Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
File: a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft (raw, json)
Hash identifier: yRivu3Y15oxFVyESfgef8is00XrkAIvdXDi4q1aM464=
Subject key identifier: 4D:77:41:DA:24:32:FE:15:54:50:A1:32:71:A1:94:D3:88:85:05:2E
Authority key identifier: 6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
Certificate issuer: /CN=6bf44071ba5a6778721519a1862212804e6034cc
Certificate serial: 019F935B720AD581B04BE01FDCC48E83ADB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
Manifest number: 0159
Signing time: Fri 24 Jul 2026 09:01:11 +0000
Manifest this update: Fri 24 Jul 2026 09:01:11 +0000
Manifest next update: Sat 25 Jul 2026 09:01:11 +0000
Files and hashes: 1: 4t94Ewh86rP5LgTWja3S3CmNJgI.roa (hash: U5a2tjhoCzukKEhPTVnBWaLXi08xhHMBTeQZZG2Rjm4=)
2: a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl (hash: SGaIpdJUGbKeITpHSZ4pnjwrDytzTXQOPij/RsBf3Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:72:0a:d5:81:b0:4b:e0:1f:dc:c4:8e:83:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf44071ba5a6778721519a1862212804e6034cc
Validity
Not Before: Jul 24 09:01:11 2026 GMT
Not After : Jul 25 09:01:11 2026 GMT
Subject: CN=4d7741da2432fe155450a13271a194d38885052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:04:53:fc:a5:85:75:b1:09:f8:2a:cc:35:
ad:b4:6c:b0:69:de:ec:18:b6:a5:c9:71:22:9e:e4:
b2:39:ff:ce:f8:f3:c8:be:43:bb:28:c4:c3:1c:61:
db:db:40:30:2d:6b:95:9e:5c:32:53:a5:4f:d8:78:
54:46:d4:54:fa:54:d2:f9:27:f3:03:44:72:95:e7:
02:b7:d6:62:77:80:3a:aa:66:c2:82:09:a9:fe:31:
fa:f3:96:79:67:bc:b6:7f:f7:f3:9a:c1:c6:b9:cb:
ff:05:00:b5:0d:8b:d5:3c:73:3a:ca:1f:a5:db:ad:
3d:b5:0c:b7:b9:02:0d:a1:7d:54:2a:23:6b:f1:b7:
46:e7:be:f3:8b:ec:28:90:36:a7:09:20:67:29:f6:
1a:ca:c9:f6:32:f9:f8:09:d0:b1:c7:f2:52:52:d9:
34:4e:55:02:ba:80:97:a2:7f:36:e5:8f:d4:40:7d:
88:a6:19:df:07:a4:9c:13:f8:f1:06:36:39:02:e5:
a3:a1:b1:0d:ca:87:e8:2a:ae:54:33:45:35:82:aa:
96:2d:4f:5e:37:dd:98:5d:8d:4c:f3:40:68:68:eb:
ee:d9:5c:c5:0f:d4:b5:0b:f9:be:96:24:e0:cc:d2:
16:05:61:a9:1c:c0:f6:b9:13:93:64:89:55:3f:71:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:41:DA:24:32:FE:15:54:50:A1:32:71:A1:94:D3:88:85:05:2E
X509v3 Authority Key Identifier:
keyid:6B:F4:40:71:BA:5A:67:78:72:15:19:A1:86:22:12:80:4E:60:34:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_RAcbpaZ3hyFRmhhiISgE5gNMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ee26b9-5029-48e3-aae6-4850b7128006/1/a_RAcbpaZ3hyFRmhhiISgE5gNMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:37:e9:dd:79:da:f3:8b:05:1c:72:2c:6b:21:ad:9d:1a:
cb:4b:ba:30:da:bf:e6:62:f1:ad:dd:e7:6a:9c:95:ca:8e:ea:
1e:96:a6:6f:fe:8a:ab:53:96:d1:42:57:0e:6d:62:5e:f8:90:
1e:95:a0:23:cf:22:31:52:9b:2e:83:20:d2:fa:88:8a:2f:0d:
33:2d:32:87:3a:96:12:a9:5f:b1:3d:bd:91:9e:15:70:87:10:
ba:fe:e7:bd:dc:ba:c9:28:a5:30:e3:0c:3a:2b:a7:fb:40:82:
5a:b3:77:69:9b:d6:6c:7b:70:ac:13:a6:65:51:f7:14:01:18:
c2:2c:19:07:6e:73:91:b7:69:2f:bf:2f:f8:c9:94:1f:01:87:
c7:39:3d:83:36:87:27:d7:23:13:18:a6:a9:3e:21:f2:2a:c4:
f0:a4:3f:32:c7:6e:44:a6:87:4a:a4:fd:51:3a:1a:1c:1b:ca:
f7:3e:f4:9f:6f:7a:e5:ad:62:d4:d0:73:5e:01:f9:80:88:b7:
f4:db:ea:62:a4:10:d8:45:ca:0a:74:77:40:b6:14:7f:b8:14:
e4:23:43:3e:be:42:8e:9d:ed:e9:1a:79:70:18:e0:0b:93:3d:
80:53:9e:24:cd:8b:b1:ed:ac:0a:6e:79:77:be:3d:88:e5:04:
6e:dc:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:07 2026 by rpki-client