Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
File: A2hHspcjX68HFob-0sHpEL9gBIY.mft (raw, json)
Hash identifier: ojyNdTSWxm+vQZ/7giNKKUyHRBrldGzsz/YYUqU3cXQ=
Subject key identifier: 04:FA:B6:90:4D:88:E0:33:09:10:D8:EC:D7:57:60:94:FF:AD:6D:13
Authority key identifier: 03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
Certificate issuer: /CN=036847b297235faf071686fed2c1e910bf600486
Certificate serial: 019FA82BF18D14B2CC46348C9B349845ED70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
Manifest number: 1662
Signing time: Tue 28 Jul 2026 10:01:19 +0000
Manifest this update: Tue 28 Jul 2026 10:01:19 +0000
Manifest next update: Wed 29 Jul 2026 10:01:19 +0000
Files and hashes: 1: A2hHspcjX68HFob-0sHpEL9gBIY.crl (hash: hYl4lqZ30kQBwqGHLDQbnsbf6gu8W+FYaBSIOLslGdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:f1:8d:14:b2:cc:46:34:8c:9b:34:98:45:ed:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036847b297235faf071686fed2c1e910bf600486
Validity
Not Before: Jul 28 10:01:19 2026 GMT
Not After : Jul 29 10:01:19 2026 GMT
Subject: CN=04fab6904d88e0330910d8ecd7576094ffad6d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:16:40:40:a8:0a:3a:ec:39:ac:c6:e1:74:
2d:17:96:41:6a:1d:83:29:47:9c:c4:d6:4f:76:bc:
eb:71:73:ce:84:4f:13:58:0b:88:be:35:0d:9e:1d:
eb:ab:5d:09:c6:7c:32:af:d9:6e:3a:7a:7f:c1:88:
ee:33:0d:d6:5d:22:3e:ae:4a:94:19:7f:16:6b:76:
30:c9:97:a4:a0:ff:66:2d:5f:70:96:12:9f:f7:7e:
14:fe:a3:d3:95:d4:fc:bb:b5:46:0a:83:67:b5:c4:
e3:ff:94:08:28:a1:3c:52:58:10:86:2a:52:89:7c:
38:fe:22:e1:d3:39:05:44:02:28:32:7f:5f:1b:5a:
06:a5:9b:73:7d:c0:cf:19:11:86:34:78:6d:e1:74:
fc:9b:37:f6:fc:40:20:8f:06:6a:20:ce:44:11:7e:
df:10:3a:aa:ef:f4:48:c4:8c:1e:79:bc:be:d2:46:
e2:8d:9b:4f:b9:4d:40:a2:cf:f4:55:84:10:c7:2f:
21:33:aa:84:ab:c8:78:c7:29:bd:80:bf:d6:0e:66:
4b:90:5e:5b:bf:78:bb:74:40:be:5b:5b:4f:a3:4b:
c2:9a:8e:2e:50:b1:36:5f:0a:7b:ba:ca:65:f2:7b:
7d:ca:22:58:25:5c:35:eb:2a:1d:9e:2b:a0:a2:d2:
ad:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:B6:90:4D:88:E0:33:09:10:D8:EC:D7:57:60:94:FF:AD:6D:13
X509v3 Authority Key Identifier:
keyid:03:68:47:B2:97:23:5F:AF:07:16:86:FE:D2:C1:E9:10:BF:60:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2hHspcjX68HFob-0sHpEL9gBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/44b797-cd5b-4ded-a562-bdd7328e94cb/1/A2hHspcjX68HFob-0sHpEL9gBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:20:59:ea:70:09:f4:20:58:b8:ac:c8:21:d1:8b:e8:c6:90:
