Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
File: Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft (raw, json)
Hash identifier: fz/3Ni7ZefuVPmAhSzfK/IS7Tx7hGS2DpbMopnhqGPE=
Subject key identifier: 02:7F:4A:F8:C8:40:23:0F:69:53:BE:B3:75:C4:D5:B8:20:7B:5A:85
Authority key identifier: 02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
Certificate issuer: /CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Certificate serial: 019FA8623EDD9A9A2313FFDFEC6C68B32F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
Manifest number: F9
Signing time: Tue 28 Jul 2026 11:00:38 +0000
Manifest this update: Tue 28 Jul 2026 11:00:38 +0000
Manifest next update: Wed 29 Jul 2026 11:00:38 +0000
Files and hashes: 1: Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl (hash: B48lZGprVRv3QS+PZinvWxmYqUcFYkb7AKUeG9hbHcQ=)
2: VYFbbCZGX6OViZYJs2QJsv7BOWs.asa (hash: aA2l1O9+TsmhM1jTSdaJv3MOhZ42Fqiq9eSX13sVeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:3e:dd:9a:9a:23:13:ff:df:ec:6c:68:b3:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Validity
Not Before: Jul 28 11:00:38 2026 GMT
Not After : Jul 29 11:00:38 2026 GMT
Subject: CN=027f4af8c840230f6953beb375c4d5b8207b5a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:d0:1b:66:1e:2c:52:1a:d4:e3:15:a0:06:
37:7d:01:c0:fc:31:17:c7:97:57:e3:dc:eb:4b:c8:
5b:12:d3:be:bf:e1:ac:5b:38:f5:6f:d7:ad:b1:67:
1b:c8:fd:6c:31:bd:02:c7:30:87:8f:20:fc:fd:82:
e5:5b:61:29:b0:30:ec:aa:cf:e5:a2:7b:49:42:d6:
95:76:12:b2:b3:20:36:4e:79:fb:50:a6:b2:66:9d:
de:b3:e8:39:58:09:88:06:ed:c3:d4:d3:c3:0c:a7:
40:8a:30:14:1b:60:73:ab:5e:10:5d:75:b2:4c:9f:
45:a0:5f:a3:82:03:8f:09:cf:45:a8:d8:ca:bb:0f:
37:2b:98:98:24:99:76:4f:5b:73:31:b4:b2:21:91:
73:b4:8c:85:3f:00:3d:cb:41:df:69:5a:77:62:26:
73:9e:e1:29:23:5c:df:16:21:17:4d:86:d4:8a:17:
0b:7d:55:e5:f7:bf:f0:d4:fb:3f:b7:b7:0a:9a:ae:
06:49:36:6d:5c:92:65:7c:50:c9:13:a0:88:59:d2:
fe:c0:cd:ef:63:01:f1:81:5e:72:0a:c2:a7:fc:31:
cb:35:ac:fa:c6:b1:1f:e4:33:24:d7:7a:4a:18:b5:
44:d3:88:19:ed:07:60:ad:93:63:b8:14:c7:e7:ba:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:4A:F8:C8:40:23:0F:69:53:BE:B3:75:C4:D5:B8:20:7B:5A:85
X509v3 Authority Key Identifier:
keyid:02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ed:90:f0:80:1d:8c:b2:a2:cf:65:cf:07:1b:02:ef:a6:4f:
48:55:7d:8f:8f:45:ea:e3:b6:35:3a:36:7d:eb:8a:0f:aa:ae:
ff:cc:f8:9e:6f:3d:52:40:84:83:65:c8:10:05:62:25:f6:46:
f6:87:6c:2f:0b:e6:47:de:af:71:36:97:8c:01:41:e1:2a:82:
07:5a:df:60:5e:55:f0:1e:9e:53:b5:e2:69:43:9b:92:79:8e:
8b:17:62:58:ab:86:4d:b1:42:fd:a3:a1:db:d6:21:68:8b:d7:
79:54:0f:57:06:8d:91:bf:7b:0a:0d:03:dd:95:7c:51:72:44:
1a:06:29:e3:1f:57:96:c0:05:ff:fa:91:7f:78:c4:21:47:ba:
52:73:c7:09:16:45:a9:5d:3f:f2:98:1e:94:27:8f:bd:c9:85:
24:70:44:46:91:32:0f:5d:8f:5b:34:bc:ed:c5:cf:62:c9:73:
e6:98:da:c1:fc:21:07:c7:b3:d3:06:55:a7:ba:54:a5:03:49:
21:ff:7c:06:af:71:0e:54:89:db:76:88:56:49:b8:ea:7b:b8:
61:d7:f0:ee:8a:09:4b:e3:f1:14:48:ba:6d:d0:f6:9c:bf:c1:
ab:c0:b0:9c:72:70:e0:eb:42:a6:da:69:06:30:b6:50:79:e9:
58:01:20:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:00 2026 by rpki-client