Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File: AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier: dmuev3w55ffRCjS+5bg51C4CYautmtS0v1MhuTGXZ1U=
Subject key identifier: 42:A1:CF:5F:12:C5:28:89:E7:04:01:A7:7B:96:9E:FD:8A:92:B1:D3
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer: /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial: 019FAC0831B0C2C9CB62B14BA2D6D174C3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number: 041D
Signing time: Wed 29 Jul 2026 04:00:45 +0000
Manifest this update: Wed 29 Jul 2026 04:00:45 +0000
Manifest next update: Thu 30 Jul 2026 04:00:45 +0000
Files and hashes: 1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: PLlZVGhWLdylIS1z2AA1zcE/pJNGYmoUvwUgVxzYwdg=)
2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:31:b0:c2:c9:cb:62:b1:4b:a2:d6:d1:74:c3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Validity
Not Before: Jul 29 04:00:45 2026 GMT
Not After : Jul 30 04:00:45 2026 GMT
Subject: CN=42a1cf5f12c52889e70401a77b969efd8a92b1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:eb:85:4e:cc:84:b4:43:7f:28:e7:1e:54:
3f:a0:92:17:d5:85:75:d6:ca:34:43:8c:97:e5:78:
7f:b2:86:5f:f7:54:c6:40:46:da:29:24:2f:34:78:
ee:e1:38:a4:d3:3a:2b:f4:cc:d7:b1:d8:b4:e3:a2:
b3:92:4e:2b:98:d1:2d:c5:a9:a8:d7:a8:4e:de:72:
40:84:6f:a1:3d:99:30:76:2b:a3:b4:71:b8:10:88:
c0:2f:0b:c1:e6:1e:4c:ae:fe:3d:b0:fe:ad:93:c3:
fa:e9:65:fa:6c:c6:10:ac:d9:f8:a6:24:d8:0e:36:
2a:79:5f:c1:de:2f:e6:d2:8d:61:2b:0f:ec:f0:2f:
83:f9:a0:71:84:8c:b1:2a:98:d2:71:97:f2:bc:75:
a1:04:f2:fe:44:98:65:d2:d4:c7:6b:de:91:ae:85:
68:55:ac:65:ae:95:b3:ca:e6:d3:f3:e5:3f:d4:a7:
94:10:c0:55:a7:30:bf:df:2d:02:30:de:6b:0d:fe:
d7:e1:78:82:b8:86:ac:58:ba:d4:d1:51:fd:cb:65:
05:ef:fa:2f:5d:9a:fe:3a:35:8b:90:b4:fa:db:e7:
d0:53:35:5f:af:9a:da:c5:1e:1d:3e:79:6f:fe:e6:
fa:e5:10:73:b1:08:69:0e:7a:eb:84:3d:79:a5:56:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A1:CF:5F:12:C5:28:89:E7:04:01:A7:7B:96:9E:FD:8A:92:B1:D3
X509v3 Authority Key Identifier:
keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5b:00:af:b7:f9:b1:21:70:ac:72:d4:c2:a2:9e:b1:a4:09:
3a:7a:a1:66:2c:96:c4:22:d3:69:3b:c8:44:35:90:ff:c3:0e:
fd:65:f6:60:b8:8b:40:5a:bc:48:6f:56:8e:28:44:66:13:9c:
ed:c8:1a:a2:d5:1a:1a:27:64:de:3a:a9:f4:28:be:7c:48:53:
b3:49:8c:a5:41:98:5e:f8:0e:0c:1e:7b:07:4e:09:34:30:7d:
c3:bf:9a:dd:78:98:53:01:76:fd:82:55:ac:a1:3f:fe:71:c6:
bb:14:d5:b6:b4:a6:5b:62:f2:4f:cc:bd:d8:10:ff:4b:46:71:
b2:2b:9b:b3:5e:70:53:41:bf:f1:31:dc:f3:2b:90:d0:e0:3f:
68:ca:16:ce:65:ec:bc:e1:e6:0b:44:22:74:61:d6:f8:fd:f2:
83:c3:66:d9:70:ac:52:c0:00:b6:01:ae:73:61:97:91:cf:49:
67:d2:90:03:38:9b:5c:9e:76:48:e4:50:aa:62:89:cc:75:72:
16:d1:c9:b8:c7:c4:26:b8:fe:1a:1f:32:54:3f:06:b2:62:4d:
a3:94:73:c8:b4:1f:ef:cd:92:3e:5e:9f:d2:b3:dc:bd:51:f6:
f3:dc:f4:46:ae:52:78:85:1a:40:14:30:20:67:a1:8d:11:85:
99:c6:be:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:04:32 2026 by rpki-client