10:14:43:1f:f6:0c:b4:50:10:57:04:08:2c:45:f3:fd:20:bc:
89:e1:a6:8a:07:d2:62:cf:54:9d:79:5f:6d:80:d9:19:bd:04:
1e:b8:93:93:78:c8:3a:37:11:ca:f9:73:77:9f:d6:55:b3:76:
cc:ea:20:a0:07:81:32:38:3e:98:f6:85:a3:4a:a0:9f:ca:c5:
77:74:91:e0:f6:73:b6:dd:c0:59:c9:82:39:05:d9:f0:e9:14:
02:da:7f:f8:56:17:f9:3d:a5:66:0a:7b:b4:f0:24:1b:a7:18:
2c:82:fd:30:ec:44:b7:85:aa:c7:48:db:4e:dc:73:c7:e6:42:
5e:a5:e6:f6:de:41:67:90:93:1f:95:13:50:8c:0a:96:44:b2:
f7:8d:5a:c1:87:0e:07:c7:bf:2e:d5:f8:3d:dc:2b:26:2a:14:
28:da:eb:bc:ef:97:4d:a4:1f:ad:cd:5e:0e:19:31:3e:d8:38:
01:78:4c:38:48:70:9f:e3:56:a9:21:b9:2d:5c:1d:72:ef:3d:
d5:79:be:78:41:b5:55:66:c9:da:65:c6:d1:02:5c:eb:4b:82:
da:a8:13:37:61:39:06:76:31:9c:9b:b5:77:21:d7:da:3b:9b:
fc:15:af:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK/GNFLLMRjSMmzSYRe1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjg0N2IyOTcyMzVmYWYwNzE2ODZmZWQyYzFlOTEwYmY2
MDA0ODYwHhcNMjYwNzI4MTAwMTE5WhcNMjYwNzI5MTAwMTE5WjAzMTEwLwYDVQQD
EygwNGZhYjY5MDRkODhlMDMzMDkxMGQ4ZWNkNzU3NjA5NGZmYWQ2ZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+cWQECoCjrsOazG4XQtF5ZBah2D
KUecxNZPdrzrcXPOhE8TWAuIvjUNnh3rq10Jxnwyr9luOnp/wYjuMw3WXSI+rkqU
GX8Wa3YwyZekoP9mLV9wlhKf934U/qPTldT8u7VGCoNntcTj/5QIKKE8UlgQhipS
iXw4/iLh0zkFRAIoMn9fG1oGpZtzfcDPGRGGNHht4XT8mzf2/EAgjwZqIM5EEX7f
EDqq7/RIxIweeby+0kbijZtPuU1Aos/0VYQQxy8hM6qEq8h4xym9gL/WDmZLkF5b
v3i7dEC+W1tPo0vCmo4uULE2Xwp7uspl8nt9yiJYJVw16yodniugotKt9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT6tpBNiOAzCRDY7NdXYJT/rW0TMB8GA1UdIwQY
MBaAFANoR7KXI1+vBxaG/tLB6RC/YASGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJoSHNwY2pYNjhIRm9iLTBzSHBFTDlnQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80NGI3OTctY2Q1Yi00ZGVkLWE1NjIt
YmRkNzMyOGU5NGNiLzEvQTJoSHNwY2pYNjhIRm9iLTBzSHBFTDlnQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80NGI3OTctY2Q1Yi00ZGVkLWE1NjItYmRkNzMyOGU5NGNi
LzEvQTJoSHNwY2pYNjhIRm9iLTBzSHBFTDlnQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyBZ6nAJ
9CBYuKzIIdGL6MaQEBRDH/YMtFAQVwQILEXz/SC8ieGmigfSYs9UnXlfbYDZGb0E
HriTk3jIOjcRyvlzd5/WVbN2zOogoAeBMjg+mPaFo0qgn8rFd3SR4PZztt3AWcmC
OQXZ8OkUAtp/+FYX+T2lZgp7tPAkG6cYLIL9MOxEt4Wqx0jbTtxzx+ZCXqXm9t5B
Z5CTH5UTUIwKlkSy941awYcOB8e/LtX4PdwrJioUKNrrvO+XTaQfrc1eDhkxPtg4
AXhMOEhwn+NWqSG5LVwdcu891Xm+eEG1VWbJ2mXG0QJc60uC2qgTN2E5BnYxnJu1
dyHX2jub/BWvzQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:55 2026 by rpki-client