Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
File: rhVFyl4w95yXBeJw8eh_r6-5pjI.mft (raw, json)
Hash identifier: bfBVMP3NTs2UkxY5W0tD3FfIMktFkuttGWPek1woZfg=
Subject key identifier: A9:CF:AC:06:98:15:EE:EB:3E:77:0E:19:A8:A1:54:5B:D6:C0:B1:5F
Authority key identifier: AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
Certificate issuer: /CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Certificate serial: 019F8FB4C05C7C226B33EC02A00CB72EE5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
Manifest number: 01C4
Signing time: Thu 23 Jul 2026 16:00:15 +0000
Manifest this update: Thu 23 Jul 2026 16:00:15 +0000
Manifest next update: Fri 24 Jul 2026 16:00:15 +0000
Files and hashes: 1: Q-4xy1lFuJPS1HBEiepclcPTuBk.asa (hash: gVcBXJQ9XX31XjFRDkaY8dMZNMEC1KZe+1TPQeZlpsw=)
2: rhVFyl4w95yXBeJw8eh_r6-5pjI.crl (hash: n3I8AMetL7JEhZFYCDkYGgljs1lkQItErSbZ3ZcAr78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:c0:5c:7c:22:6b:33:ec:02:a0:0c:b7:2e:e5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Validity
Not Before: Jul 23 16:00:15 2026 GMT
Not After : Jul 24 16:00:15 2026 GMT
Subject: CN=a9cfac069815eeeb3e770e19a8a1545bd6c0b15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:80:00:94:45:c6:c9:34:d7:ea:2d:e5:b1:
4b:b3:71:ca:af:5e:be:ed:67:16:39:a4:8d:5d:70:
03:7f:9e:4e:b4:31:56:1e:2a:a1:04:b1:a1:57:29:
dd:83:a0:35:b2:93:56:e0:b6:be:b9:df:bb:b5:23:
b0:5d:d7:90:fc:de:37:ef:d1:01:fd:8a:dc:99:6f:
d6:9d:9d:04:39:3b:a9:1d:56:10:58:42:57:f8:fd:
39:2a:3e:0d:d1:85:9f:17:9d:dc:9e:88:ef:ac:eb:
c3:24:a8:ce:29:ca:aa:17:c8:b1:af:82:06:60:89:
df:28:91:2a:36:7c:68:88:f6:42:9a:8a:0a:de:8c:
37:68:7a:54:68:b1:cf:a6:55:0c:39:9b:22:fa:f5:
5f:6f:06:12:89:64:ad:1c:b1:cd:07:9d:c9:71:2d:
a7:60:a3:cb:f7:e5:56:ce:62:e6:15:39:31:5f:f0:
3b:b7:46:00:cb:2e:8f:67:67:2b:9d:b6:47:bf:a5:
02:6f:fd:4e:7e:59:84:aa:5c:12:b5:a1:95:69:35:
ad:78:07:ff:66:82:78:9f:aa:e7:8c:c7:83:94:3e:
b5:44:a2:4b:7b:98:00:03:7c:2c:96:cf:49:ef:02:
b6:ff:2a:ce:5f:b3:5b:57:42:fa:02:61:1c:ff:0a:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:AC:06:98:15:EE:EB:3E:77:0E:19:A8:A1:54:5B:D6:C0:B1:5F
X509v3 Authority Key Identifier:
keyid:AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:76:bd:18:b1:b5:e0:6e:ca:87:c6:b5:c4:ee:1a:11:4a:d8:
54:23:f8:d4:06:e4:f4:cd:2c:a6:cb:8e:98:92:00:35:f7:5d:
f4:dc:15:c5:14:ba:83:56:9c:82:66:64:a2:51:06:c3:ab:d0:
96:ff:e6:4b:c6:17:56:f4:e3:22:04:63:b8:0c:c4:9f:10:47:
12:f7:9e:23:07:86:27:74:30:79:88:98:59:ef:e4:68:f1:ae:
99:4f:c9:52:c3:0f:ef:3c:56:4f:14:69:ff:30:c6:0b:7f:68:
3a:90:51:ba:ce:df:f6:f1:d9:03:75:6c:50:2c:0c:54:4e:8b:
ae:99:43:c8:25:85:35:1e:22:3e:3e:bf:eb:7d:a0:6e:0e:cd:
ba:b3:23:84:e5:bd:86:c8:af:4d:f3:cc:7f:20:af:59:39:48:
2b:75:fb:fd:35:ec:c6:eb:cd:ad:ba:92:61:ba:ad:5e:db:3f:
93:80:db:83:67:b0:dd:ac:24:af:99:8c:32:bd:4c:06:cd:bc:
9b:3c:88:ee:16:ff:87:6c:9d:a0:72:9e:0b:e0:04:07:a8:1e:
28:71:2f:6c:b2:6b:05:f3:73:aa:79:aa:f4:dd:a0:70:2c:ef:
26:b8:8b:de:24:47:26:00:e8:1c:ee:55:c0:1e:ee:b5:5d:d9:
d1:ec:f9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:07 2026 by rpki-client