Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: fTy8iOupzKYchj3TQ46Hjr2JY8vgn4UGA/34UWBLDy0=
Subject key identifier: 0A:A0:5F:5C:6A:C6:FE:EE:E0:E6:4C:12:2F:04:8E:A3:B9:B9:5E:81
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 019F943672DEB55D7ACA6DCB7C98DC5FD8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 12E6
Signing time: Fri 24 Jul 2026 13:00:23 +0000
Manifest this update: Fri 24 Jul 2026 13:00:23 +0000
Manifest next update: Sat 25 Jul 2026 13:00:23 +0000
Files and hashes: 1: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (hash: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM=)
2: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (hash: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY=)
3: WL2FEa958Kjqled1nJg_T9tBeoM.roa (hash: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=)
4: eeigoSZvhxriUU8uVwc0KC2ZNqg.roa (hash: BVqjzzOba75rz4RwKPXup3anTRy7Y0r6aHlcT5afx7Q=)
5: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (hash: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334=)
6: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (hash: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0=)
7: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: Iqk9Qmg3kWlFTaMla1SmmtmqJPWI7BbRE3FvVCzzYjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:72:de:b5:5d:7a:ca:6d:cb:7c:98:dc:5f:d8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jul 24 13:00:23 2026 GMT
Not After : Jul 25 13:00:23 2026 GMT
Subject: CN=0aa05f5c6ac6feeee0e64c122f048ea3b9b95e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:1b:a6:97:b7:47:48:64:78:96:a5:54:9c:
6e:d9:03:7c:1e:9d:9c:34:23:c3:57:6e:c5:36:a9:
04:ba:77:f1:76:6b:7d:9e:e0:1a:58:21:1c:2a:64:
e1:96:e4:a3:04:21:74:7f:19:f6:03:7a:a8:74:e7:
39:ec:5f:2f:3c:6e:56:37:a8:44:35:65:95:1e:cd:
68:b3:17:5a:ff:a2:c0:d1:98:cd:b1:f3:7a:9d:e7:
4a:4b:be:d6:7e:c2:67:b7:15:b7:59:f4:fc:dc:bf:
72:16:11:2e:17:c9:11:97:bc:bd:22:3d:a8:62:e0:
d5:82:9b:de:dd:e5:0f:c2:d1:1f:ff:84:2f:55:ef:
04:dd:46:15:8c:f1:b2:d8:b5:95:11:17:40:01:38:
ae:96:60:cc:46:dc:e4:8e:b0:f8:24:bb:0b:1a:2f:
5a:51:ef:0c:94:3d:37:5a:42:50:6d:91:cb:c8:49:
d9:d3:cb:1f:5a:72:0d:0e:d7:19:78:01:2d:5b:9e:
b6:f0:45:a7:a6:cf:71:e2:8b:53:55:7a:d6:df:2d:
b6:48:25:ea:59:ec:42:49:e9:28:b6:c7:cc:cf:df:
81:e3:43:99:81:da:a3:96:ae:a1:2e:f9:e0:7a:8e:
7e:0a:35:43:b9:70:3f:d9:d6:b8:8d:e7:dd:3d:5c:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A0:5F:5C:6A:C6:FE:EE:E0:E6:4C:12:2F:04:8E:A3:B9:B9:5E:81
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:ca:d2:47:52:4a:da:5c:5d:63:9e:09:7e:99:83:54:f2:
16:59:df:b8:76:57:05:81:23:6e:65:1b:c8:9d:12:fc:38:4a:
d6:b6:29:17:4a:ce:3a:b8:06:6a:ca:c8:3f:4c:83:6a:e7:eb:
c9:ff:75:4f:22:81:74:5a:85:5d:1f:c6:d9:20:66:83:f3:6f:
e5:41:cf:d8:33:30:aa:ce:a9:0f:54:6a:e1:4e:e6:77:5c:01:
4c:41:da:fd:14:a3:c6:76:cd:37:af:71:0d:01:ab:55:5e:f3:
d6:3f:e9:2a:40:c1:d4:62:ab:0a:89:59:fc:76:97:1b:ca:35:
b1:dd:aa:2b:61:0b:c3:e1:62:f0:f2:fe:3c:71:0e:4f:a9:6c:
43:c2:d5:56:ed:31:54:68:13:4a:3a:07:58:52:71:ba:a3:e9:
aa:cc:85:91:d4:87:ef:73:bf:e7:a3:44:bf:db:9e:f6:14:94:
04:25:3b:5e:0d:c7:22:35:a4:91:ae:ae:59:b7:97:70:65:2c:
7d:40:d2:c3:88:e6:7c:fc:63:00:2a:45:a6:25:38:7b:42:73:
91:8b:55:7e:c9:48:da:92:7d:5c:f1:73:6c:05:b6:14:45:3a:
06:57:47:20:bb:7c:c8:d7:de:f0:70:74:9f:ee:b0:bf:15:66:
3d:ae:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:55 2026 by rpki-client