Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
File: aZbfqRr5HsxjhBKLGMUDoywoNxM.mft (raw, json)
Hash identifier: pc/h5vjWxUjawDsmW1MmNQndcaDSZKaL2r+Oz0l3iuk=
Subject key identifier: 4F:EA:3A:AE:33:88:11:5C:DC:40:17:2F:AC:76:EC:8B:4A:41:3E:FB
Authority key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
Certificate issuer: /CN=6996dfa91af91ecc6384128b18c503a32c283713
Certificate serial: 019FA9ABEC07AC6FA6B498773E91892B4C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
Manifest number: 026E
Signing time: Tue 28 Jul 2026 17:00:44 +0000
Manifest this update: Tue 28 Jul 2026 17:00:44 +0000
Manifest next update: Wed 29 Jul 2026 17:00:44 +0000
Files and hashes: 1: Vyqhid55byeG8LolohKo-3zBV4k.roa (hash: 11dk3jNFxCUzgdfOzDadI8TnuPaxlnCKPPEDYhwIvBY=)
2: aZbfqRr5HsxjhBKLGMUDoywoNxM.crl (hash: IWGPVPUPy0mdUx7b0Gce6lrRkWGXSjIrlT2Ql9hQcK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ec:07:ac:6f:a6:b4:98:77:3e:91:89:2b:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6996dfa91af91ecc6384128b18c503a32c283713
Validity
Not Before: Jul 28 17:00:44 2026 GMT
Not After : Jul 29 17:00:44 2026 GMT
Subject: CN=4fea3aae3388115cdc40172fac76ec8b4a413efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:7c:c2:fb:da:89:bf:93:07:72:dc:00:af:
8b:a0:61:2b:c6:ad:94:22:b9:bc:f1:ad:6f:5e:e8:
ac:d0:d2:5b:19:52:d7:99:50:6e:7f:65:2f:2f:02:
c8:4c:21:4a:1e:ff:da:b6:44:42:7a:6b:87:7c:9c:
48:2f:a8:fd:d2:9c:f9:0b:86:29:f5:12:e4:71:d8:
5a:41:bb:68:66:4a:5b:16:68:25:85:a3:56:03:5c:
08:6f:5a:4e:02:c3:ce:f6:b8:0e:9f:32:28:65:f6:
d0:25:01:0d:23:13:13:89:50:c7:88:22:fe:c4:d3:
13:91:4a:e1:15:6c:c6:75:c5:4a:5d:30:85:d0:d2:
5f:f6:e4:9b:7a:2b:81:56:02:84:09:80:5f:f3:c8:
b8:ea:f8:ae:3f:e9:1a:7b:7b:72:55:c2:18:4f:74:
78:a3:a1:e7:49:f8:c9:f9:18:db:29:a0:14:6f:d5:
8f:3a:8e:a5:29:26:53:4f:81:8d:7d:30:ab:87:00:
ca:e0:61:f3:02:95:22:3a:0e:69:1a:ff:43:82:ab:
d2:b6:6e:82:86:ae:7b:63:ac:c7:14:27:b3:ef:c1:
b0:39:cb:d6:26:79:29:f8:9b:3d:89:1d:5b:2f:75:
7e:96:c0:7c:0d:0c:3c:c0:43:9c:80:df:22:83:01:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EA:3A:AE:33:88:11:5C:DC:40:17:2F:AC:76:EC:8B:4A:41:3E:FB
X509v3 Authority Key Identifier:
keyid:69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e8:9c:cc:66:33:d5:7a:3e:0c:99:b7:75:4d:56:8b:27:bf:
9d:db:98:4d:45:16:13:49:cd:03:1a:f4:ee:47:d0:87:63:09:
4e:15:32:dc:bd:2a:20:7f:1b:a4:a4:75:29:1a:5c:59:a2:06:
1c:a5:71:d2:d0:35:4d:d5:3c:d4:33:2d:89:e8:c3:4f:1f:ee:
57:04:f0:52:5c:94:2b:40:79:53:6d:42:1f:62:10:ca:37:d1:
cf:de:a4:5c:20:ee:c5:bd:b0:95:89:50:a7:71:54:61:66:0b:
bd:16:5a:8b:3b:88:d0:8e:9f:ce:85:17:7d:58:9f:c9:a4:b6:
cd:05:2d:46:07:65:28:6a:ef:cc:7f:d6:6f:6b:a1:0a:9e:53:
be:91:75:c3:22:6b:62:93:86:b5:2b:0b:53:ca:e2:94:bd:d7:
c0:ff:8e:e0:a5:2d:9a:7a:81:40:24:bb:31:0d:53:2a:bf:c9:
4f:0c:38:18:7e:ff:b3:8f:8d:20:70:05:c0:60:bd:e3:ea:07:
1f:c0:fd:61:05:8b:c2:3d:2d:6a:19:c1:56:d2:0e:af:dd:86:
ed:17:3a:52:77:32:70:89:99:a3:22:ba:c3:a5:a2:3e:15:53:
60:2a:ec:67:fb:a4:cb:38:1b:5d:de:b2:b7:8c:bb:26:e0:1d:
b8:f5:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:13:39 2026 by rpki-client