Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: HIpTKtbPUJjRZND+glq6X3FE9Epqko9utmDzoo0ZE6U=
Subject key identifier: 42:DB:1D:9F:F9:18:AC:6E:3F:AF:7F:62:68:6D:7B:34:60:E7:5D:63
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 019F916CE4744C2CC984488370D5859F4770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0989
Signing time: Fri 24 Jul 2026 00:01:00 +0000
Manifest this update: Fri 24 Jul 2026 00:01:00 +0000
Manifest next update: Sat 25 Jul 2026 00:01:00 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: Ca7ZyvqxJgdpYaZupDjHAWOu9O82eEYxdX+0bnl71EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:e4:74:4c:2c:c9:84:48:83:70:d5:85:9f:47:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Jul 24 00:01:00 2026 GMT
Not After : Jul 25 00:01:00 2026 GMT
Subject: CN=42db1d9ff918ac6e3faf7f62686d7b3460e75d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:6a:1e:9c:5c:91:24:95:97:7f:bc:37:ad:
21:81:a6:ed:8a:ca:39:1b:e1:de:fe:b5:b9:fe:83:
96:2f:5a:ea:0e:b0:70:9e:70:d8:92:c8:35:69:bb:
dc:af:ed:41:a3:e0:26:9a:ed:ea:5c:30:b9:f5:bb:
5f:e6:fc:e6:70:d7:92:b5:80:f2:fa:24:56:bc:01:
9b:24:5c:e2:cb:0b:9a:1a:a0:91:7e:f9:b1:37:6a:
bb:39:d7:80:b5:cb:60:5c:97:7c:87:57:27:9b:ee:
ee:ff:87:08:89:3b:d2:f2:6f:8b:7d:ff:b7:7f:e0:
b4:49:a1:63:75:2f:d3:ef:7a:bf:72:52:7d:2d:53:
47:38:76:2b:b8:3c:47:9d:3f:f3:f6:bf:be:54:2e:
6c:85:29:0e:d8:3c:2a:8e:14:75:53:7a:e3:77:a5:
c4:fd:c3:87:ba:95:38:e7:1d:b9:4c:46:81:86:a0:
f7:86:c3:c6:69:3a:96:1f:72:fa:17:40:75:44:b7:
b9:7a:50:09:00:52:1f:a3:d9:07:3f:48:fe:7f:fa:
37:4b:68:9b:4c:9a:72:40:b8:9e:b4:8c:3b:de:a2:
36:51:95:5d:69:76:ae:71:5c:1d:00:d3:4b:25:a9:
ac:95:9a:8a:40:74:8b:a6:8d:1f:c2:0c:52:2f:8b:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DB:1D:9F:F9:18:AC:6E:3F:AF:7F:62:68:6D:7B:34:60:E7:5D:63
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5c:a1:cf:ae:9c:c3:d6:a2:c0:d4:96:8f:da:8a:52:6b:e4:
26:0a:b8:26:44:37:36:a8:89:28:88:18:1f:dd:91:f6:f0:cf:
e2:f4:10:c5:64:4c:41:87:a3:41:2d:97:da:38:55:d0:ed:53:
84:c2:90:cf:5f:85:c8:34:b6:c2:e2:3c:7a:66:a1:31:51:99:
5d:26:58:a3:e0:64:44:04:54:ea:ab:e8:a0:ed:b7:14:78:34:
b5:d1:12:76:af:51:ac:19:03:90:7e:8b:c7:f1:f4:cc:02:8d:
0c:5e:e7:c9:c1:d2:a6:81:a5:a0:f0:f8:d5:3c:be:cb:5b:f3:
3d:d6:3e:c3:3d:3c:cb:34:fd:35:84:f9:eb:51:88:2c:48:06:
d2:b0:8c:46:77:e3:65:60:f5:53:f7:a8:90:d2:40:26:38:0b:
52:5d:97:28:a1:fb:df:ec:57:78:c9:d4:9d:62:cc:3f:4f:18:
26:fb:8b:24:d5:96:d1:b7:84:bc:84:ff:10:25:c9:df:a5:b7:
53:b7:75:92:6b:70:56:18:e3:88:c3:20:d9:e4:59:f9:e7:34:
5b:7b:82:6f:1f:e9:12:e3:d3:9c:bb:44:72:b8:c6:33:ad:76:
94:4b:8b:b5:0d:08:49:e8:c8:89:47:d4:de:3d:89:81:e1:38:
8d:07:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:32 2026 by rpki-client