Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: 51NQO5m+m0dZ2VNwMbVacez+Gsv0MHBnutfNrOd5CmY=
Subject key identifier: 8A:2E:19:7C:6C:0D:38:34:87:A8:E9:CF:39:BB:EE:18:64:63:1B:57
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 019F935B2456115D9B41E9630942C1315F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 0155
Signing time: Fri 24 Jul 2026 09:00:51 +0000
Manifest this update: Fri 24 Jul 2026 09:00:51 +0000
Manifest next update: Sat 25 Jul 2026 09:00:51 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: 6GK8JKdg/7LeM37tXOQaEJ/gNRJAcHU81FkAXSiQKHE=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:24:56:11:5d:9b:41:e9:63:09:42:c1:31:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Jul 24 09:00:51 2026 GMT
Not After : Jul 25 09:00:51 2026 GMT
Subject: CN=8a2e197c6c0d383487a8e9cf39bbee1864631b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:eb:a7:65:32:ca:bc:f7:00:42:af:fc:15:
54:76:13:6c:ae:4b:27:08:d7:50:96:26:5e:77:4c:
54:4a:90:0a:5f:63:55:b3:1d:f1:bb:af:09:d9:4d:
68:de:ed:a2:fa:0d:ff:e8:98:10:dd:51:bf:c9:2c:
9c:ef:ba:a7:da:6c:58:f8:50:2d:c1:68:1e:07:5a:
e8:1a:84:8a:36:5c:64:4d:e0:4d:cb:c6:2b:f8:8b:
11:57:77:85:80:36:a3:21:2e:b5:f5:c4:a7:be:91:
9a:8e:a6:0f:e1:df:f1:5a:99:e3:61:22:02:b3:6a:
e6:31:4d:94:d5:a6:3a:1c:e6:7d:09:3d:7d:e3:72:
7e:8f:84:7d:db:0e:f8:5f:e6:4f:9d:bc:1e:7d:a2:
22:e8:93:2d:ed:5f:7b:ff:1a:66:af:a1:3b:fa:f1:
f2:a9:df:8d:ce:6a:5d:d1:b6:0c:e0:d0:27:07:0e:
c9:99:6c:65:ae:3f:15:c8:e7:16:31:8f:e9:b1:59:
3c:20:a6:38:2c:1f:84:58:7f:fc:a6:70:70:23:60:
03:e3:05:e5:7f:bf:cd:5e:f9:3f:ca:3d:c7:55:8e:
49:5c:26:39:69:4c:c3:10:4b:bb:0b:9e:1a:9c:20:
4f:51:62:66:85:33:9a:a6:b6:85:14:3a:80:ab:61:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2E:19:7C:6C:0D:38:34:87:A8:E9:CF:39:BB:EE:18:64:63:1B:57
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:85:59:ab:b3:6b:cd:a0:ec:0d:8d:94:cf:f0:34:a3:c9:34:
97:25:8b:92:84:a5:fa:45:16:d4:fe:80:f5:e2:ab:6b:6a:f8:
a9:bf:63:8c:0a:d9:30:8d:f8:d6:d6:43:9f:28:be:dc:b9:bf:
6a:05:f7:65:2f:1a:f3:fe:10:4a:dc:7c:d4:3b:5f:ad:11:64:
9e:85:1e:65:9b:f0:e4:0c:50:ff:1b:64:be:56:e2:a9:ab:b1:
7a:28:17:72:75:65:62:96:db:06:d9:36:15:0f:e2:90:d6:c3:
ac:e7:c8:1a:69:03:45:3b:2b:4c:ab:64:bf:fa:08:47:82:8d:
13:87:5e:cc:a7:d4:10:d9:8d:03:94:25:ad:e1:34:4f:51:0c:
24:89:62:27:75:ce:b7:d4:57:2e:28:7f:63:ea:8a:d1:54:43:
7e:c1:71:f2:7f:a7:d4:58:08:fe:38:98:a6:a4:1b:f2:6e:0a:
c9:2b:42:02:63:9b:9a:e2:11:2e:f4:0e:5c:ee:04:52:29:ce:
a5:3c:8b:6c:b6:a2:6b:6f:a3:43:4a:9e:df:a4:84:14:07:fb:
ff:05:a7:df:60:ff:29:87:22:c0:98:87:a2:a8:86:a1:f5:7b:
9b:f4:b5:ab:aa:b0:86:a8:5d:7d:d5:9d:0e:be:39:5f:3a:6b:
d4:9c:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:12 2026 by rpki-client