
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File: 9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier: gYzUQmo5oEGUHWN6u+x5KtfPGErZVNmwwiJbCRGFUzI=
Subject key identifier: 46:1F:EC:A7:2A:7D:53:10:05:C7:BD:56:8D:8E:03:96:D6:1A:50:04
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer: /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial: 019FA9759105AFDF5D1E76DCD4D7E0DB3DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:01:21 +0000
Manifest this update: Tue 28 Jul 2026 16:01:21 +0000
Manifest next update: Wed 29 Jul 2026 16:01:21 +0000
Files and hashes: 1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: 26Ttb+JBnINdlod+ITJzFrExmQFfLaX7AIjgms3QT/s=)
2: J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa (hash: vYs9Iafl6ODvzqSPTNj74leQVCe3/0UGQl7TxkQZF/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:91:05:af:df:5d:1e:76:dc:d4:d7:e0:db:3d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Validity
Not Before: Jul 28 16:01:21 2026 GMT
Not After : Jul 29 16:01:21 2026 GMT
Subject: CN=461feca72a7d531005c7bd568d8e0396d61a5004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:43:46:57:d5:b9:89:66:89:82:70:a9:4b:78:
0e:e9:22:a6:d7:09:60:1d:af:aa:14:2c:75:b4:03:
51:da:96:5b:b3:c9:b9:46:ff:b4:e9:98:f3:71:ad:
12:a6:80:66:f1:ee:71:e4:4a:71:fc:72:a2:e9:b8:
51:95:63:f2:f3:b8:06:02:21:17:30:dc:88:60:ed:
0d:dd:3f:a5:6e:df:e5:c3:19:b7:1c:fe:d4:07:4c:
8e:30:dd:18:f1:90:dd:e4:e6:d4:6e:85:ad:ce:21:
64:38:e7:de:f2:02:e5:a8:78:4c:47:80:2e:0c:45:
f5:9c:45:b9:84:4f:96:13:6d:16:ce:00:8e:b3:20:
68:58:ea:61:d1:fd:88:08:98:19:68:2b:af:c2:bc:
b5:8a:ca:35:df:8f:ee:b2:c1:52:e1:9c:16:cc:75:
61:37:68:cd:a3:a3:08:79:e8:06:e7:94:bd:e3:d9:
96:f4:64:85:ec:f7:c5:3e:ed:5e:91:28:8a:70:5c:
15:cd:83:fb:e1:c5:43:a4:4b:24:ed:e2:64:bf:7d:
3e:d2:23:2c:29:82:1a:3d:ec:11:b6:4c:35:93:7b:
f8:13:43:8f:8c:62:c4:b1:e3:c7:ee:87:53:88:11:
ed:c0:40:7f:21:bf:de:ab:69:b4:b9:77:31:2f:05:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:EC:A7:2A:7D:53:10:05:C7:BD:56:8D:8E:03:96:D6:1A:50:04
X509v3 Authority Key Identifier:
keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:51:df:5b:9a:a5:af:0a:80:ea:49:44:5a:65:3d:4b:fa:1b:
81:f4:4e:b6:41:31:b6:fe:0a:0e:91:7c:ed:41:b6:c1:51:89:
fd:17:91:5f:84:7e:8e:53:93:66:1b:35:f2:29:16:bc:75:47:
4d:d2:39:4b:02:8c:bd:82:88:b5:19:e2:44:76:ff:fb:73:ba:
2e:40:5f:3e:8c:5c:00:20:45:56:5c:3d:5a:3f:71:8d:75:43:
05:4c:c0:29:2c:20:41:ed:33:ed:5d:95:2b:cc:d5:09:16:a7:
b7:ae:76:b9:b2:e8:7c:e6:d8:14:1b:cd:01:22:60:1e:cd:32:
06:99:ec:fc:ad:7e:68:70:37:e6:eb:45:8e:17:d8:b5:c5:6e:
35:a7:fc:22:7c:68:4c:13:08:a9:af:e2:eb:26:15:74:8f:a7:
59:7d:bb:af:23:e0:a2:6c:5e:ea:f9:e6:c7:89:ca:58:9f:5a:
37:60:3c:99:73:70:1d:59:bb:4e:7c:03:19:4c:3d:a6:5e:31:
c8:a6:89:59:47:b8:b9:d0:dd:6a:28:c6:d0:78:dc:f6:6b:ae:
1e:ea:61:7d:93:a3:9d:53:59:64:f6:2f:ee:54:37:06:c7:4e:
62:53:97:c3:7e:c7:26:06:2c:d6:49:22:1b:07:29:f6:11:6c:
41:de:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:16 2026 by rpki-client