
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
File: aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft (raw, json)
Hash identifier: MNT1E8qSh6bg2Qc9GudHDA7IFKe8QXT8aqmnI9Mn0Aw=
Subject key identifier: 74:45:FD:40:AD:0D:0C:71:63:1A:E3:AF:CD:65:96:79:5D:A1:B9:78
Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Certificate serial: 019F3A4E9F9DB2E0B92C0A8B96C5AD8EA3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
Manifest number: 0486
Signing time: Tue 07 Jul 2026 02:00:58 +0000
Manifest this update: Tue 07 Jul 2026 02:00:58 +0000
Manifest next update: Wed 08 Jul 2026 02:00:58 +0000
Files and hashes: 1: 9JzTDncsepWBIyeXDgZbgzh-hNA.roa (hash: EEJ8BD1UQFBZFgZQFrtwhkvF1euS2AFglnhzeTI1Kl4=)
2: CBsDO18mnRAZhs0rFe-oIGwGZeQ.roa (hash: v+64R9Yuvs5nMKSViq5julUttSHyjyUAvPmFlDm28JY=)
3: Q-ZhLXGU3V7WMJf_F4jA-hfVPCo.roa (hash: Ad4i58VjKhwdfxFqTtK2L0c60TXelJ6/sX2iLUaz7Lc=)
4: aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl (hash: Ddi7mX5xMoxchPHBMW/pF8bX0DUk3NqcSkwinWDvCuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:4e:9f:9d:b2:e0:b9:2c:0a:8b:96:c5:ad:8e:a3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b
Validity
Not Before: Jul 7 02:00:58 2026 GMT
Not After : Jul 8 02:00:58 2026 GMT
Subject: CN=7445fd40ad0d0c71631ae3afcd6596795da1b978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:a7:44:6e:8f:ce:f3:49:c8:df:c4:c6:c2:
1e:17:ad:00:e1:96:fb:07:d4:22:8c:fc:39:7a:30:
80:c6:dd:5f:e1:45:3b:66:cb:7f:96:ab:2d:48:ab:
4f:6b:44:10:09:3c:f6:8f:a4:e3:83:b3:b8:e0:07:
89:1d:70:58:3e:2f:15:ea:dd:cc:df:0c:38:70:f1:
fe:31:bf:be:95:a6:89:61:3f:74:82:97:4d:f2:e4:
8e:3f:12:5e:1c:27:b3:fe:3a:6f:9b:b7:b8:a2:19:
44:ef:2e:49:de:83:1e:0f:44:23:cf:ec:cf:52:2b:
21:18:db:14:0f:c5:b6:04:fe:c8:d2:40:63:a4:36:
59:b5:b7:49:7a:32:b0:08:b6:17:15:ee:b3:a9:c3:
9c:ae:ad:83:3c:92:11:5a:27:c0:db:67:0f:d2:29:
90:28:c4:48:13:0b:68:6b:68:13:3a:5e:86:87:c2:
e3:33:54:62:49:51:5a:a4:1a:85:8a:89:15:55:07:
fa:b1:5a:4c:73:2e:4a:64:f2:58:7d:d3:da:b6:5e:
8d:e7:50:54:c4:75:d1:f9:ff:bd:62:72:32:21:c2:
83:48:98:3f:f4:a0:32:5a:20:0b:72:c1:a4:1b:f6:
13:a1:30:1a:bd:1e:24:7d:0d:54:c7:15:62:5d:ea:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:FD:40:AD:0D:0C:71:63:1A:E3:AF:CD:65:96:79:5D:A1:B9:78
X509v3 Authority Key Identifier:
keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:04:6a:b1:5c:32:2d:48:2f:e4:99:56:12:39:b4:1d:19:0f:
1b:ba:95:94:ec:80:45:c5:ac:23:4a:8a:6e:59:c1:d1:e5:94:
89:57:6b:d9:8a:ca:8c:d6:fb:4a:d6:8f:3f:11:7d:77:d4:44:
bf:25:a3:4f:2a:f7:af:00:6c:7b:fa:f9:48:21:4e:8e:44:a7:
72:eb:2d:51:45:23:ad:b4:cd:d8:38:58:1d:a4:10:22:71:60:
ec:9a:3e:55:69:f3:66:3a:d7:3b:ec:25:3a:86:b6:e3:a4:8e:
a1:44:fc:99:cd:1e:2c:0f:85:28:dd:f6:56:8f:5f:de:a3:b4:
ea:59:0d:c1:11:da:28:82:23:1a:e9:61:e9:2a:65:44:56:28:
35:fb:c4:3c:d2:c7:ff:a6:f8:01:a7:be:fa:b2:23:93:9d:bf:
51:c9:06:cd:72:80:23:f2:0b:bd:04:5b:46:29:57:2d:11:4f:
e1:9b:90:09:f0:15:f0:36:d3:96:c5:07:05:85:e1:7a:99:ad:
b1:41:c8:21:68:a5:48:0b:6f:25:33:59:37:de:0a:3b:be:81:
ab:2f:d5:5c:78:95:c1:df:63:b1:dd:20:09:aa:25:41:df:47:
a4:3b:74:42:44:f4:e5:67:09:df:c8:27:8b:de:89:ba:75:ef:
51:49:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:43 2026 by rpki-client