Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: yBgT/XRltwNFzQ6OkQYPBHGRHZwmdPVD8jne8In5xq8=
Subject key identifier: 91:DE:B4:7B:ED:90:E8:9B:88:E7:22:26:7B:B4:28:73:F4:CB:7C:BF
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 019F935B252896B8B6B8763AB0C1F11B6B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:51 +0000
Manifest this update: Fri 24 Jul 2026 09:00:51 +0000
Manifest next update: Sat 25 Jul 2026 09:00:51 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: ksSL9T8UHaEWEepazYz3HIed3MkWtICpPRigb8JXwxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:25:28:96:b8:b6:b8:76:3a:b0:c1:f1:1b:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Jul 24 09:00:51 2026 GMT
Not After : Jul 25 09:00:51 2026 GMT
Subject: CN=91deb47bed90e89b88e722267bb42873f4cb7cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:31:e3:7b:7a:a1:ec:82:fe:27:f3:da:44:
14:f6:5d:00:ee:7f:2d:da:1f:cd:01:0a:84:5b:d9:
f1:3b:4b:2d:7c:bd:6a:bb:75:72:ca:5d:85:b8:a8:
fe:ce:90:5e:cc:13:9a:cd:26:f9:20:bb:fe:fb:9a:
eb:36:4c:55:5e:e1:40:5a:11:5f:8f:2e:78:23:6f:
1d:56:1d:f1:50:45:a6:77:38:00:50:ed:b6:d3:68:
76:5f:67:c4:e8:5c:08:8b:00:8d:b3:a4:30:d9:42:
ee:ae:da:54:ed:29:50:8d:24:9f:18:89:af:38:ca:
6e:d3:50:43:21:a6:fc:cc:75:89:92:a8:a9:c5:df:
32:66:63:02:3c:5e:1b:78:8b:18:6d:08:a1:dc:40:
90:9e:8b:a8:46:36:42:e8:27:c9:b0:8d:e1:66:13:
4c:bf:8a:96:02:4d:0c:cc:92:2a:eb:de:d3:1d:7b:
e6:d1:dd:57:3f:68:e5:56:ed:44:d8:7e:4f:fe:a6:
e7:1e:b9:f4:8b:9f:66:e0:68:06:b7:af:e1:25:83:
af:e0:07:18:b0:77:6d:54:7d:01:39:48:c3:ea:e4:
b6:95:1b:5d:86:71:df:da:ff:d3:70:c6:26:81:53:
fe:44:03:c1:16:ee:db:33:c9:d1:f4:c8:f3:12:f0:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:B4:7B:ED:90:E8:9B:88:E7:22:26:7B:B4:28:73:F4:CB:7C:BF
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:25:fc:ec:5a:eb:5f:98:7c:ba:38:08:32:99:2a:a4:52:
72:d5:f4:d4:4b:47:0b:4c:df:a8:5a:4e:32:06:80:1e:1b:19:
2a:80:fd:e2:8d:de:0e:05:e8:4b:2e:e8:fa:0c:b6:bb:65:4d:
1f:80:e2:ef:1a:2a:63:f6:81:19:60:14:08:62:91:85:7a:19:
9f:38:9e:36:58:06:64:05:23:c2:be:a2:54:2c:4b:cd:f2:83:
64:79:2c:88:7d:86:69:41:64:90:d4:d2:61:19:56:13:b1:a2:
3b:48:8f:68:54:39:ca:9d:9c:df:0e:ef:ad:0f:82:87:26:50:
e5:ce:21:77:1b:22:ff:06:80:77:b8:22:8e:31:e1:5e:da:4d:
20:61:00:83:d1:39:3e:e1:e5:c2:10:75:31:13:74:65:22:a5:
f6:87:39:f8:1f:cf:96:98:27:19:a6:45:ab:5c:c3:8f:46:c3:
00:3e:cb:54:00:49:b3:85:f8:cd:cc:6a:7e:34:46:99:22:26:
30:7d:dc:cd:7e:74:4a:df:61:ba:de:7f:82:68:84:8e:df:cc:
55:fc:da:0e:62:5d:9f:e7:7a:32:60:11:17:9c:48:f6:24:1a:
a6:3d:26:3d:6d:d9:e9:d5:f2:5e:02:c3:f0:3c:31:2f:6e:9e:
34:f1:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:25 2026 by rpki-client