Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
File: a54cPjlfdldRXQ6F-zxQ01HSACA.mft (raw, json)
Hash identifier: vmglYmQ5NABu7iony0cdbKShsVc2W663pLFVTLfqJ60=
Subject key identifier: EF:DB:33:91:00:79:C0:DB:61:C3:CE:CF:DB:84:78:4B:AD:FA:BD:CA
Authority key identifier: 6B:9E:1C:3E:39:5F:76:57:51:5D:0E:85:FB:3C:50:D3:51:D2:00:20
Certificate issuer: /CN=6b9e1c3e395f7657515d0e85fb3c50d351d20020
Certificate serial: 019FA0E10BE5F6B9AA3E193CC86B769C3222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:10 +0000
Manifest this update: Mon 27 Jul 2026 00:02:10 +0000
Manifest next update: Tue 28 Jul 2026 00:02:10 +0000
Files and hashes: 1: a54cPjlfdldRXQ6F-zxQ01HSACA.crl (hash: lLBDvM6Yjpbb1sVkJcTqFP0OFNMDXsTkL0+4R2AtwdI=)
2: zTdl3fj02AcI9H4s8ZBF6ZAHZbQ.roa (hash: Y/MZK+Lf6qkYapa6jxWN717KodB4qx6aFOutmlhqzfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e1:0b:e5:f6:b9:aa:3e:19:3c:c8:6b:76:9c:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b9e1c3e395f7657515d0e85fb3c50d351d20020
Validity
Not Before: Jul 27 00:02:10 2026 GMT
Not After : Jul 28 00:02:10 2026 GMT
Subject: CN=efdb33910079c0db61c3cecfdb84784badfabdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:92:19:7c:85:6c:0f:d5:15:57:7e:07:88:
7a:5e:de:80:65:dd:8e:d4:31:d5:39:d6:fc:0a:42:
56:98:a1:7d:8f:9e:05:c1:48:a3:0b:23:24:d3:7f:
9f:ce:b0:05:da:a5:9c:c2:fa:98:f0:5d:cc:f7:5f:
8f:68:bb:7b:ca:4d:d0:59:1a:7b:42:f6:dd:db:65:
e4:a9:85:e1:82:72:b2:92:9e:4d:4e:ad:12:d3:3b:
8c:dc:85:c7:cd:56:32:34:de:b2:5c:c4:d1:34:c8:
02:2f:07:d9:f1:7a:4c:98:9f:b1:db:21:8b:0f:23:
28:53:10:40:09:1f:29:8f:e9:89:b6:85:1d:20:0d:
8b:f0:cd:e7:db:44:40:b0:0e:cd:f1:8e:e1:00:e0:
fb:23:fa:09:8a:2f:9c:2c:96:3b:0a:d0:ae:d0:6f:
53:7a:8b:99:b2:67:60:5a:00:96:e4:46:0c:b5:83:
96:f7:d9:86:da:5f:c9:8f:01:b1:4c:8f:47:35:0c:
73:59:a5:41:0b:dd:39:75:2d:e2:e1:4b:4c:dc:04:
01:33:78:b3:0b:92:24:84:00:df:72:d2:eb:2a:a3:
47:07:4d:64:b3:3f:32:11:54:88:af:4d:bd:9f:0c:
ac:eb:15:60:e9:45:b7:fe:5e:a1:b6:cc:15:2e:d5:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DB:33:91:00:79:C0:DB:61:C3:CE:CF:DB:84:78:4B:AD:FA:BD:CA
X509v3 Authority Key Identifier:
keyid:6B:9E:1C:3E:39:5F:76:57:51:5D:0E:85:FB:3C:50:D3:51:D2:00:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a54cPjlfdldRXQ6F-zxQ01HSACA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/a54cPjlfdldRXQ6F-zxQ01HSACA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:b5:c1:5f:6d:80:db:7e:c4:9a:d2:f5:64:ee:57:22:13:
70:8d:f2:36:9c:03:29:01:ff:22:6d:55:7c:78:2b:10:3b:2a:
a8:85:e1:00:d3:bd:35:c9:83:4e:c7:e0:58:5b:73:b8:65:89:
20:f3:6d:b0:d0:3d:e0:9c:39:02:7e:f6:94:fd:7b:28:51:b7:
c6:96:65:39:17:e1:e5:2d:29:79:9f:96:15:11:f1:80:12:c0:
b4:54:7f:0a:b5:69:ba:8b:e6:1d:78:55:d5:73:c4:b2:28:10:
db:6f:53:2e:b2:8f:b9:c0:46:3f:d8:8e:06:ed:eb:22:77:ec:
b9:3b:b5:cb:c6:8c:69:3a:ee:02:ee:9c:67:1d:c1:ef:4f:5e:
75:95:97:bb:ab:ba:ab:be:b7:60:7c:0b:f4:2e:15:ae:df:a8:
31:04:37:01:27:fa:54:2c:ac:bb:e4:e0:28:23:26:9d:b2:b0:
62:2b:8d:64:34:3d:77:82:42:63:45:da:79:69:0c:ef:70:95:
c0:48:2e:11:ca:dd:3f:12:69:5e:31:8f:11:0d:02:4f:6f:99:
4d:d5:ef:ff:3c:2b:10:0a:af:ae:37:e8:6c:a9:8c:01:6d:77:
d4:97:2f:dd:4d:22:3a:74:69:a2:8a:5e:dc:fd:74:89:69:7b:
92:bf:e5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:50:09 2026 by rpki-client