Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft (raw, json)
Hash identifier: 4ICpYuZQcvBFT2EvKRXaDupVfeYCIsFIKZo9YnfYefk=
Subject key identifier: 4F:7D:16:AD:58:E8:C6:7D:C0:92:98:6F:3A:03:4A:B9:E8:8E:EF:91
Authority key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
Certificate issuer: /CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Certificate serial: 019FA93E3EBF54A80C8E2AF28FCAD1E6ED26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
Manifest number: 093D
Signing time: Tue 28 Jul 2026 15:00:56 +0000
Manifest this update: Tue 28 Jul 2026 15:00:56 +0000
Manifest next update: Wed 29 Jul 2026 15:00:56 +0000
Files and hashes: 1: TxCuEKO4UFBws6tMJ89yfNDgvSA.roa (hash: ye0le9kc8j89F6B3VF5KOiTRqH3PrXwEdQjOQuRJ7Js=)
2: aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl (hash: vlXmbyzZ0DGQuWymU7Rc9w3yDcbcb65hJ384sze94Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:3e:bf:54:a8:0c:8e:2a:f2:8f:ca:d1:e6:ed:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97
Validity
Not Before: Jul 28 15:00:56 2026 GMT
Not After : Jul 29 15:00:56 2026 GMT
Subject: CN=4f7d16ad58e8c67dc092986f3a034ab9e88eef91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:ff:71:ad:f3:05:72:cb:24:a1:ba:c0:9a:
06:89:8d:b6:c2:9d:d1:d7:75:f3:e7:26:33:96:78:
29:f5:b5:0a:a1:10:25:6e:c4:70:be:81:77:d9:26:
c7:25:db:45:01:8b:35:fc:71:51:a8:24:19:9f:b4:
7d:8b:59:54:bc:11:50:ec:e4:be:ad:1b:e8:fa:f9:
02:d0:af:9a:d1:8d:93:e8:57:13:80:b6:9c:a9:a1:
a6:ca:99:7a:95:24:08:f5:d8:cc:c6:ec:8e:6a:e4:
4c:de:2a:10:3b:60:12:13:2b:c1:ac:c3:0d:33:3c:
96:2d:9e:55:e0:d4:99:a9:5b:fa:d3:cf:c2:65:6a:
c6:d7:cd:9b:80:ab:23:c2:8c:5d:b3:6f:5b:13:27:
5e:86:d7:80:7e:ba:e8:10:8b:b1:1e:13:68:29:e5:
27:1f:d9:b7:9f:5a:07:bd:45:f3:88:1d:90:2a:b9:
de:8a:d5:50:62:99:a5:0f:c1:52:ab:a0:1c:8d:e4:
00:fa:bc:cc:15:05:7e:2e:a8:6c:38:fd:e4:40:c2:
fd:d7:4a:a7:f3:7f:57:64:17:67:a7:27:33:d8:c6:
a3:80:1c:a3:9a:cb:cf:fd:42:c3:0e:74:07:70:9f:
99:b7:50:23:3c:90:0b:35:4d:fd:d9:76:01:00:ee:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7D:16:AD:58:E8:C6:7D:C0:92:98:6F:3A:03:4A:B9:E8:8E:EF:91
X509v3 Authority Key Identifier:
keyid:68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:86:83:cd:56:11:48:55:fe:6b:f6:b0:ef:1f:d0:df:89:5d:
c5:33:37:21:78:96:97:8f:13:0c:62:73:2f:ad:c4:a7:95:3b:
76:51:56:8a:4f:d0:44:77:c7:a8:5e:b9:ae:56:57:d9:c1:c7:
1e:86:dc:d6:df:0e:12:17:bd:bf:dd:22:44:2f:6c:a9:7c:40:
78:19:f1:e7:5f:64:6c:4d:fe:c2:8b:cf:ab:c9:2e:f0:d5:c9:
4b:4c:66:bc:5a:6c:f2:7b:12:fd:c0:d4:87:85:c6:4e:ab:ed:
e5:2c:9c:11:af:2c:0c:db:a9:37:84:65:64:d5:a9:6a:07:0a:
ad:4f:d5:58:bc:02:68:54:81:e5:9f:c5:5b:a7:fe:15:f0:8f:
eb:67:62:d8:d3:9e:d7:59:28:92:1e:38:c5:f4:50:19:ff:f7:
33:9a:bc:a6:a3:18:fb:6e:16:93:1a:5a:64:3f:70:fe:a4:34:
08:62:4b:58:ef:a8:af:78:b7:fc:3b:fc:87:a2:35:10:0b:5b:
24:f5:44:c6:96:fd:e7:fe:79:2d:8f:2a:b9:78:27:9c:0f:ba:
79:89:4c:26:f7:91:cc:b8:91:94:d4:ac:eb:eb:b2:51:27:13:
99:c8:5c:af:90:38:75:bf:c4:b0:48:2a:e3:ca:09:28:49:65:
6d:b9:12:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:05:15 2026 by rpki-client