Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
File: A_g_WVVmnLCoGPusAnxoKurtXXI.mft (raw, json)
Hash identifier: M70KnGVLS3ABxmAjVJQRqgb35M0WVGKIRpLq3wkZh+k=
Subject key identifier: EA:7A:35:BF:CB:94:84:17:B8:1F:CE:E1:9F:E1:70:BB:A1:A6:7B:B6
Authority key identifier: 03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
Certificate issuer: /CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Certificate serial: 01A0C368D76B76795ABCFD0D3FD0B6F2D59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
Manifest number: 1584
Signing time: Mon 21 Sep 2026 10:00:22 +0000
Manifest this update: Mon 21 Sep 2026 10:00:22 +0000
Manifest next update: Tue 22 Sep 2026 10:00:22 +0000
Files and hashes: 1: A_g_WVVmnLCoGPusAnxoKurtXXI.crl (hash: gKCXhJRuKnMbyXv7Wy0d7FEZsmpDiDOXgbHWu8GOJI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:d7:6b:76:79:5a:bc:fd:0d:3f:d0:b6:f2:d5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f83f5955669cb0a818fbac027c682aeaed5d72
Validity
Not Before: Sep 21 10:00:22 2026 GMT
Not After : Sep 22 10:00:22 2026 GMT
Subject: CN=ea7a35bfcb948417b81fcee19fe170bba1a67bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:a1:bf:53:e5:8a:4c:33:54:be:e8:34:69:
cf:b0:23:6e:18:0f:8c:41:7c:57:c0:bc:5f:cc:95:
96:6c:5a:74:0b:50:bf:1d:6f:aa:aa:49:80:5c:03:
8a:70:2c:45:29:c5:cf:98:c5:fe:cd:c4:8d:2c:8c:
8e:b3:71:bf:b7:4c:19:84:ee:76:e8:7a:ad:8a:46:
5a:ba:9c:4d:5b:a0:f9:8b:c1:07:9f:4c:9f:b9:02:
24:e1:4b:a7:9e:a9:d5:77:75:f1:f7:a4:bc:74:35:
a2:1e:1b:8f:d5:d3:c3:54:87:0a:57:c6:8a:05:21:
63:0f:45:a1:ec:a8:a5:50:e7:f1:22:f8:6f:cb:2f:
68:be:07:51:0e:1d:fa:7f:1c:57:d8:06:70:60:b8:
57:e5:f1:ab:fb:5c:c8:54:2f:18:07:2a:25:ba:3f:
0a:23:c2:ce:3a:5c:be:fa:78:8b:9d:12:ea:5d:66:
4d:e7:3f:68:47:7f:13:98:30:c1:b2:b9:7c:9e:db:
1a:d1:d8:50:6d:9e:9f:08:ba:89:a6:73:89:2c:ba:
5b:87:be:5d:c2:cb:a3:d1:34:52:49:d2:2d:b4:d4:
59:a5:e8:94:5a:44:2b:c5:4e:4e:d9:f4:0b:b6:20:
58:e5:46:d5:84:6e:f3:13:b9:89:4d:cd:60:10:4c:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7A:35:BF:CB:94:84:17:B8:1F:CE:E1:9F:E1:70:BB:A1:A6:7B:B6
X509v3 Authority Key Identifier:
keyid:03:F8:3F:59:55:66:9C:B0:A8:18:FB:AC:02:7C:68:2A:EA:ED:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g_WVVmnLCoGPusAnxoKurtXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/afbb0f-4a9a-4c30-8a62-f16f1a70ab2d/1/A_g_WVVmnLCoGPusAnxoKurtXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:8e:08:82:bf:76:5e:d8:70:23:cf:13:e1:e6:81:01:8b:1c:
c6:fe:9c:0a:b4:e2:cf:fe:f2:60:26:bc:bb:7e:70:95:5d:2d:
50:41:8e:b4:19:ec:af:30:f6:59:ba:45:75:24:6f:3a:86:eb:
bd:b0:6b:d2:d0:6a:30:87:91:c9:5f:46:a5:ea:b6:3b:8b:27:
72:56:f9:7b:3a:e7:5d:5f:e3:2b:55:fb:20:db:96:15:e9:df:
68:88:21:a8:67:8b:9f:0d:85:ac:fc:0d:40:4a:2b:eb:8d:2f:
55:4f:27:c2:8e:13:55:34:8a:58:ec:75:0d:01:b3:f4:71:74:
72:1e:ab:b1:f9:fe:cd:d2:31:0c:6f:16:f6:25:08:36:a3:0e:
e4:0b:1e:60:7c:15:87:ef:f7:53:0d:81:1a:8c:57:af:52:ed:
fd:ac:6f:39:b2:08:9f:33:cc:ad:d8:2a:51:6c:48:6b:01:31:
b5:20:60:0d:8d:25:f3:af:70:5a:56:aa:69:8e:5f:db:a9:82:
b8:1e:85:ee:d3:c5:74:bc:aa:bd:c1:a7:5f:ee:e2:67:63:83:
62:d7:f7:d9:f8:25:22:de:18:04:34:4f:b1:ae:fe:01:f3:5d:
a8:76:af:dd:03:2a:ac:cc:67:9e:8f:9a:2b:9e:09:13:b2:81:
54:00:35:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:55:57 2026 by rpki-client