Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: Xry+hNah5LhL63SpH4VLzskVWiUiNSDPwzX1l5q2pSM=
Subject key identifier: 4C:64:EF:50:DF:90:32:13:4E:85:61:0F:74:3E:9F:78:9F:3B:0B:70
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 019FA7F4175FDAE53134DA023338AE12B125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 1073
Signing time: Tue 28 Jul 2026 09:00:19 +0000
Manifest this update: Tue 28 Jul 2026 09:00:19 +0000
Manifest next update: Wed 29 Jul 2026 09:00:19 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: xkgeHwdEGgHTgGA/BU16SWgXTbNIUwsJTlzXqXGWQg8=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:17:5f:da:e5:31:34:da:02:33:38:ae:12:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Jul 28 09:00:19 2026 GMT
Not After : Jul 29 09:00:19 2026 GMT
Subject: CN=4c64ef50df9032134e85610f743e9f789f3b0b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:32:2b:a9:83:e4:bd:52:7e:05:f8:4b:45:
18:db:29:95:ca:17:54:0a:c8:0e:0b:89:18:ef:19:
23:73:6b:44:a4:c6:1e:77:39:f0:d7:e3:3a:fa:6c:
93:1e:ba:3c:1c:0c:d9:c4:4f:4b:86:15:df:75:ef:
f8:32:4a:6f:47:2f:2c:bd:92:8a:91:6f:8b:cd:ea:
a8:92:40:da:45:87:e7:f7:42:15:51:61:dc:62:74:
fd:32:18:94:f9:fe:e8:1e:9c:d7:dd:8c:c8:48:8f:
dc:9b:95:b4:31:9c:f1:f3:ac:4a:ac:6f:0a:45:e1:
20:a0:1d:8d:70:34:9f:d8:82:47:01:42:c4:cd:c8:
ed:51:fe:02:26:80:7c:3d:d2:5d:bc:d9:09:aa:16:
fd:dd:1d:a6:2a:e9:b8:70:03:94:4e:bd:54:27:8f:
3a:bc:ea:e4:47:d3:d5:eb:f8:f3:a4:c6:c6:aa:e3:
88:c9:55:79:5f:15:7d:1f:74:da:b9:54:0f:fe:57:
17:0a:bf:45:5d:01:89:ad:63:67:37:a8:64:f7:b1:
10:8d:6b:4f:5c:9d:20:b1:2b:d1:29:2c:d5:3f:9b:
32:c7:9c:7f:22:f5:67:80:85:29:73:fe:e2:a5:64:
a4:21:b7:36:f7:0c:b8:d5:ee:ac:1a:a8:b2:42:0e:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:EF:50:DF:90:32:13:4E:85:61:0F:74:3E:9F:78:9F:3B:0B:70
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:b7:84:26:91:e0:86:87:1c:9d:a7:16:8b:5d:47:49:04:
3b:79:ba:a4:7b:8c:84:f0:a7:f0:6c:e6:7f:fc:bc:5d:9c:bf:
92:2e:27:b7:0b:a5:ac:63:6b:35:b5:7f:e5:e5:16:c2:b7:f2:
4a:2d:2c:2a:92:2e:7c:29:ce:32:41:5e:85:f8:e4:30:96:46:
87:79:21:b9:46:64:0a:22:60:ea:58:45:e4:f7:8d:1e:69:21:
d5:a9:de:b1:48:bd:99:84:86:20:f6:3a:be:ee:31:cc:36:7c:
e8:aa:7a:89:59:37:1f:f3:88:27:84:cf:d6:25:52:cd:c2:9a:
a4:00:96:e2:c6:66:05:89:2b:08:d4:df:41:48:9e:51:6a:da:
b5:0e:a1:a4:a0:36:29:4a:ea:83:d0:d8:8a:99:84:a7:e2:63:
bb:1d:cd:b6:12:2e:db:41:d8:ed:39:19:85:26:a3:bd:6a:e2:
ca:e8:14:e3:8d:ba:06:8b:49:92:03:89:af:2a:bb:c0:f1:f6:
7d:b0:33:7b:bf:43:45:e1:ee:f7:46:d6:20:48:d1:bd:a7:24:
12:64:0e:fd:fd:8b:10:fb:67:d0:5c:e0:8c:ee:47:d2:93:28:
e7:fe:23:3a:a3:78:d8:14:0d:58:3c:2f:65:e9:4d:c4:a4:5f:
40:6f:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:10 2026 by rpki-client