Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
File: 94WLkaZifyNY6q3NJrpcLFxG6gM.mft (raw, json)
Hash identifier: HEtSXvEK1F5M2RHOtkTT8pxwIqG8Gd7TvkLGEIEJ2XE=
Subject key identifier: 0A:FD:AC:3A:68:11:7C:F7:6A:EF:02:8B:61:16:A3:99:96:E9:FE:DD
Authority key identifier: F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
Certificate issuer: /CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Certificate serial: 019F91DA7A473AB5DBB2ACBA063D2901E363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
Manifest number: 12AF
Signing time: Fri 24 Jul 2026 02:00:42 +0000
Manifest this update: Fri 24 Jul 2026 02:00:42 +0000
Manifest next update: Sat 25 Jul 2026 02:00:42 +0000
Files and hashes: 1: 94WLkaZifyNY6q3NJrpcLFxG6gM.crl (hash: ZMhflaMu4iTge7ODcdirzSzb0J6vvk/k7TUS8wB1Y/I=)
2: hKeFeFo6493_38OQ9i00adzif9I.roa (hash: 53uE5bZj+EC0/O49ny+JkcCWuYcfpKEUEDdPY2U5sKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7a:47:3a:b5:db:b2:ac:ba:06:3d:29:01:e3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7858b91a6627f2358eaadcd26ba5c2c5c46ea03
Validity
Not Before: Jul 24 02:00:42 2026 GMT
Not After : Jul 25 02:00:42 2026 GMT
Subject: CN=0afdac3a68117cf76aef028b6116a39996e9fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:ab:00:cd:cd:00:8a:62:c6:9f:04:d3:d3:
5b:11:1a:d8:9c:dc:83:1b:40:a6:85:c9:fc:80:a5:
04:53:65:e4:8d:1c:c0:dc:53:c7:eb:75:c7:09:77:
b9:5b:9e:05:5c:da:af:9e:b2:df:4b:2c:ab:ac:2d:
56:c6:78:3d:67:c8:1e:01:9b:77:f4:4f:c2:aa:fc:
98:af:dd:90:fd:17:f5:ff:17:ba:23:a7:5a:1d:0e:
5e:66:70:db:fa:ef:91:72:5c:eb:64:e9:5d:5b:e3:
41:f1:50:ce:f4:7e:cf:59:ef:07:83:45:79:91:11:
be:ec:b0:fd:af:df:d3:74:43:61:7e:b9:5b:a7:07:
5d:0c:81:bb:3f:3b:bd:c1:8a:1e:5b:b4:20:7b:7e:
82:7e:9c:ef:27:93:2f:9e:2b:2a:81:22:5a:15:14:
f9:4e:10:0b:eb:82:b5:50:f9:ae:38:da:44:ab:6f:
92:40:4b:00:a7:73:65:82:79:b7:3e:66:62:90:4d:
75:b2:67:ef:90:dc:6d:6a:22:88:59:2c:c0:3c:87:
79:23:3a:b2:6e:6e:1a:d7:08:64:6d:e2:f6:55:7b:
77:8b:94:db:d3:51:72:f2:8d:27:1c:7c:ff:fe:77:
6a:ed:f1:c4:61:5d:0d:4d:8b:5a:b6:d9:ed:f0:72:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:AC:3A:68:11:7C:F7:6A:EF:02:8B:61:16:A3:99:96:E9:FE:DD
X509v3 Authority Key Identifier:
keyid:F7:85:8B:91:A6:62:7F:23:58:EA:AD:CD:26:BA:5C:2C:5C:46:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94WLkaZifyNY6q3NJrpcLFxG6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f028e8-f041-4880-8a9d-f27aa9c6eb6b/1/94WLkaZifyNY6q3NJrpcLFxG6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:89:19:1c:54:18:f9:54:82:78:0f:66:68:8e:27:7d:79:8e:
93:18:23:b0:2d:92:82:d7:3e:bf:bb:5f:35:c2:ab:b5:b3:91:
78:af:57:df:a3:95:4f:81:ff:20:6f:93:46:dd:40:55:34:e1:
e1:fe:61:9d:8d:5a:16:6a:27:a3:64:d5:66:0d:7a:22:74:19:
e1:f1:e7:84:f9:3c:82:c3:ae:5a:9e:4c:d8:07:aa:01:87:8a:
1a:3d:51:31:16:c7:72:c3:3a:02:f5:a6:30:da:50:b8:c5:4b:
26:e3:83:cc:82:ec:b7:81:56:26:e9:de:f3:8d:fb:53:02:75:
bf:55:f9:12:4b:c3:1e:e7:20:56:cf:be:22:bf:8e:82:30:33:
60:2a:1c:90:53:21:7a:26:ec:9d:e4:94:35:d1:e1:77:53:05:
40:e8:73:2d:53:29:e7:3d:64:ff:f9:36:e2:e5:8d:8b:b2:9d:
d0:f8:45:e9:41:8d:7c:ac:e2:79:22:13:25:f4:6b:a4:fc:a8:
4d:52:54:f9:d8:da:a5:19:40:f7:ce:44:28:55:2c:99:7a:c3:
83:3b:25:e3:40:85:6a:43:e8:27:32:87:8f:1d:65:7d:f4:f7:
80:c7:cb:40:a4:f7:2f:11:32:89:b2:9d:c7:4f:ae:b0:f1:71:
41:3b:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:58:30 2026 by rpki-client