Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File: cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier: 2DJEo5lXmRRHTkbXdn3PcNDOrnekkuGj2KqLgIdzpd4=
Subject key identifier: 39:60:E2:3F:BF:8B:2E:D4:30:C7:BE:4E:01:7D:7F:1F:84:67:79:47
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer: /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial: 019FA93DDAAD857FD2C6BDB5686617FAD0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number: 0143
Signing time: Tue 28 Jul 2026 15:00:30 +0000
Manifest this update: Tue 28 Jul 2026 15:00:30 +0000
Manifest next update: Wed 29 Jul 2026 15:00:30 +0000
Files and hashes: 1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: +M6dybRipxH+l8ktcY+CWP+c4vOUo+QBMNOOPArpMsg=)
2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:da:ad:85:7f:d2:c6:bd:b5:68:66:17:fa:d0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
Validity
Not Before: Jul 28 15:00:30 2026 GMT
Not After : Jul 29 15:00:30 2026 GMT
Subject: CN=3960e23fbf8b2ed430c7be4e017d7f1f84677947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:75:e1:b8:d4:81:c2:b1:6c:4e:ae:0f:00:
da:78:9a:69:f0:86:4a:f0:59:0d:74:86:ad:83:7e:
62:52:ea:4c:71:5d:51:e1:fa:16:44:ce:87:8e:94:
02:41:77:98:14:5d:13:02:c9:af:59:45:59:f8:0a:
04:07:63:5d:e1:b5:53:7e:c0:04:cd:03:ed:06:e7:
05:d0:11:20:3e:df:c4:e0:2e:cc:77:1c:60:f7:df:
c3:c6:10:a9:88:55:b6:22:52:17:08:ff:28:55:c7:
06:80:28:65:d3:71:b0:30:dc:4f:54:9d:c0:42:d4:
da:b2:41:fd:b4:28:60:ce:fe:3f:20:b1:a0:73:ea:
1b:4d:e1:fc:f9:3f:8b:9d:5d:4d:e4:1b:47:7a:15:
d6:1e:6c:e6:6e:e5:cc:47:b0:5e:fa:62:35:98:da:
3b:8c:66:f4:cc:3f:4a:04:ea:df:c6:41:8d:8c:76:
e5:64:c5:da:37:39:81:6a:ea:7c:10:31:16:3a:88:
b2:3f:09:0b:de:d1:f5:6c:58:5f:f8:00:ca:e5:9b:
59:49:23:73:60:6c:59:eb:80:d6:fa:a6:54:c3:13:
5f:67:11:31:02:02:d8:ea:31:00:26:8d:7c:97:c3:
42:20:6f:68:34:95:82:fd:92:cb:53:86:76:8b:7f:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:E2:3F:BF:8B:2E:D4:30:C7:BE:4E:01:7D:7F:1F:84:67:79:47
X509v3 Authority Key Identifier:
keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:32:6c:b1:99:bb:cc:71:7e:31:9e:4d:09:21:81:69:9b:f4:
94:a8:a6:62:4a:7c:8d:63:2f:b2:6f:09:30:37:19:45:4b:ee:
6a:52:b6:3a:1a:f5:6b:5b:94:f4:c2:65:85:ef:b0:36:7a:86:
90:89:bb:fe:d3:5c:27:12:1e:21:dc:76:ff:69:37:48:5f:99:
53:dc:51:38:d7:9b:82:8e:09:03:f7:f7:bf:87:c2:0d:bf:b2:
29:e5:d4:aa:f7:e7:35:00:e6:ad:88:94:b7:f8:39:44:5d:9a:
e7:65:77:50:f4:ea:d5:18:7b:3d:f3:4d:48:09:f4:6c:5b:3e:
7a:c1:4a:ea:77:22:e3:7f:a3:30:49:47:35:33:59:8f:06:d8:
5c:f8:0a:c9:2a:f6:a8:dd:0d:bd:c5:58:44:16:16:36:87:52:
60:4a:ec:63:ff:c8:fc:b9:06:77:2e:cf:23:06:d2:29:30:73:
99:b7:2c:67:01:f0:bc:bc:1f:98:50:25:ad:7f:6c:05:66:66:
1f:e1:69:72:bd:1c:2b:81:9f:29:e8:11:63:45:03:20:b5:f3:
6b:9e:33:2d:ed:da:4f:e7:f2:b4:ad:73:09:17:4f:a4:56:7c:
33:22:9e:e1:59:ee:2a:16:04:62:11:da:58:f0:5a:18:0d:4d:
01:ab:2f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:40 2026 by rpki-client