Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: g0f15VM1aeGSpDHtl4NvbAlLn3lTa7G8e1j+CAkep58=
Subject key identifier: 64:1D:50:4C:9B:24:C1:5C:91:ED:81:84:88:F6:BD:17:75:B6:62:EC
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 019F92ED3041B3D82D0F676C1BD448C7AF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 0973
Signing time: Fri 24 Jul 2026 07:00:45 +0000
Manifest this update: Fri 24 Jul 2026 07:00:45 +0000
Manifest next update: Sat 25 Jul 2026 07:00:45 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: 4I5vi41UAL4WuBNfxSClZqCk+cVSY04UM75R1tuJXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:30:41:b3:d8:2d:0f:67:6c:1b:d4:48:c7:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Jul 24 07:00:45 2026 GMT
Not After : Jul 25 07:00:45 2026 GMT
Subject: CN=641d504c9b24c15c91ed818488f6bd1775b662ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:4e:ee:b5:6e:4f:a6:25:44:0d:56:50:a7:
db:84:e9:26:51:66:8e:b4:d1:f5:ad:ef:b9:cb:76:
66:a7:95:96:3a:e4:aa:a3:af:4f:ab:a9:bb:41:35:
3d:fc:20:09:25:9a:98:b4:7e:70:b1:99:ea:93:a9:
31:c0:a6:8b:43:c6:2f:c4:9e:20:ee:12:44:20:13:
39:f5:e1:48:09:2d:99:3e:74:d6:19:e7:17:32:4a:
8a:44:e0:67:8e:85:ee:7d:8c:d0:9a:98:d5:a2:95:
58:a0:0f:b8:fb:57:55:73:53:c1:22:b8:54:ec:09:
f4:3d:06:87:fd:4e:7f:58:9e:23:f1:e2:ab:ab:77:
df:9d:6a:68:40:94:d7:2e:b9:b8:ec:70:b6:b6:18:
48:11:5f:b3:00:b9:41:b9:64:43:e3:c6:76:d4:6c:
cd:83:f0:28:4b:a1:97:55:90:57:de:f2:13:22:86:
b1:37:1c:6a:ad:8a:34:23:82:1a:0b:2b:fd:81:a7:
53:22:bc:c2:f0:e1:96:78:93:1b:25:d7:7c:38:45:
1e:57:f2:dd:1d:7a:22:d1:fa:f3:a2:06:db:ff:2c:
52:22:82:f2:42:ce:7a:7a:7d:ad:b2:06:21:cf:cf:
7d:af:37:ac:20:40:95:c5:84:d3:4d:12:ff:00:1a:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:50:4C:9B:24:C1:5C:91:ED:81:84:88:F6:BD:17:75:B6:62:EC
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6f:0a:94:82:dc:88:13:34:f9:b0:fa:13:d5:9d:8e:4c:c4:
ea:4e:56:c5:b1:c4:e5:59:df:c0:c3:2d:57:ee:51:ec:1e:71:
b0:01:8c:23:f7:87:42:c3:38:cb:b8:38:23:53:0a:86:62:b4:
ab:18:c3:3a:65:70:c6:0c:22:4b:09:a0:fd:42:1a:29:be:c4:
ee:15:9b:71:61:0c:a0:a6:d8:2c:17:7c:90:0d:ff:e0:4e:ad:
f5:13:e9:2a:26:8c:4c:d8:3e:ae:f4:58:11:cf:e9:06:e8:e1:
b0:b8:49:67:00:ac:4f:5b:be:32:23:6f:05:c9:5d:41:5f:40:
6d:f0:bb:71:8f:02:bf:0d:62:19:6c:3a:cf:cb:50:5a:25:bd:
70:6f:43:88:4e:fa:e8:67:eb:8c:ed:6c:96:50:bd:43:22:5b:
5b:48:53:7b:83:da:c9:ef:e7:ef:19:08:0b:95:3c:b1:05:2c:
56:32:05:e5:67:9f:ba:27:81:3d:a4:62:00:69:a1:43:a3:32:
22:ac:a5:09:32:cd:ac:11:67:25:51:5a:68:5e:e5:ef:a1:26:
d0:1b:ef:33:63:ba:d8:9d:3e:c7:e3:97:62:6e:19:25:74:2e:
9b:e8:f4:80:40:65:f0:b7:a2:07:1a:d1:5a:49:f1:da:ce:42:
76:01:bb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:00:51 2026 by rpki-client