Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
File: A2buGcyLQ0A-42qUouguQBnjUdE.mft (raw, json)
Hash identifier: m74lRKW3R8TPW4SBUJ/gbT0wK0hNBskUSeCHtGj0I/8=
Subject key identifier: 32:7D:C7:DE:FB:5F:25:E4:E2:70:D0:13:34:4A:26:82:A6:93:AA:26
Authority key identifier: 03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
Certificate issuer: /CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Certificate serial: 019FA8CFFD53B5FC228134CCEEC80D9C5E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
Manifest number: 32
Signing time: Tue 28 Jul 2026 13:00:30 +0000
Manifest this update: Tue 28 Jul 2026 13:00:30 +0000
Manifest next update: Wed 29 Jul 2026 13:00:30 +0000
Files and hashes: 1: A2buGcyLQ0A-42qUouguQBnjUdE.crl (hash: 0y4jZsGaT7V4ako+gOMk3h8kYEjqPQWF/bBVMkwjnsQ=)
2: sbxckOpdRmsL3IOZkXvPw_lxG8g.roa (hash: +YSKpNz3HshHTq5k+BAAiNGsiW2WG4yJKy7VDrjUYAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:fd:53:b5:fc:22:81:34:cc:ee:c8:0d:9c:5e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0366ee19cc8b43403ee36a94a2e82e4019e351d1
Validity
Not Before: Jul 28 13:00:30 2026 GMT
Not After : Jul 29 13:00:30 2026 GMT
Subject: CN=327dc7defb5f25e4e270d013344a2682a693aa26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:39:2c:98:e2:db:9c:b6:59:f0:86:42:c3:1e:
67:f8:d7:17:1a:ae:46:77:88:d9:20:36:d2:6b:71:
55:5c:5d:28:4b:af:e6:d4:6a:dc:d3:f4:df:cc:03:
7b:e8:f1:41:ab:15:70:04:9d:c9:8a:fc:b3:50:ff:
e5:d9:c7:a2:a3:6a:46:15:30:d1:56:d6:a0:4c:b9:
e4:f8:b0:02:51:8f:ad:76:f7:6e:5b:37:9b:4a:ab:
5b:bf:ec:b2:a5:c3:c4:b2:59:bc:d2:b0:28:f7:7c:
53:70:54:10:2d:92:88:95:17:1d:53:f1:46:3c:33:
50:c9:46:13:c3:60:47:6d:d8:1d:bf:7a:81:d4:c3:
b8:ff:d7:68:9a:99:22:53:90:d0:80:0b:d2:1d:c0:
2d:2f:3a:f4:28:ba:7d:70:64:83:c8:75:b9:b7:67:
96:8f:fa:82:3b:fe:89:d0:4e:0a:7d:5a:3c:c0:fc:
f5:7d:fb:dd:99:2b:fe:14:05:53:34:e3:e9:67:0e:
c1:3f:1f:6c:49:98:fe:f3:c1:4c:0a:a7:87:76:00:
9e:d0:35:8d:fe:61:d7:20:87:0b:15:92:45:3f:59:
a9:39:b9:5e:39:f2:bb:72:00:2b:8b:43:8b:18:7e:
59:cd:63:54:a1:2d:b6:3e:5d:5a:de:86:4d:e6:ee:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:C7:DE:FB:5F:25:E4:E2:70:D0:13:34:4A:26:82:A6:93:AA:26
X509v3 Authority Key Identifier:
keyid:03:66:EE:19:CC:8B:43:40:3E:E3:6A:94:A2:E8:2E:40:19:E3:51:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2buGcyLQ0A-42qUouguQBnjUdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e6409e-e72e-4562-9e5b-13b4a23da2c3/1/A2buGcyLQ0A-42qUouguQBnjUdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:52:63:bc:c1:95:9a:cb:3b:79:68:8d:1d:f1:e3:c7:b3:9d:
40:8f:1d:3b:72:aa:45:ed:2e:ee:22:77:8a:9c:86:e4:2d:a3:
8e:dc:85:0b:2f:73:5f:22:32:18:77:c0:df:76:bb:7a:18:94:
3e:44:62:8f:8e:62:63:1c:82:07:46:4c:fe:00:c3:b1:aa:ba:
08:e8:dd:e4:ff:b9:95:a9:90:ca:4a:40:ae:60:7b:4d:94:42:
7c:3b:ac:94:f9:d9:5b:97:44:52:fb:be:34:11:6d:9e:8b:3a:
06:76:ab:97:13:fc:ad:42:ca:0d:7e:64:45:50:df:95:0e:4c:
8c:4a:21:3a:38:4e:d8:ee:0c:d6:3b:5a:08:83:e5:3f:d5:81:
4c:48:8c:fb:59:ae:f8:62:a7:93:19:00:4e:6d:2f:43:16:fb:
49:f0:24:d9:15:05:df:91:3e:d2:2a:d4:e5:54:c5:9b:2d:7f:
17:34:a6:15:f2:80:e7:a9:7a:41:67:5d:76:75:62:de:63:6f:
ba:4f:68:d3:43:f9:01:e7:ed:0a:62:99:38:b2:1b:1b:9f:93:
4d:8f:1e:3f:3a:21:f5:b4:a8:9e:14:ed:d8:3f:fb:52:c5:81:
aa:2b:9c:b1:41:43:bd:73:39:3f:83:50:38:ab:23:d1:d9:28:
ad:36:4f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:03:51 2026 by rpki-client