Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
File: A7zvl2ZC1UtLShmY8LP_SIRakm0.mft (raw, json)
Hash identifier: 1ceOUDUxA9hEAKtCXM4htIWkIkT0imc4ndwJv33gMWo=
Subject key identifier: 48:60:C0:F5:D9:9C:CF:20:09:D8:0D:86:EA:11:EC:DF:50:82:DB:55
Authority key identifier: 03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
Certificate issuer: /CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Certificate serial: 019FA9E2AC1B80DD58AD96A9497D83DE1EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
Manifest number: 13CD
Signing time: Tue 28 Jul 2026 18:00:32 +0000
Manifest this update: Tue 28 Jul 2026 18:00:32 +0000
Manifest next update: Wed 29 Jul 2026 18:00:32 +0000
Files and hashes: 1: A7zvl2ZC1UtLShmY8LP_SIRakm0.crl (hash: OOTeukRAZUPqyPI3NZdauWVo4RXi99kQz6lJDX5hD4c=)
2: EHGORi86xgHpvwoBk068qPN7iqE.roa (hash: YNshrsxOuHcW6UCsa9oev2SY9StlDKp1vMjVv/oevCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ac:1b:80:dd:58:ad:96:a9:49:7d:83:de:1e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bcef976642d54b4b4a1998f0b3ff48845a926d
Validity
Not Before: Jul 28 18:00:32 2026 GMT
Not After : Jul 29 18:00:32 2026 GMT
Subject: CN=4860c0f5d99ccf2009d80d86ea11ecdf5082db55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:db:06:f3:60:84:97:fd:2f:84:70:99:fe:
6b:d0:a4:91:73:1b:98:e5:b7:23:cb:c5:c1:fd:11:
94:46:55:46:3a:0d:94:b7:ff:cb:67:13:af:14:f5:
5e:f6:67:e4:a4:16:c3:30:7b:be:23:a1:84:d4:e1:
80:00:3b:ef:49:f8:8c:5b:bf:cc:6e:08:88:c4:f5:
18:a7:cc:1b:f5:97:ad:fa:7c:0e:69:86:2e:84:4d:
86:15:c8:6a:95:33:0d:70:5a:f5:68:45:d6:8c:e1:
2c:f3:56:c3:36:e5:0c:8a:51:04:b8:39:f2:70:96:
55:cc:b5:f5:9f:42:d5:35:eb:57:b1:39:84:9f:0e:
37:eb:1e:c9:be:a6:76:e1:90:d2:a0:76:e0:5c:bc:
52:f9:bf:f5:a9:17:08:c8:e7:97:f3:d3:93:f5:5b:
3c:32:f8:da:b7:46:8d:16:cc:b5:09:f5:56:b4:cc:
a9:62:93:6a:e6:a8:e3:5d:93:bd:aa:1f:fa:52:42:
38:6f:10:7b:49:2e:99:71:55:64:f0:2e:3a:78:b8:
2f:fe:ce:38:84:12:5b:2a:36:8a:3c:8f:61:94:33:
f6:01:1b:c3:36:30:5d:da:b7:e9:40:b6:18:5d:92:
d4:d5:76:37:51:76:b8:71:d4:f3:2a:13:e7:6b:d3:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:C0:F5:D9:9C:CF:20:09:D8:0D:86:EA:11:EC:DF:50:82:DB:55
X509v3 Authority Key Identifier:
keyid:03:BC:EF:97:66:42:D5:4B:4B:4A:19:98:F0:B3:FF:48:84:5A:92:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7zvl2ZC1UtLShmY8LP_SIRakm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cf6b07-03b2-4ebe-b966-f1e9bf2bff21/1/A7zvl2ZC1UtLShmY8LP_SIRakm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ac:eb:2d:30:61:2e:20:50:7a:ad:51:b2:1a:94:36:ba:16:
8d:2a:99:49:03:fe:dc:38:89:32:16:60:ae:e2:0b:b5:96:3e:
25:f1:c0:9f:25:98:cb:28:fa:5c:c7:ed:bb:b2:e0:1d:ce:1e:
92:ef:3b:16:63:a6:da:5d:22:ac:e6:97:79:a7:fd:b8:25:5e:
df:b5:8e:19:20:6f:ab:99:31:15:85:54:b9:08:c4:87:b3:c4:
1e:4b:99:c0:4a:81:e5:df:37:e5:8b:ed:c3:ee:8e:d4:b8:d5:
22:67:e0:3d:2f:bf:9a:51:ef:da:b6:7b:0b:93:24:56:79:6c:
80:d7:10:7e:fe:0d:4b:61:d0:86:02:39:11:c7:82:f9:3e:6e:
d3:2a:02:8c:f9:c6:5b:7b:e1:f8:95:d7:cc:c5:09:b9:a4:92:
4b:07:46:7e:29:8d:c7:de:37:43:03:8f:c5:af:6a:c1:50:7c:
3a:77:ae:42:a5:64:07:51:3d:61:e7:26:ba:7f:44:fb:1c:31:
8d:8c:0d:79:f5:6b:cd:bc:4a:7d:43:e9:e2:1a:04:bb:9e:51:
67:2e:08:39:43:0e:6f:e1:f2:fd:40:5b:ba:7d:53:07:bd:d2:
79:c1:ac:cd:9f:d4:e5:92:dc:1d:47:bd:8c:76:2e:6d:c3:dd:
02:49:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:40 2026 by rpki-client