Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: jGV6HQay0OMK+IfPEd7SYAJaxhzHzENL3p/2eg417qw=
Subject key identifier: 21:B8:E9:D2:D7:E5:65:6D:13:D5:97:6E:49:29:C3:64:A8:7F:64:C5
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 019FAA87DD9D88A5640780422A1A7E6B8C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 074F
Signing time: Tue 28 Jul 2026 21:00:58 +0000
Manifest this update: Tue 28 Jul 2026 21:00:58 +0000
Manifest next update: Wed 29 Jul 2026 21:00:58 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: gBawf7n/G0WNlCw75oIM3FKxC64dvBnZbUZv5Fc2YOE=)
2: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (hash: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:dd:9d:88:a5:64:07:80:42:2a:1a:7e:6b:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Jul 28 21:00:58 2026 GMT
Not After : Jul 29 21:00:58 2026 GMT
Subject: CN=21b8e9d2d7e5656d13d5976e4929c364a87f64c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:21:a7:d1:76:8a:02:b2:20:b6:fa:a2:5c:
a0:c3:aa:39:4a:5a:85:cb:25:09:66:c4:ad:82:0e:
0c:9a:48:3f:93:d3:8e:97:c8:04:2e:54:31:e4:39:
f2:7f:05:fc:73:96:40:33:11:ca:82:5b:62:48:08:
d7:fb:7f:3e:e9:05:90:91:07:7a:c4:18:a1:89:af:
68:8b:ef:d5:8a:42:e7:cd:b6:28:df:92:0f:1e:e0:
b4:a3:23:78:f0:94:73:d3:a1:ef:2d:27:3a:10:50:
81:97:fc:96:f4:db:f7:31:71:dc:03:6e:44:a9:ed:
f6:7f:03:87:06:4f:be:00:0c:bc:2e:8f:62:32:b5:
10:80:d0:80:5a:ab:3c:3b:de:cd:a0:52:ff:f7:ac:
d3:a2:49:25:f7:f0:d2:94:bf:d9:f3:ca:aa:2f:fb:
9f:40:ba:89:d8:ca:cd:df:c5:ca:80:8e:ea:bf:37:
69:d9:9e:a0:31:fd:a1:9a:a1:96:d8:ab:b5:93:dc:
22:40:bf:63:ae:3b:3d:94:c3:c8:f4:ee:8c:05:25:
e7:59:7f:95:98:28:fd:4f:f8:3f:43:bc:53:3f:4e:
de:4a:02:88:27:04:bf:6f:98:e5:87:9f:6a:62:b6:
94:d9:25:8a:c9:a0:62:94:e0:b4:07:86:db:a8:ba:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B8:E9:D2:D7:E5:65:6D:13:D5:97:6E:49:29:C3:64:A8:7F:64:C5
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f2:33:80:fb:a1:47:da:f9:a7:a2:ec:28:03:92:be:b3:0d:
e9:c6:b4:d1:62:1a:88:d9:5b:72:ad:73:b4:bd:90:03:81:70:
45:ad:1d:47:a0:04:d5:c8:2a:8c:13:89:20:27:68:e4:5c:6a:
50:56:23:ec:75:40:10:b6:ae:52:b5:d4:ea:bb:54:be:e2:e7:
56:f0:6c:fb:26:2c:d7:73:a6:0c:34:06:3b:e2:06:d4:ae:71:
a5:a8:87:fd:cf:f8:8e:12:cf:cc:06:45:8f:39:3d:02:ab:af:
fb:12:a3:47:56:58:49:6c:3d:0c:26:64:58:31:f2:fb:93:1d:
c1:c3:03:db:1c:65:7a:9f:6d:d7:b0:6c:bb:46:64:76:dd:e3:
b6:97:41:2a:a9:9c:c4:d4:b1:62:95:3b:27:6b:1e:fb:03:60:
55:9f:9d:38:79:f3:4e:3f:3e:b2:c7:ec:e1:63:52:65:3b:36:
50:4e:b2:5f:cb:72:9a:39:67:3c:4d:0c:5b:66:26:d6:7d:51:
f4:d0:37:d1:03:e8:fa:41:ae:6d:fa:5b:eb:82:3d:04:52:f7:
56:8c:41:e2:e5:0f:15:64:70:08:cf:a4:36:3a:d5:71:de:b6:
67:41:6f:26:7e:d3:57:ab:48:d7:a0:83:6f:2f:47:a2:9f:50:
5d:96:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:43:10 2026 by rpki-client