Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File: A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier: SFvt8IELFTG91wQfhdJENHrOQCuXBUgdg4rjvcgPG88=
Subject key identifier: 03:09:BA:F8:90:03:AA:DD:45:51:A0:2B:EA:83:92:05:6C:19:03:2D
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 019FAABE9F04EFC25E8891EC069695BDA007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 22:00:46 +0000
Manifest this update: Tue 28 Jul 2026 22:00:46 +0000
Manifest next update: Wed 29 Jul 2026 22:00:46 +0000
Files and hashes: 1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: chaKZ2ocVfl35JcBPyNvmYI1OPaP1bbgGN7bER6gRxc=)
2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:9f:04:ef:c2:5e:88:91:ec:06:96:95:bd:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jul 28 22:00:46 2026 GMT
Not After : Jul 29 22:00:46 2026 GMT
Subject: CN=0309baf89003aadd4551a02bea8392056c19032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:a0:38:41:40:ac:24:3d:53:04:f1:42:d1:
3b:7d:d3:a8:ce:3c:cb:b4:f6:46:55:65:28:41:1b:
57:12:a4:e5:4d:61:84:89:b6:0e:53:ef:52:d6:c3:
e6:e5:7c:45:92:0e:a3:71:6a:d3:b9:48:63:c9:d0:
a7:03:68:84:23:54:41:93:4a:dc:27:76:05:71:4b:
1a:a9:28:a6:54:94:3e:7d:1a:66:ae:ec:4d:db:32:
b1:3a:f4:d4:b5:af:c8:15:0b:d5:2e:f6:8c:02:f4:
10:db:f1:4a:ed:34:e9:bc:63:77:c6:3b:9b:6c:d8:
26:3e:26:d7:fc:42:ce:49:75:17:86:65:0c:cc:2a:
81:70:a3:cc:8d:ec:cd:77:79:12:00:14:e4:bc:38:
01:3e:cb:7e:05:57:43:99:99:5c:df:af:bc:b0:24:
c1:65:f0:58:b8:3a:c9:3e:e9:bc:d1:32:d5:1f:5a:
4c:77:3d:f9:b8:7d:0a:62:f8:d1:4c:99:77:97:dc:
47:d8:c1:af:55:1b:2e:aa:8e:81:66:ae:86:c6:3a:
d2:18:8e:85:ff:d4:fc:f9:f6:79:49:a3:e8:76:74:
ae:96:b9:f5:73:9e:77:e5:5c:d5:1a:ae:86:35:00:
80:ab:95:63:d7:ce:7f:f4:30:2b:6a:ab:57:7c:3a:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:09:BA:F8:90:03:AA:DD:45:51:A0:2B:EA:83:92:05:6C:19:03:2D
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c9:3a:66:6a:08:d9:03:2b:05:cf:bf:f8:27:b9:8f:12:81:
f0:41:eb:08:4b:25:52:26:9f:8d:17:ae:71:bf:78:33:3b:b8:
1f:bd:7b:d0:fe:34:cb:9a:75:b8:a9:c3:ed:3d:4c:ca:13:dc:
14:84:b1:d5:98:64:13:53:92:30:cc:46:2d:1b:ec:ce:6c:aa:
bf:ce:7f:f1:6f:e5:e1:af:b4:4b:4d:cc:c0:23:f9:ce:28:77:
ec:d6:cf:29:01:7f:2e:22:68:57:87:e7:a8:34:d9:9e:d3:f0:
01:48:8c:05:36:dc:5e:62:f9:a2:e4:0a:4d:be:ff:77:53:cd:
ba:b5:11:34:b2:96:f6:b0:b1:17:14:11:0f:cb:f4:03:83:f2:
4c:be:1a:93:81:4e:cd:48:78:ad:93:4d:2b:8c:a2:e6:dc:53:
86:db:62:a1:2e:01:29:9d:a1:1f:e6:09:b0:31:8d:b9:17:ac:
24:ab:40:ed:f2:ce:17:ba:de:77:97:e2:75:cf:12:5e:11:56:
06:d5:d0:e2:e5:7d:42:59:16:5f:a7:b8:71:25:23:96:ca:00:
5a:d6:cc:88:1e:b9:89:e5:9d:2f:57:5f:bf:a2:6e:16:f6:8f:
ef:1c:8c:53:82:22:e9:a9:de:17:ab:85:0d:cb:dd:d7:5a:21:
4b:4c:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:13 2026 by rpki-client