Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
File: A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft (raw, json)
Hash identifier: CrdSESYBEg8/lMpNEpzMGKLQCYVFnP1TIZSRy4wJ0so=
Subject key identifier: 92:75:B9:F2:52:31:49:E1:12:92:A6:83:ED:D4:5C:69:61:F2:F4:9F
Authority key identifier: 03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
Certificate issuer: /CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Certificate serial: 019FA7F430CF826E5AB25A3CA750CC2DAF10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
Manifest number: 15D7
Signing time: Tue 28 Jul 2026 09:00:25 +0000
Manifest this update: Tue 28 Jul 2026 09:00:25 +0000
Manifest next update: Wed 29 Jul 2026 09:00:25 +0000
Files and hashes: 1: A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl (hash: +QfAJZfBDeVnJT3AdBcZB0RgzAwkU445kgAcnnx20uc=)
2: _eHxxT7w7p8zXdXfwOcvwBUWOZg.asa (hash: rPV6p3Oid9sB7zS8sKU/96ebkCjQIbKliHkFe8R+sY0=)
3: slqn5dL5A6-inG9VYOPOO5syFQA.roa (hash: ZGuibTuZJhqRZ6jXpabK6PUC1atm+hDaHLYU3pkMqsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:30:cf:82:6e:5a:b2:5a:3c:a7:50:cc:2d:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03485fbdb0b1a04d52e81dcdb95858916a1ddae4
Validity
Not Before: Jul 28 09:00:25 2026 GMT
Not After : Jul 29 09:00:25 2026 GMT
Subject: CN=9275b9f2523149e11292a683edd45c6961f2f49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:ed:45:44:db:35:a7:d5:47:23:8d:c5:e5:
07:e6:ff:ba:af:8f:8e:c9:49:7c:52:d9:46:ac:63:
de:a0:1d:ff:37:ef:6d:90:47:8c:a2:af:44:4d:5b:
0a:9b:ba:53:56:e6:8a:8b:79:3c:b7:36:7d:31:f9:
69:85:40:42:dd:4c:dc:eb:5f:88:8f:1d:6f:3b:4c:
06:1e:80:a6:1e:b3:fa:30:7b:74:39:85:44:8c:39:
c1:21:bd:6b:56:55:48:3f:0e:91:40:bc:df:d1:31:
93:22:c5:b9:45:e4:22:6c:a2:f2:ab:7e:28:78:0a:
ad:23:db:c7:d6:ac:c1:b3:cb:58:a4:fd:91:0e:cf:
16:e7:29:2f:82:bf:3f:cd:f0:e1:8c:9d:de:31:c7:
9a:89:2a:6b:05:ed:ba:64:ad:63:96:a1:2d:68:d3:
c7:26:dd:94:8c:ed:92:54:aa:b7:d3:b5:1a:60:bb:
60:0a:de:66:2f:b9:1a:06:2b:c0:5e:d3:32:b8:d0:
ee:d3:d0:10:ff:77:06:3b:a0:b0:73:18:25:11:cf:
26:be:a8:b5:01:bf:1f:78:4b:ef:90:19:40:15:0f:
99:5b:67:d4:84:1b:c6:03:77:0e:be:2c:21:4a:90:
21:d0:01:6a:c6:b2:04:70:ea:da:67:43:76:a2:61:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:75:B9:F2:52:31:49:E1:12:92:A6:83:ED:D4:5C:69:61:F2:F4:9F
X509v3 Authority Key Identifier:
keyid:03:48:5F:BD:B0:B1:A0:4D:52:E8:1D:CD:B9:58:58:91:6A:1D:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0hfvbCxoE1S6B3NuVhYkWod2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/524e5b-a8ae-45ab-bbd9-4491845dcd47/1/A0hfvbCxoE1S6B3NuVhYkWod2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ce:0f:70:97:c7:fa:05:34:bd:dc:cb:fe:a3:7e:03:5d:4d:
b5:32:0f:5a:dc:4f:a8:01:a6:97:8f:3d:de:ac:2d:2c:25:72:
4f:75:79:91:f5:ac:3c:db:27:5e:42:48:5c:37:f9:48:80:11:
1b:e4:73:a5:5b:36:ed:51:d9:00:2e:d1:7d:9c:3d:89:5a:b7:
2a:2f:70:cf:4e:44:55:9e:9b:6f:ed:6a:8b:2f:ea:2f:63:41:
14:e7:43:4a:f2:09:8d:8a:7d:77:f9:ec:a7:e0:ec:4c:bf:95:
9c:7a:d5:a9:fd:2b:51:76:43:0b:f7:76:fd:fa:df:e9:d3:f1:
67:46:36:93:31:6b:b0:64:74:49:ad:81:6e:e2:14:72:36:fb:
fe:cd:9c:09:75:ee:78:ba:8d:f8:c2:c0:3f:88:4c:14:65:0a:
a1:18:5b:a5:d7:d0:e4:14:d8:18:10:ba:1d:00:1a:b4:65:f2:
22:bf:3f:91:56:6a:3f:6b:4e:59:96:fb:8f:8e:01:db:f6:6b:
13:ee:42:48:b1:95:c7:1b:26:d2:36:c2:d9:6c:72:b5:ed:b0:
fa:f0:1f:1e:0e:b7:2d:3e:f5:19:19:86:f4:f0:30:d6:e1:05:
04:9b:6c:3f:2a:94:d0:2c:00:ac:25:d3:93:b4:94:a7:b2:01:
50:e1:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:31 2026 by rpki-client