Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
File: rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft (raw, json)
Hash identifier: CDjvsL4LQWMnoHIUyrpIDbl+e1hPbhdmQs4LOIxD20g=
Subject key identifier: A4:C8:82:7B:C2:D9:56:7D:74:64:47:A1:FF:69:B4:FD:D8:3A:6F:A4
Authority key identifier: AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
Certificate issuer: /CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Certificate serial: 019F8F7DD6ABADA627856479301A53E4E641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:16 +0000
Manifest this update: Thu 23 Jul 2026 15:00:16 +0000
Manifest next update: Fri 24 Jul 2026 15:00:16 +0000
Files and hashes: 1: 1-ERVtGkQFVLEAe5xG0wIY6GGE34.asa (hash: mjH6RC1GOMQBGylDtGbnzG1J9xH1Inj7D3rVzqYEW3c=)
2: rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl (hash: iAAMgZBZQ1AEJ0boqeGCdj/m4bS4G2ra4sKhMbr5sCc=)
3: tF6OZDIuvO_4gHcUUPVxkptJ-So.roa (hash: CNMlE4sv1Wt5NYL3ambevPDyZVwmhdaYb/bTSeYfSYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:d6:ab:ad:a6:27:85:64:79:30:1a:53:e4:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Validity
Not Before: Jul 23 15:00:16 2026 GMT
Not After : Jul 24 15:00:16 2026 GMT
Subject: CN=a4c8827bc2d9567d746447a1ff69b4fdd83a6fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:a9:af:d8:a9:d5:d8:b7:08:fa:6c:1d:96:
07:f7:e6:7e:f8:84:0a:7b:ea:8e:9b:20:97:65:c4:
04:fc:18:85:ec:3e:63:f8:bb:eb:e1:2c:91:d1:e1:
1e:74:73:7e:7d:89:78:49:1c:25:8d:c6:cb:f3:96:
c4:4d:fa:8d:8a:85:1f:fc:8b:84:39:61:ee:79:33:
41:40:f4:13:0a:d0:a1:56:84:4a:f3:5e:64:56:04:
11:21:a0:1d:a6:18:e7:22:c7:56:2d:d7:c9:10:9e:
e7:84:e0:31:aa:c9:cd:2e:62:a3:f7:18:28:60:98:
3b:75:86:66:27:7b:f3:08:f1:2b:9b:d1:3b:eb:79:
86:a6:bc:50:9a:b6:a4:9e:60:c5:3b:89:52:7f:38:
d4:9f:eb:5f:72:9d:f8:66:b2:3d:a0:51:6f:56:87:
9d:8e:11:52:98:63:a4:bc:b1:dc:75:ff:9e:36:ae:
75:c4:47:52:ce:1a:36:09:c7:89:07:3b:88:c0:a2:
a2:45:49:40:58:df:0a:a6:75:cd:8b:c9:6a:24:9c:
9d:b0:7c:fc:35:62:b1:09:56:67:d7:36:82:a8:1e:
36:d9:ef:69:b8:76:82:38:00:6d:ac:d3:35:26:67:
a5:31:54:b2:87:d1:2e:6c:0d:e8:c1:28:f7:b8:89:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C8:82:7B:C2:D9:56:7D:74:64:47:A1:FF:69:B4:FD:D8:3A:6F:A4
X509v3 Authority Key Identifier:
keyid:AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7f:a8:3a:46:e3:12:51:46:43:9f:72:be:b1:e1:c1:26:88:
45:90:df:05:79:b9:8f:1a:54:83:1c:3b:59:81:43:a7:51:e6:
1b:e0:b9:47:8a:be:dd:07:5b:a1:ca:77:da:e8:16:80:1c:36:
bf:34:cc:e1:a3:a7:c2:1e:12:6e:4a:82:63:b7:34:79:7f:c4:
8d:00:2e:67:a0:20:46:d5:2f:01:14:ab:a0:bc:1e:20:cf:4f:
28:2e:79:67:fb:bd:a8:1c:07:a4:e9:22:8f:88:ee:5f:45:45:
03:8d:cb:88:d1:81:c8:9a:4c:c8:ac:c7:5c:b4:53:ca:a9:66:
85:51:15:5b:36:b8:30:aa:ad:58:cf:5a:7d:c8:54:c1:0c:79:
36:4b:4c:67:1b:6f:bb:c3:16:36:e8:bf:d0:f2:02:7e:15:c0:
a3:e0:07:04:45:dc:7f:aa:54:98:63:f0:c5:5f:76:dd:20:fa:
98:d7:3c:01:75:6b:b1:7b:8d:67:b5:05:60:12:2c:00:f7:1b:
07:d7:3b:62:ce:64:15:41:8e:ef:46:d9:b5:03:30:5c:cc:55:
29:bc:f0:85:07:08:7d:ac:a7:77:99:fd:01:03:ad:17:24:9e:
87:7d:8d:52:5b:c6:d1:0b:92:e7:cf:02:1d:e8:cf:2c:93:86:
fc:5e:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:34 2026 by rpki-client