Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: A+vKjS1hoFqrP6Ow6zChMa9zq6vuqOEMsa2YLAMHIiI=
Subject key identifier: D2:C1:40:D4:CF:14:46:18:0A:A9:A1:3B:80:2B:26:E7:8D:B6:1C:E0
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019FA9E3144F5B907EBCA8774A5616FDFD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 13F3
Signing time: Tue 28 Jul 2026 18:00:58 +0000
Manifest this update: Tue 28 Jul 2026 18:00:58 +0000
Manifest next update: Wed 29 Jul 2026 18:00:58 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: iZ5HonhZBcqTlJ+c25n6MFVYIpyj0MSr94eC7hfGXl0=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:14:4f:5b:90:7e:bc:a8:77:4a:56:16:fd:fd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Jul 28 18:00:58 2026 GMT
Not After : Jul 29 18:00:58 2026 GMT
Subject: CN=d2c140d4cf1446180aa9a13b802b26e78db61ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:f0:3f:5a:45:83:0e:6f:6d:f3:97:11:9e:
9d:34:22:2b:5b:f8:60:70:8c:12:72:e9:b2:18:e0:
c7:79:1c:af:42:cd:9d:c8:55:09:cd:de:90:6a:37:
04:2b:ce:35:b8:9b:0f:81:94:cd:e4:98:dc:e0:35:
39:57:e4:51:6e:23:50:b0:9e:dc:32:73:83:71:99:
4f:be:0b:5e:64:60:6e:bb:f3:56:6a:17:31:ae:ec:
42:12:d2:45:4b:da:b8:ea:f7:9a:17:8a:6a:d4:1d:
78:be:9e:1a:70:68:eb:f8:d0:8f:83:10:64:e6:27:
f3:eb:ec:0d:31:4c:7c:15:0c:22:51:3d:ad:d5:67:
b7:b8:d4:52:82:18:88:b5:26:b6:c9:04:78:cf:ea:
7a:d6:4f:e0:a7:89:69:d4:b6:e0:f2:3d:08:f8:3a:
26:b3:05:72:ee:c1:04:01:77:c1:51:cf:9f:0c:da:
06:c4:2d:b9:b0:bb:46:98:60:fc:c1:70:04:3e:87:
bb:d4:38:cb:69:cd:6d:76:e0:ed:0a:21:88:22:0b:
74:89:80:5c:b1:e6:7a:44:31:f8:96:c1:24:4b:0e:
d8:06:ac:b5:62:06:ba:82:83:2a:bf:1e:ac:93:5f:
08:d8:75:ce:91:55:46:3c:e9:19:9c:73:0b:2c:cb:
f0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C1:40:D4:CF:14:46:18:0A:A9:A1:3B:80:2B:26:E7:8D:B6:1C:E0
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2a:e0:13:b9:cd:e3:d1:71:67:c8:35:f6:6d:fc:52:40:ce:
ed:c2:7e:bc:89:2c:f7:fc:01:6e:61:34:6d:8b:92:54:6f:f2:
9f:c0:28:81:d7:7f:2a:1b:a1:b7:35:3f:eb:64:b0:38:2a:c0:
03:ce:a4:ac:90:15:ef:1a:10:ba:22:85:73:33:a8:1c:9a:38:
6d:b0:ac:5c:40:5d:22:ef:58:d9:29:92:fc:3b:b5:47:44:94:
a2:a8:92:be:d6:11:68:d3:af:77:fb:1f:6d:b4:d1:b0:9a:2e:
11:e6:22:fa:75:da:80:1d:81:ae:87:ee:f4:4a:56:02:8b:28:
76:eb:85:be:6e:13:12:4d:8a:32:fb:a3:37:28:aa:c8:50:e8:
53:a3:32:1b:1d:bf:5a:55:e4:80:ef:28:47:4f:73:25:61:e8:
f0:a8:36:87:3d:a0:70:26:2b:86:3e:1e:1e:f1:6d:6a:e3:f3:
5f:b6:ad:d4:9b:f6:b6:a2:7c:7e:f7:b5:c7:7d:f1:56:c1:31:
3e:99:0b:85:93:9c:ca:47:b6:68:67:49:26:3f:10:87:fa:e4:
71:69:4b:b9:dd:07:0b:8c:da:93:f1:95:20:62:c2:34:57:a7:
7f:0e:eb:02:5c:07:d8:f1:2f:74:d0:f4:91:f5:76:3f:e5:fe:
b6:69:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:22 2026 by rpki-client