Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: y9Tx+/cam4bgObz6oE9nXq+Nwof1cZJsAjk3LBeOYhM=
Subject key identifier: 49:9F:BF:8B:3A:9B:80:38:B4:4B:26:2E:91:BC:83:9A:E5:96:82:C3
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 019F8EA2B555EAE69407203859A3A5753273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 11:00:55 +0000
Manifest this update: Thu 23 Jul 2026 11:00:55 +0000
Manifest next update: Fri 24 Jul 2026 11:00:55 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: FnbYWVBv4JqK+YV4Bi3/GcVyB5YToX6GdGz/oOOvZQ8=)
2: nPrrHTYTNDyw_L1eEGSJYuwqgp0.asa (hash: rMc0Aj00lJIniIoH5S83QDg35h6VGczGqXsIv4euxXE=)
3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:b5:55:ea:e6:94:07:20:38:59:a3:a5:75:32:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jul 23 11:00:55 2026 GMT
Not After : Jul 24 11:00:55 2026 GMT
Subject: CN=499fbf8b3a9b8038b44b262e91bc839ae59682c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:ab:10:ba:83:bf:04:59:fd:b0:6f:33:7e:
8d:53:18:9e:b1:e5:d0:dc:0f:48:17:b8:0d:bf:94:
87:5a:d8:06:5b:f4:de:94:19:fc:8f:c6:cc:be:0f:
5d:7a:d1:c2:cf:70:e7:ca:24:9e:c7:15:3a:aa:55:
ac:a7:8f:f3:83:46:70:c9:d4:67:1a:60:e1:10:a3:
06:62:7b:bb:df:e4:b4:7c:79:2c:0d:90:5e:e8:b3:
2c:ee:89:7e:7c:f2:b1:ff:57:1d:c5:bd:f0:88:2d:
9f:e2:0b:38:35:09:23:b4:5b:8d:ab:6b:68:20:f8:
a2:7d:26:81:4b:71:dd:28:32:8a:91:00:b3:88:0f:
7a:17:f5:cd:d4:cf:62:4e:34:73:eb:9b:3a:c7:34:
2c:07:c7:36:93:08:e4:45:e2:6d:d2:2a:d3:42:6c:
f2:99:36:ff:6c:19:68:0b:df:88:a1:5e:24:bb:df:
45:8c:d0:9f:d8:ad:72:31:f6:44:a0:36:bb:3f:2e:
14:71:28:67:24:73:68:f1:a4:6f:84:15:36:0d:3c:
1c:33:c0:50:33:55:99:df:9b:b6:f9:91:2b:7e:63:
56:30:f7:0f:1b:a1:fc:0a:a7:8d:c0:1b:59:76:ba:
6d:7f:04:19:d4:5e:98:91:49:64:47:a0:83:0a:ed:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9F:BF:8B:3A:9B:80:38:B4:4B:26:2E:91:BC:83:9A:E5:96:82:C3
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ce:e9:6b:7a:cd:62:da:2c:2f:76:50:c5:28:3e:09:84:47:
04:c1:f8:c4:27:8c:14:23:53:2f:29:fe:04:f5:7a:f9:29:ac:
57:05:dd:df:91:72:c5:fd:23:c4:33:24:56:fe:87:01:9f:5f:
17:20:e0:ee:32:9f:ea:91:5a:09:8e:a1:0b:a9:5a:24:3f:4b:
0d:a7:77:25:35:dd:7a:2c:19:87:ba:be:75:7e:e5:c2:c4:e7:
51:d8:26:b4:09:6d:71:30:70:5a:6a:f6:3d:d9:98:7f:68:0b:
98:71:a8:1e:35:a1:4e:ca:85:12:c6:7c:35:9a:79:6e:d6:0a:
6f:65:f6:a5:d1:cf:58:38:ae:30:8f:d7:72:f8:2b:2b:2c:10:
33:0d:5d:48:c5:f6:68:23:2e:7e:4d:3b:5b:28:c2:3a:d2:c1:
31:cc:02:da:6c:7e:7a:0f:45:82:8e:55:cc:be:ac:fd:67:ef:
20:d7:ed:29:74:da:ac:6f:e5:ad:23:1c:56:fe:79:a0:20:33:
15:c4:c8:30:c3:8b:19:8a:31:d5:9b:fa:a4:11:df:76:25:53:
64:5f:8c:1e:21:6e:88:35:20:a0:f0:58:9d:48:8e:13:45:bd:
5c:ae:95:a5:8e:cc:07:3c:40:8a:28:5b:00:ae:e4:e9:bc:47:
76:28:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:35 2026 by rpki-client