Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: giWI9JUcbYy3T9mF/aYq5P1ji3hgjgwAfmyPSgzA5hE=
Subject key identifier: D9:62:9A:66:98:1E:40:FA:91:38:10:7B:FB:72:90:91:5C:62:C7:18
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 019FA975686E1EA739D2088DF395CC19EDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 16:01:11 +0000
Manifest this update: Tue 28 Jul 2026 16:01:11 +0000
Manifest next update: Wed 29 Jul 2026 16:01:11 +0000
Files and hashes: 1: 3wUwuQwTXV5aCQTU82rWSfa5LEM.roa (hash: ZLeq9/wF1aUOdaHthHWe1UDHIfSGZmqtBr5YatoHrhk=)
2: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: NM2Wi3zVqxJeixsY3YUBoJeQ29JA0WiKgzLSZhgobns=)
3: t4a_vp8lFfYuPnrFd74HGQFrjpA.roa (hash: 1yVWZO4hYvbD4qGSevogaiCjdCYYHYrdz/g3xPGLVFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:68:6e:1e:a7:39:d2:08:8d:f3:95:cc:19:ed:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jul 28 16:01:11 2026 GMT
Not After : Jul 29 16:01:11 2026 GMT
Subject: CN=d9629a66981e40fa9138107bfb7290915c62c718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:66:ce:d4:c4:5f:15:83:6f:d5:56:4b:47:
91:11:38:b6:97:2a:8c:9e:7c:03:49:20:9b:7a:27:
31:82:58:1d:a4:91:28:c0:a7:09:7a:1f:80:b0:22:
97:a7:81:d8:e4:ad:81:f2:bb:13:bd:6f:e9:d2:70:
3f:1c:96:1b:3b:36:c9:d6:72:bc:5a:95:6e:11:58:
f4:48:29:6c:e8:41:03:b9:89:65:91:a2:af:49:63:
25:53:bb:21:cb:c3:e1:1f:9d:16:e5:40:65:ee:a6:
08:e2:4f:02:02:e9:14:56:3b:69:e3:27:e8:11:03:
96:e9:28:b3:39:ab:8d:19:55:be:d1:84:fa:06:79:
31:14:ce:49:a5:a4:59:ba:41:fa:e1:fa:f9:cb:1d:
f7:92:fb:83:ae:8c:89:c4:f2:bb:47:05:a0:6c:90:
bd:f8:fd:db:ef:66:43:ba:a3:f0:80:dc:69:92:fd:
7b:46:94:dc:bf:49:35:a8:fc:e0:1e:7f:e7:1d:db:
cb:70:39:da:e6:d8:4e:1b:c8:55:3f:e8:2d:04:cd:
b3:c7:ef:db:5a:1f:dc:96:ed:02:c7:6b:59:40:84:
43:6b:c9:e6:36:64:63:18:82:bf:48:31:40:8e:98:
3e:b0:f0:59:66:05:9e:ca:00:74:39:7b:b4:d1:07:
4c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:9A:66:98:1E:40:FA:91:38:10:7B:FB:72:90:91:5C:62:C7:18
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:5d:1c:c8:cc:19:c4:a4:26:59:10:a8:c8:02:0c:42:31:
f2:8c:5e:16:5d:f8:85:c2:8b:b8:cd:f6:cf:52:1b:da:30:d1:
f1:c0:fc:36:c1:80:2e:32:e6:29:6b:0b:f2:a6:ec:90:b6:a3:
7a:62:ef:de:b6:eb:e2:70:d2:2f:66:c9:86:e6:a0:0c:47:3a:
6b:48:cf:3f:7f:8a:65:87:56:d1:c0:23:90:fc:5e:09:78:a1:
e5:e7:dd:59:e6:7c:c1:df:47:9a:51:db:6d:ec:30:77:f0:37:
58:ad:1e:c3:7e:9e:91:24:b0:a3:6e:6e:6a:b6:cc:d1:33:65:
ab:e6:c2:59:c3:b4:f4:d0:d1:71:f0:af:d4:3f:04:5c:b6:07:
54:32:80:77:f1:bf:7b:b8:1a:74:0f:ea:a4:bc:e6:1b:fb:90:
ec:21:a4:5e:d0:28:0b:72:da:ef:d6:36:27:11:6f:92:d8:13:
94:c5:6b:e6:4b:1a:a6:53:98:51:24:b8:36:fd:dc:62:ca:53:
df:f5:5e:59:c2:8f:b6:8b:60:ba:14:25:58:6f:be:df:fd:10:
6e:44:04:ec:8b:94:cc:46:a8:03:6a:d4:bc:13:95:c3:98:79:
9e:55:23:82:db:a9:35:b3:a4:10:9c:ef:4d:b9:3f:1c:e1:4e:
ce:1e:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:41:10 2026 by rpki-client