Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
File: aNQlzHsbeICodfdr7agP4xCTGe0.mft (raw, json)
Hash identifier: RQ+KyIxS8M89mrPORmUtIMa45JJGHfYzMz8R9BoWThA=
Subject key identifier: 6B:47:6C:4B:0D:7E:5D:C3:4F:9D:53:4C:1D:D7:3B:B0:A9:F4:F8:0A
Authority key identifier: 68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
Certificate issuer: /CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Certificate serial: 019FAB9A2665B2ABD563CCF14B9EABBF518A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:33 +0000
Manifest this update: Wed 29 Jul 2026 02:00:33 +0000
Manifest next update: Thu 30 Jul 2026 02:00:33 +0000
Files and hashes: 1: aNQlzHsbeICodfdr7agP4xCTGe0.crl (hash: RU0/q77gvO6sY/noHQS3aRh5P6whDz3WeeMxwnzQutY=)
2: s_Oj6JBKTNB4x3fb0XdQ9zvwP1o.roa (hash: 0jQdDlhdIZaz2WGN97YHIXqbtv/kRGloASKQBe2397Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:26:65:b2:ab:d5:63:cc:f1:4b:9e:ab:bf:51:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d425cc7b1b7880a875f76beda80fe3109319ed
Validity
Not Before: Jul 29 02:00:33 2026 GMT
Not After : Jul 30 02:00:33 2026 GMT
Subject: CN=6b476c4b0d7e5dc34f9d534c1dd73bb0a9f4f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:92:cc:1d:1d:1d:64:0d:ce:d2:f9:c4:4b:
75:cb:31:27:bc:b7:1b:cb:63:e0:ba:35:57:48:30:
6f:09:fd:02:68:5a:6f:33:2f:d5:3a:f7:87:92:34:
2d:24:86:f1:b3:1b:0e:44:07:ce:e9:be:ac:5e:dd:
b9:6a:18:a5:b5:ec:b2:2d:17:d3:e7:1b:59:df:58:
c8:d6:78:f9:27:e7:32:52:33:85:0d:29:ee:b1:ca:
59:4b:54:fe:be:9c:79:d3:5c:85:cc:21:5e:05:4e:
7a:27:9d:b2:16:16:a2:74:35:24:df:76:a5:1a:5e:
77:50:a4:4d:b7:3d:43:01:3e:1d:77:f2:e6:b6:6b:
3b:76:dd:68:b2:47:14:cc:e2:13:18:c3:d7:dc:e4:
d0:56:47:fc:53:2e:64:3e:c3:23:b7:bf:af:6a:6c:
29:95:39:12:3d:c4:23:7c:c8:04:ef:5c:be:e3:20:
6c:5a:ae:1d:6e:c2:bf:66:1d:36:c5:a1:e4:da:c9:
67:43:91:9a:67:f6:fd:90:6e:bd:ab:b3:46:46:6e:
87:89:dd:23:e3:b1:56:e0:1b:ed:a2:44:4f:a3:b8:
96:57:60:cf:98:de:c3:69:84:02:61:d2:88:c5:19:
28:84:78:b6:4f:0c:29:ac:5f:7d:23:f5:cf:bf:b8:
16:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:6C:4B:0D:7E:5D:C3:4F:9D:53:4C:1D:D7:3B:B0:A9:F4:F8:0A
X509v3 Authority Key Identifier:
keyid:68:D4:25:CC:7B:1B:78:80:A8:75:F7:6B:ED:A8:0F:E3:10:93:19:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNQlzHsbeICodfdr7agP4xCTGe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c0f7e3-63b9-4a5f-96ca-5c45b618f990/1/aNQlzHsbeICodfdr7agP4xCTGe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:60:2a:55:ec:f5:ea:43:2b:39:6e:31:94:b5:b6:85:16:2b:
32:e2:1b:63:7f:03:42:ac:b2:6d:64:23:88:4a:16:30:fc:16:
fe:29:89:14:c1:7e:cd:91:b3:aa:80:cc:0d:eb:b8:d2:fb:ac:
35:b5:01:83:f9:ad:f1:90:dc:3f:38:10:ed:b1:80:1f:e8:ec:
58:e8:7e:84:32:4e:1e:ed:94:c4:a5:b7:43:65:74:3f:15:88:
5a:fe:47:1d:e7:db:63:f5:c6:6e:57:21:b6:c6:38:2e:0b:1c:
11:e6:89:f6:1b:2e:bd:f3:62:67:3e:27:e2:c2:1f:26:ec:0f:
66:93:d1:9a:58:16:4e:08:06:05:00:2b:ba:f9:c5:45:f2:4a:
8d:47:2c:71:5f:9e:01:3c:8f:36:b2:85:8a:69:d7:38:ae:76:
0b:ef:5f:97:ef:d4:ea:c5:80:3e:58:75:dc:36:14:6b:b2:85:
e6:06:97:49:b6:57:66:ed:05:4d:62:20:19:3e:17:c2:f4:29:
bd:a3:0d:63:aa:01:bd:6d:05:be:84:3f:40:51:cc:ae:87:43:
d1:82:13:3e:c9:7e:82:dc:ae:cb:f9:12:ab:c8:fd:11:e9:65:
a7:49:c1:83:16:05:26:4e:cb:f4:a4:5e:a8:6d:a5:80:64:60:
bb:56:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:18 2026 by rpki-client