74:af:16:b2:1a:eb:71:8a:33:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:1B:EC:64:59:20:DC:FA:38:78:DB:27:3F:4F:04:2A:63:31:FD
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d1:53:60:51:62:22:97:53:d2:9c:a7:7c:53:58:1d:57:be:
5c:7c:cc:6e:3a:29:48:09:6a:19:24:3c:fc:32:5b:43:6a:57:
34:3e:71:c3:0f:bb:7d:0a:fa:f0:1b:9d:90:9a:97:65:55:0f:
cc:fc:9f:bb:ed:d7:67:dc:6c:41:0d:c9:1a:d5:d2:c9:ec:72:
2b:53:69:b7:9b:b9:40:8c:2d:85:64:d0:a3:d3:ba:68:80:42:
63:65:ff:d1:1e:43:45:6f:83:3d:73:ce:d7:ac:14:16:48:e6:
2a:f8:ed:f2:27:dc:fd:02:32:42:4f:d9:45:d8:34:61:ac:1e:
3a:6f:8c:b6:07:4a:af:91:44:32:ae:6c:cb:55:4c:60:b3:9b:
39:b7:6d:e9:64:4f:0c:79:a8:74:bc:bc:59:af:46:8b:99:0f:
bb:41:5e:ca:88:b2:c2:c8:38:08:2c:a1:33:c4:51:fd:1e:cc:
ec:4f:25:46:71:b9:ae:be:e1:6d:92:e6:35:02:ca:84:c4:05:
d6:14:cc:57:4b:1a:ef:b8:4e:ba:08:81:5d:20:55:be:ff:85:
4c:3f:06:39:99:30:c5:a9:61:bb:bf:11:19:7a:5f:ef:f3:30:
99:8e:04:da:0f:13:3b:de:31:3e:c4:f9:b3:54:53:6f:37:60:
c6:ab:ef:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:05 2026 by rpki-client