Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: FGCdWov6Iu6k5pL1lW6/b/sLhzVHr2okswuqrHk6/Zc=
Subject key identifier: 56:8F:06:4D:B7:91:EA:0D:D7:DC:76:0B:CE:67:17:56:DF:FB:60:D9
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 019FA8991AF4A83A00ADA8CD5046688A5E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0AEA
Signing time: Tue 28 Jul 2026 12:00:33 +0000
Manifest this update: Tue 28 Jul 2026 12:00:33 +0000
Manifest next update: Wed 29 Jul 2026 12:00:33 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: g4XKLuSZZntgqYiklYfi82aJd+GS47Gy9lNosrejfc4=)
2: D-pDOX5ZXtdIZnyN7bsDrJe1gOo.roa (hash: JQkmlm3wSiHNU9bdVvmkiiM/K5jDVTyxbR5FyQCgkBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:1a:f4:a8:3a:00:ad:a8:cd:50:46:68:8a:5e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: Jul 28 12:00:33 2026 GMT
Not After : Jul 29 12:00:33 2026 GMT
Subject: CN=568f064db791ea0dd7dc760bce671756dffb60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:fe:0b:eb:7a:2e:3d:3c:1c:cb:92:1c:7d:
f2:c2:47:70:09:c5:db:9b:51:bf:56:f9:24:63:6d:
ae:29:4e:25:22:1a:32:fa:84:94:f2:2c:2f:b3:e5:
74:c1:c6:c5:d8:b9:11:76:1f:3d:ef:87:ae:bc:63:
bc:22:8b:2a:e6:55:29:b1:a4:c1:94:b6:27:28:f1:
ea:8d:4a:47:91:ac:c5:54:c7:c3:57:f7:c0:f2:38:
b9:9b:5f:58:0c:30:fd:af:71:93:5a:54:79:ed:c0:
41:1f:1e:4e:4d:4a:b4:41:7d:a9:44:0b:3a:68:99:
ac:3f:38:a7:05:61:9b:00:13:42:a2:17:04:c4:0a:
58:8c:ac:b4:9a:e3:cd:83:45:dc:ac:e6:4b:69:4e:
f6:59:fc:49:ba:3a:b7:e0:1c:b1:5c:a2:42:88:cb:
10:80:a7:68:d1:34:cc:42:2c:a9:50:70:78:09:6a:
16:74:2e:51:cc:c3:81:f7:17:aa:76:7a:85:d9:ee:
b0:e6:42:b0:8a:b4:7e:e6:67:bb:73:74:13:3d:08:
85:68:1d:0c:d4:52:8d:87:cb:79:5d:1e:50:ad:87:
2a:6f:e6:aa:b1:15:e4:b1:c4:79:a9:89:b8:bc:8b:
65:2f:e5:df:68:f5:0e:11:8e:c0:ef:9b:a8:88:9b:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8F:06:4D:B7:91:EA:0D:D7:DC:76:0B:CE:67:17:56:DF:FB:60:D9
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:e8:da:b3:9f:1a:5a:55:36:7e:26:57:46:cc:66:53:65:
a6:74:6c:fe:6d:dc:fe:4e:7c:29:e3:e8:68:24:59:62:22:b9:
bd:6a:87:fd:62:be:5d:b8:50:97:ba:22:30:d9:f3:5b:2a:15:
15:00:82:16:4f:99:0c:a3:b5:b6:85:79:09:57:4f:cf:b1:48:
6b:ad:d1:12:63:02:e4:25:22:e0:27:81:5d:4d:f1:de:02:d3:
4c:17:00:6a:7f:8a:40:e6:0e:9d:dc:47:42:d6:a1:ab:eb:3e:
ed:48:ae:cc:07:9f:99:b0:c5:75:d7:05:1c:13:7b:f4:05:20:
07:a8:e5:2a:df:d3:31:c2:8a:8d:2a:aa:e7:23:c2:77:ce:17:
1b:67:0b:60:30:91:0f:46:27:f8:75:4b:38:d3:59:2d:b1:19:
43:a8:ff:ba:a3:5f:59:31:24:74:1c:07:2b:a9:79:68:1c:59:
b3:c8:bd:d8:b1:25:0c:39:92:6b:cc:02:fc:5b:1f:26:e0:b1:
83:a3:cb:ec:9c:c2:a4:cb:36:4f:03:03:e4:f6:e7:87:72:7b:
9f:47:8c:c3:a1:ea:49:78:bc:a9:90:0f:26:b2:59:53:c5:c0:
9d:4e:90:e2:5e:ce:87:2a:7f:ec:c2:e0:6e:c8:e7:21:f6:f3:
97:02:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:23 2026 by rpki-client