Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
File: rDxbVWwAUfY7zKUE6u6YM20K6n0.mft (raw, json)
Hash identifier: oEn+p/T0e78F8PBTnGlXQCPdPQPEKWpt6a9Zu7i7mc8=
Subject key identifier: E5:74:D4:7B:AF:5E:AB:D5:8C:A2:F0:BE:05:41:99:0D:86:CA:59:80
Authority key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Certificate issuer: /CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Certificate serial: 019F935BBADF7240DEE5C6857ADE8CEC2206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:30 +0000
Manifest this update: Fri 24 Jul 2026 09:01:30 +0000
Manifest next update: Sat 25 Jul 2026 09:01:30 +0000
Files and hashes: 1: 8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa (hash: wPyw7XGgTqagRr/B70qwK48d2umXqb3H9XJBsVrBmTU=)
2: rDxbVWwAUfY7zKUE6u6YM20K6n0.crl (hash: xZ9iwkWNMdE2kMyBDCvAi3gHJ0OQ1fOO2tgwnBBQqSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:ba:df:72:40:de:e5:c6:85:7a:de:8c:ec:22:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Validity
Not Before: Jul 24 09:01:30 2026 GMT
Not After : Jul 25 09:01:30 2026 GMT
Subject: CN=e574d47baf5eabd58ca2f0be0541990d86ca5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:ff:fd:d2:38:dd:c3:53:76:7d:fa:bc:8d:
28:90:78:68:0e:eb:d4:17:50:d3:93:26:fd:17:0d:
f6:a0:7c:a7:ee:e6:25:4b:27:2b:73:8c:3c:9d:4e:
26:20:1e:19:14:87:21:00:79:d6:ba:6c:ff:54:1b:
79:4a:32:cd:9c:39:f8:a2:42:9f:80:3c:3c:85:4b:
ee:2c:99:ca:06:24:23:06:2f:d3:8a:8d:8a:05:38:
41:ed:94:b3:95:f5:68:66:4f:d2:8d:a6:80:fb:24:
0b:f1:b3:db:ed:a5:ee:a1:57:45:38:7d:14:cd:0f:
bc:10:8c:17:cc:06:7c:f7:4f:12:6f:93:d9:19:ee:
b9:61:b4:91:81:c1:c2:a2:bc:4b:cf:a7:8e:bf:3d:
ce:57:ce:fb:63:7f:70:9f:c7:8b:b3:5d:15:e3:3d:
a8:85:11:2b:7e:5f:a9:d0:cc:6a:b9:2b:88:83:60:
fb:4d:98:e8:78:ee:9c:3e:16:5b:73:08:9a:13:4b:
a1:6a:e6:81:f6:c3:39:da:2d:d7:fc:2c:9f:be:51:
a6:71:f5:3d:db:c6:cd:49:11:67:a6:61:a4:7e:43:
b5:69:52:1e:6c:8e:c5:04:96:fa:18:28:4b:3c:4b:
ac:41:67:36:f2:80:68:f6:80:04:8e:90:c0:2d:04:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:74:D4:7B:AF:5E:AB:D5:8C:A2:F0:BE:05:41:99:0D:86:CA:59:80
X509v3 Authority Key Identifier:
keyid:AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d4:31:70:67:16:63:5e:0a:90:15:38:3e:df:e5:fb:44:57:
63:5e:48:51:1f:c3:eb:33:35:58:b3:94:af:3b:2d:c2:ca:dd:
6f:24:d8:8c:df:4d:73:ff:a0:62:61:d5:32:63:4c:fb:c1:86:
4a:98:bb:c6:a9:42:4e:e3:1b:29:3b:71:a2:cb:03:37:1e:32:
e0:58:21:bc:50:89:dd:ed:76:6f:0c:e9:ca:16:39:3b:cd:75:
37:80:f8:05:63:70:16:67:60:f5:74:1f:69:c2:56:e8:6b:70:
14:23:f0:03:89:89:7d:78:88:d0:6f:a3:d9:dd:58:85:92:90:
23:69:5a:27:18:25:e0:db:40:02:a4:8e:ab:83:3c:5c:27:d7:
66:a2:bb:67:e2:ab:9c:2d:50:68:1b:9e:4a:ab:52:2c:a2:5d:
d0:a4:ad:a1:f4:62:8b:e1:4d:7a:ad:99:59:90:80:79:dc:cf:
ea:09:a1:4c:a9:81:be:79:0f:6e:a8:6c:81:65:88:db:6e:31:
87:9b:3f:8e:60:64:fe:7d:56:ad:08:28:d3:78:83:68:54:23:
64:3d:60:73:d4:c8:72:4a:9c:a9:48:25:29:ac:5d:0f:2f:e5:
c9:a6:3d:c1:46:ef:8f:9f:8a:f5:9d:5f:43:51:48:4b:07:42:
e5:fd:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:47 2026 by rpki-client