Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: /HfuQzlLZHc8ai4IWWnGD3Rqh5xLihBsyFBhazQEPEQ=
Subject key identifier: 65:60:73:95:AD:87:5E:9A:AD:57:BF:4E:5C:C0:13:64:56:01:13:66
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019F927F18602C2014E4AB024CDD5C8F63E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 19D7
Signing time: Fri 24 Jul 2026 05:00:30 +0000
Manifest this update: Fri 24 Jul 2026 05:00:30 +0000
Manifest next update: Sat 25 Jul 2026 05:00:30 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: BAzP7f+rB4P/w7WUwIXuXtsNB3NMGIab7SKAim7X75M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:18:60:2c:20:14:e4:ab:02:4c:dd:5c:8f:63:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jul 24 05:00:30 2026 GMT
Not After : Jul 25 05:00:30 2026 GMT
Subject: CN=65607395ad875e9aad57bf4e5cc0136456011366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:0c:56:5e:fc:9d:7d:24:91:28:a8:d6:20:
b9:a3:0f:3e:53:c0:75:7b:61:ea:c2:7b:d0:54:df:
67:2b:ad:ac:5d:12:60:94:ba:7d:32:a5:89:0c:66:
af:51:57:95:2b:3b:6c:c7:d2:e5:2d:56:49:a3:72:
dc:93:22:ef:7a:84:9b:76:df:a7:17:41:ed:8f:a7:
7b:85:60:8e:a7:eb:b6:a3:d3:e2:5c:e2:0c:0c:5e:
de:3c:e7:0f:03:9d:70:c9:f6:66:ec:78:96:2a:91:
f4:16:f6:6b:c5:7d:e9:c5:a0:4d:0c:5f:91:32:48:
1f:96:85:bb:dd:aa:b3:2d:9e:86:a6:4b:6e:cf:b6:
b1:b9:c5:a7:5a:f5:4d:81:78:91:1d:5d:12:95:f2:
35:b2:f2:3b:80:df:21:f7:10:af:40:40:f8:82:ae:
20:24:92:79:44:cd:51:d2:6f:48:99:ef:b9:cd:5c:
73:1b:4a:76:03:fa:e1:24:0b:3b:f3:e5:8e:e7:c0:
e7:f3:26:dc:35:63:b8:ea:05:7c:08:e5:2a:a8:47:
61:44:b0:03:2f:78:47:32:3e:f4:3f:b2:c1:e3:3b:
9b:bc:0f:39:b3:0a:b3:65:8d:2c:10:cb:a8:7f:99:
d0:99:4c:bb:9e:c5:8d:1a:66:72:4e:5e:94:42:f4:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:73:95:AD:87:5E:9A:AD:57:BF:4E:5C:C0:13:64:56:01:13:66
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:f8:88:99:f0:39:36:7b:c7:45:89:e4:27:87:12:cc:8f:
1d:d8:b5:9b:73:9e:7c:09:be:75:11:33:8f:1e:c1:d4:9d:f1:
ee:a6:c7:9b:be:59:eb:6a:4b:cf:a3:a6:ac:29:a8:8b:76:9f:
be:83:96:74:87:73:4a:06:cb:a6:24:26:fb:6a:6f:91:b4:10:
9f:f0:91:3d:60:2e:2b:4a:58:a2:f2:9a:47:79:bd:c8:9c:0a:
fc:4c:64:8d:44:ca:fe:39:0e:8f:9a:74:99:7d:8b:f7:1d:cc:
a4:55:10:99:fd:c4:3b:17:0a:8a:c1:07:a6:86:3f:43:b3:6e:
fa:9d:64:a0:3b:f3:da:5f:16:43:6b:d1:bc:9d:d9:0d:6e:c4:
1f:cf:5a:a6:37:21:f5:ac:65:ed:bb:9a:0f:ed:34:e0:41:fc:
8b:88:8d:3f:9f:a5:4e:7e:78:cf:5f:5d:a6:83:db:79:66:23:
a3:e7:63:4d:9d:38:d9:a5:09:c8:33:67:a8:98:cc:43:dc:95:
f7:1d:e0:34:dc:14:40:26:10:e5:2b:15:d0:b2:52:15:00:3b:
4f:b6:e2:2f:3f:35:ca:70:00:05:6a:d4:75:11:2f:ab:d3:cf:
d7:75:b3:11:4c:4b:7a:94:b5:89:d0:51:e3:b4:5f:71:96:77:
0b:1a:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:50 2026 by rpki-client