Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: chKrS5fjjhUUT0mF8ftszLMa1zhE7nhGgmixrzp9qOg=
Subject key identifier: D6:8F:22:EE:3F:10:BD:50:B1:C4:F6:96:76:23:37:82:4D:56:95:CD
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 019FA3A96524636FA7657FEACC7C0DE5441D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 0F5A
Signing time: Mon 27 Jul 2026 13:00:15 +0000
Manifest this update: Mon 27 Jul 2026 13:00:15 +0000
Manifest next update: Tue 28 Jul 2026 13:00:15 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: J9WEEMWej38oJpbRS0Ruk4qAlIBt1N+tk5wMdDn8skU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:65:24:63:6f:a7:65:7f:ea:cc:7c:0d:e5:44:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Jul 27 13:00:15 2026 GMT
Not After : Jul 28 13:00:15 2026 GMT
Subject: CN=d68f22ee3f10bd50b1c4f696762337824d5695cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:48:21:1c:85:64:0e:33:26:14:23:77:0c:8c:
6c:d8:52:cf:33:dc:23:4d:bc:e1:31:83:7c:ee:f7:
ba:a6:83:49:cb:79:cf:12:ac:3d:09:08:b8:2a:6c:
bb:a5:f2:36:5d:c5:8c:83:bd:cf:75:78:db:65:56:
59:71:97:32:cb:c6:dd:86:ed:e3:ee:4e:24:6b:dc:
1b:f7:f6:26:51:c1:37:da:35:dd:35:aa:c7:90:84:
c5:75:f7:5f:63:09:2d:37:63:79:57:60:37:63:fd:
ae:a0:09:0c:49:7c:54:c3:12:b4:ee:78:d6:7f:d6:
c2:39:6e:05:13:0e:6b:c5:47:74:8c:75:63:03:e9:
51:3f:2f:1a:c9:55:d5:79:f4:ef:85:70:e3:6a:d6:
16:d8:4e:ab:ec:89:d3:ab:00:bc:c0:af:e7:3b:74:
b9:6a:66:4a:2c:8c:5e:61:37:f7:cf:d1:82:b1:12:
d8:16:b6:21:9f:f9:37:58:cd:78:8a:8d:0e:59:77:
47:18:21:c8:17:13:86:bd:eb:a2:9a:34:54:a5:81:
e9:00:24:44:50:91:f5:ef:3c:60:e8:ae:5d:7c:ee:
f1:0f:78:6c:91:d4:21:aa:96:1b:3f:2d:6a:28:be:
db:13:03:a7:fa:32:ff:98:97:87:83:55:01:9a:58:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:22:EE:3F:10:BD:50:B1:C4:F6:96:76:23:37:82:4D:56:95:CD
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:30:b5:67:3a:6c:d5:bd:e4:12:dd:11:2e:5f:bb:37:a1:
e2:7e:70:7e:f3:7d:0c:56:74:30:8b:20:19:c8:18:c0:03:ed:
30:0b:24:ee:48:5f:d2:25:be:1f:82:b1:11:e9:ed:9a:dc:e6:
a5:16:f1:62:79:22:8e:69:70:52:cc:de:90:f6:bd:93:17:f5:
f7:cb:8a:44:da:54:97:b8:57:a4:2f:a5:9b:51:b6:d3:7c:ca:
fe:42:06:71:ed:c2:5d:46:dd:ff:91:bf:af:24:3c:c7:54:13:
42:9b:f7:99:ff:33:cd:24:f9:49:c8:9a:eb:a7:8d:cc:29:4c:
6f:cc:cc:a0:57:ee:8a:af:67:45:5b:99:c6:c5:5b:8d:e0:d6:
44:11:99:a1:5a:42:c1:24:a7:7c:22:a9:17:f8:73:9d:f7:c6:
51:e0:a6:58:84:ef:e0:9c:d5:99:85:f0:b3:d9:58:d9:dc:a5:
8f:aa:0e:35:07:b2:b3:09:87:c3:33:23:02:b3:4c:04:24:1e:
ec:63:8a:a1:f3:11:ff:97:e4:4c:0b:60:20:9e:de:3b:01:01:
88:c8:bb:6f:3c:b4:ee:0d:e4:5f:c1:2f:85:15:b5:86:15:63:
53:5b:be:3d:3a:c2:b1:4a:71:07:2a:ca:e8:60:72:5a:7c:3b:
5f:5f:a2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:13:20 2026 by rpki-client