Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File: A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier: A0VgsJUDLdQfAvKfQT9Mkmbnqtf5Vta8SJph5XmA2JI=
Subject key identifier: 14:52:1D:24:1F:06:84:9A:7D:AF:72:0B:F7:C6:7D:C6:BB:F2:40:A8
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 019FAABE3E85007FE38CCF2EA3E9372DFA06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number: 0C07
Signing time: Tue 28 Jul 2026 22:00:22 +0000
Manifest this update: Tue 28 Jul 2026 22:00:22 +0000
Manifest next update: Wed 29 Jul 2026 22:00:22 +0000
Files and hashes: 1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: Mq3FGXBrclPvhMu5eGxSADZ/wdaMlvNaxBzm8yoNYI8=)
2: y8-TomRf2SfXgjAfIqDbASYx4Kw.roa (hash: uG779XP+SowZScRgyybF2Yr7PqJO6NR4pXnq6h4jggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:3e:85:00:7f:e3:8c:cf:2e:a3:e9:37:2d:fa:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Jul 28 22:00:22 2026 GMT
Not After : Jul 29 22:00:22 2026 GMT
Subject: CN=14521d241f06849a7daf720bf7c67dc6bbf240a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:eb:32:20:2e:35:e9:7a:7f:e6:f0:4a:cb:
1c:00:98:40:2d:a2:37:0a:a5:2f:74:b1:23:68:8d:
c7:48:a1:1a:1a:2b:5e:4d:9f:46:72:af:fa:3b:ba:
a9:f6:07:45:99:a4:1a:d8:2f:80:1c:74:1e:a2:c1:
8f:fd:7f:31:21:e6:dc:94:07:a7:1d:f6:6c:5a:d6:
49:7e:33:03:45:37:72:f9:66:5a:45:c9:df:f6:3e:
e4:33:ba:02:5a:07:d4:67:f5:f2:57:ee:6d:00:2f:
70:14:e8:8b:24:c2:5d:c3:4d:5f:52:db:fa:e5:ec:
3a:15:95:33:76:4e:10:ce:33:ad:89:3d:40:7b:72:
c9:b3:6f:bb:05:28:69:af:80:fd:05:4e:11:6b:61:
5b:14:c0:e9:2e:f4:52:99:02:68:8c:db:9f:42:89:
7b:0e:fa:d6:14:3a:9a:8e:93:18:4e:45:1e:86:b3:
2c:b8:92:1b:3e:dd:51:23:2c:d6:af:17:53:4a:a2:
2c:68:f4:fa:94:22:20:6b:7e:88:e8:52:88:54:89:
7c:00:a0:38:1e:d8:c7:82:23:44:7c:97:ba:31:74:
9c:bd:b3:a1:34:4f:75:4f:0b:f2:11:85:5b:45:c9:
6c:69:be:2d:29:78:4a:d7:1f:20:06:63:31:54:f2:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:1D:24:1F:06:84:9A:7D:AF:72:0B:F7:C6:7D:C6:BB:F2:40:A8
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:67:96:31:c5:36:de:f7:cb:e7:b1:51:87:82:33:0c:f9:1b:
97:01:3f:58:00:9b:90:64:17:b0:d7:40:ec:7a:ef:3d:4f:b8:
94:a9:9a:18:ce:69:96:4d:dc:10:3f:83:24:f4:89:7e:ca:c2:
6d:70:46:fc:f7:77:74:79:c2:e5:69:32:a1:03:63:39:74:35:
fc:da:46:86:34:dd:3c:14:7d:05:60:bf:6c:40:38:eb:ad:8e:
b5:ca:af:c0:ba:b3:78:d7:2c:26:cc:b4:57:1f:43:9e:b6:c0:
2f:b8:a0:e5:67:b6:43:75:b3:51:9b:0b:2b:f6:1c:d1:6c:ff:
c0:26:6c:2a:8b:59:ba:1a:28:9e:ea:0d:62:cc:3a:f0:6e:da:
f3:d0:51:50:e7:84:67:19:d4:8d:83:49:72:60:a7:1b:c6:a5:
44:bf:74:d6:89:b7:c6:89:93:57:72:44:25:5b:af:4e:22:a7:
3a:30:1a:cb:8b:7d:03:9e:65:8a:42:d2:04:cc:da:dd:d3:d8:
01:4e:7b:55:e4:14:b8:ef:a6:52:b4:fd:25:c1:86:5a:c2:f7:
58:b2:0a:d9:08:ac:0b:b0:ff:46:27:18:27:75:9b:5e:56:aa:
7e:c8:da:00:15:cd:44:c8:b3:0d:39:9b:89:e4:82:e5:37:12:
d5:a4:7e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:35 2026 by rpki-client