Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier: i0mWeZLoXqBsiC+N8LoMzlcRqH5QPEGPgI7u90+ozUc=
Subject key identifier: F7:EA:64:47:12:7D:84:C7:EB:DF:C8:58:22:94:7E:59:D0:D4:0A:12
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer: /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial: 019FA071C2BF8958E40EC848091D48100BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number: 036F
Signing time: Sun 26 Jul 2026 22:00:37 +0000
Manifest this update: Sun 26 Jul 2026 22:00:37 +0000
Manifest next update: Mon 27 Jul 2026 22:00:37 +0000
Files and hashes: 1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: R+1tRhZD+7+iswNohyw6cSm5y4lQNS8ucXXN2idHrEI=)
2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:c2:bf:89:58:e4:0e:c8:48:09:1d:48:10:0b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Validity
Not Before: Jul 26 22:00:37 2026 GMT
Not After : Jul 27 22:00:37 2026 GMT
Subject: CN=f7ea6447127d84c7ebdfc85822947e59d0d40a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:0c:67:8c:55:6a:d3:aa:e7:f4:98:6f:bc:
20:a4:ef:84:0f:7e:21:ac:eb:68:b2:a3:37:7b:7c:
ea:c9:50:cf:ee:26:a8:fc:67:1b:a3:6d:6a:85:40:
8d:53:9c:cf:cd:2a:ee:53:d0:7a:f2:ab:18:f0:c1:
70:fa:1f:a2:25:81:6c:fc:15:e2:2b:88:93:24:30:
04:0f:3a:03:82:6c:45:95:bc:57:b2:f2:35:1c:74:
12:38:86:2a:92:8c:2d:44:0b:77:a7:f9:ec:2c:b6:
24:60:9c:9a:5f:5a:4a:4b:04:9c:20:a9:46:1e:ca:
81:5f:a6:70:74:2c:77:42:da:4c:9d:45:b5:3e:87:
b4:85:6e:16:a3:b5:9d:82:b6:0a:d5:26:56:78:63:
fc:79:e4:4c:7e:7e:8f:94:e1:de:ec:2b:20:00:1e:
d3:64:61:98:b9:66:cb:de:4b:23:d8:27:64:8c:f9:
74:47:15:df:ac:4c:83:d9:aa:6e:9f:63:62:5f:df:
e3:0f:70:35:64:53:f0:12:c8:4b:84:58:83:39:01:
9c:b1:ba:06:0b:70:94:f7:c8:8a:24:cc:a1:60:02:
79:87:70:a6:8b:15:62:f4:9e:65:7f:b0:d5:32:09:
81:5d:ad:9a:ec:58:4b:fa:7b:98:8a:e9:74:b9:a6:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:64:47:12:7D:84:C7:EB:DF:C8:58:22:94:7E:59:D0:D4:0A:12
X509v3 Authority Key Identifier:
keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:21:d7:86:d6:b5:f1:9a:42:55:69:81:99:4f:7e:e4:e1:
9f:1c:98:74:29:d1:e7:7d:2d:d9:74:b2:f1:69:00:e7:c0:74:
98:88:e4:71:f3:52:88:70:88:99:cb:ea:1a:79:c2:69:6b:27:
72:b2:da:a6:79:1b:97:1b:14:11:b2:2a:b3:65:b5:8c:10:4f:
02:55:53:e7:bd:60:5d:02:6a:0d:3a:17:2f:e5:93:8e:ef:f9:
33:28:bf:21:9a:52:8e:3f:6e:d2:4b:a6:14:aa:33:4a:17:b0:
d2:4d:38:55:75:a0:71:33:98:13:66:93:1a:25:87:7c:b6:5f:
92:02:ab:5f:8f:3a:62:31:fa:7c:71:cf:5f:ac:bf:d5:d0:83:
d8:df:d2:cf:f6:82:ef:18:37:37:fa:19:f4:a0:46:53:39:95:
5b:c5:e9:78:e6:5f:e4:85:01:94:cd:a4:5f:79:66:69:f7:af:
87:0c:6d:b8:18:f5:23:59:7e:e3:b6:3a:21:73:a3:ff:62:6f:
2c:c9:89:b1:0d:ce:2b:f4:21:23:78:57:cf:c5:03:80:6b:e9:
f6:33:2e:92:91:e3:7c:81:90:56:45:ae:ca:0e:ee:8a:c1:ce:
67:74:c1:a7:53:d7:bf:1d:71:1f:65:14:55:be:40:ee:4e:1f:
38:24:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:18 2026 by rpki-client