Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
File: rysOIXo1FoOSIGvac85hlTWgLzU.mft (raw, json)
Hash identifier: XSlxeAPlG6YMSwlI2c+9LZftGMCH2AYW6zQLvqU1zR0=
Subject key identifier: 38:AE:F1:14:FE:2C:A6:66:3A:F5:0E:A3:32:0F:B1:52:15:ED:A9:03
Authority key identifier: AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
Certificate issuer: /CN=af2b0e217a35168392206bda73ce619535a02f35
Certificate serial: 019F8F474144763BFBCAB277C9B3AB9E345D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
Manifest number: 0E6E
Signing time: Thu 23 Jul 2026 14:00:39 +0000
Manifest this update: Thu 23 Jul 2026 14:00:39 +0000
Manifest next update: Fri 24 Jul 2026 14:00:39 +0000
Files and hashes: 1: QBW11jyT74R8oUHhAinuj7gPXSk.asa (hash: yZJV0811rYsc05YANwSpX99f0QsW0swdHpcFUdFqr0Y=)
2: rysOIXo1FoOSIGvac85hlTWgLzU.crl (hash: jUkM5Egb7mCpHhoNwVtzaeHehO5RVp+2JJk/7aZhUcc=)
3: zakSxSI_wYoHQeaPnt8X9AknTHE.roa (hash: DFDQf/fadQ5V13foLZM1hVw4SY7MFQSi7KXroTzcGGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:41:44:76:3b:fb:ca:b2:77:c9:b3:ab:9e:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2b0e217a35168392206bda73ce619535a02f35
Validity
Not Before: Jul 23 14:00:39 2026 GMT
Not After : Jul 24 14:00:39 2026 GMT
Subject: CN=38aef114fe2ca6663af50ea3320fb15215eda903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:ac:f9:78:a8:05:c1:e6:f1:2b:44:20:80:
8d:dc:99:ad:13:36:f8:27:d4:e9:74:b6:e2:7b:13:
34:d3:45:b6:03:39:3a:91:6d:1d:af:ce:7e:d8:c0:
38:d7:87:4c:7d:93:5f:50:78:10:cf:49:c8:88:40:
12:e1:15:0f:d8:a6:7c:85:cc:52:0a:72:ba:83:8e:
ab:86:7d:07:a6:81:3b:76:64:7e:fe:d0:33:72:fa:
ae:2a:37:14:de:00:23:98:26:08:83:79:84:dc:0a:
d2:59:97:b9:2c:b0:08:b5:71:95:c0:84:a2:d6:fd:
47:47:4a:c0:15:70:4c:aa:1c:82:41:a9:59:7d:77:
b0:aa:06:19:9d:79:61:12:64:9d:99:77:14:89:3b:
1c:05:a8:ab:78:ab:a4:21:b7:30:5e:3b:ff:25:f2:
87:3b:a7:52:4a:45:0f:29:4a:c5:aa:27:1b:ad:96:
ac:20:c6:27:8d:af:66:10:fd:14:75:de:15:bc:ba:
dd:7d:72:54:11:1a:33:ba:37:63:d1:f9:57:cf:67:
28:4b:dd:70:25:19:ca:46:fd:e6:4f:61:79:3e:8a:
71:17:f7:89:c6:9a:21:d2:5e:bb:00:9e:1c:64:57:
41:b6:f2:66:4a:dc:f4:bf:12:80:09:3d:40:c2:d9:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:F1:14:FE:2C:A6:66:3A:F5:0E:A3:32:0F:B1:52:15:ED:A9:03
X509v3 Authority Key Identifier:
keyid:AF:2B:0E:21:7A:35:16:83:92:20:6B:DA:73:CE:61:95:35:A0:2F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rysOIXo1FoOSIGvac85hlTWgLzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d2541e-7597-4820-bed7-f0d19809874a/1/rysOIXo1FoOSIGvac85hlTWgLzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:55:9f:29:c4:cb:42:9b:35:db:68:2f:6e:0f:2f:65:aa:de:
40:0d:de:e1:f0:01:08:3d:8b:9d:db:f3:8a:6c:1f:4f:83:f5:
a2:95:4d:0a:dc:aa:ca:1b:51:c9:f0:15:42:9a:47:47:9d:ba:
f2:1f:0c:98:ee:cf:a5:a8:98:15:4f:b2:a4:99:b3:fd:4e:0a:
a1:0d:9c:88:cf:43:1d:e9:5c:67:80:d8:c5:c6:55:b5:f7:d0:
ed:a6:42:00:19:16:11:52:1f:93:42:07:41:85:17:8d:71:4e:
6f:3c:72:a4:76:0a:3b:63:dc:da:46:d0:62:6c:32:d9:66:ef:
92:a3:c8:88:7d:d9:e0:58:c0:76:65:6a:ba:e2:0a:6f:24:10:
26:38:e1:bc:d0:a5:d9:35:35:b8:96:4f:19:14:ab:ee:10:db:
86:c2:91:62:01:30:d3:cf:9d:fa:45:80:5e:d1:75:a9:7e:dc:
39:8f:52:83:78:ec:d4:d7:c4:78:ee:23:98:69:d1:46:d7:ab:
28:a2:4e:43:49:a6:e9:cf:8f:78:30:1e:24:30:db:47:65:ab:
ae:b8:31:e9:30:24:c6:8a:7f:17:34:74:4c:0f:a3:ad:96:26:
93:f3:7f:62:26:2b:4e:ed:b6:ea:d0:67:b3:a1:f3:00:08:e3:
66:97:70:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:38 2026 by rpki-client