Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
File: rAX0aJpExsm7ECrDExtucFNOr0U.mft (raw, json)
Hash identifier: MbCXtGfeCyzcuo8ftUpzVVTFiphiveg3EOAQnJE/ICI=
Subject key identifier: 21:F9:FB:EC:E2:CC:7B:93:9B:25:02:A5:DD:17:DD:47:0B:54:16:57
Authority key identifier: AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
Certificate issuer: /CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Certificate serial: 019F81F964A4CE9F76AC17427CB35B6F951B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
Manifest number: 38
Signing time: Tue 21 Jul 2026 00:00:32 +0000
Manifest this update: Tue 21 Jul 2026 00:00:32 +0000
Manifest next update: Wed 22 Jul 2026 00:00:32 +0000
Files and hashes: 1: 8KpPDxsbWUdm2uUdpYhleeRGrAY.roa (hash: onwtO6lm790hsvkHwCBWU4djLXwDxoFOKGLkdsUwJNE=)
2: GiGclhLqZFLRsgCRYA0MC4_mt7U.roa (hash: TNhQmFU9fhhz9PaprjVTJQ3o1TKkQSYQEMCYW6CwS90=)
3: rAX0aJpExsm7ECrDExtucFNOr0U.crl (hash: CyZ9Ih5G9ELdyIOeCYA23GC7DFe/KMomiJCMY4Cb2wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:f9:64:a4:ce:9f:76:ac:17:42:7c:b3:5b:6f:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac05f4689a44c6c9bb102ac3131b6e70534eaf45
Validity
Not Before: Jul 21 00:00:32 2026 GMT
Not After : Jul 22 00:00:32 2026 GMT
Subject: CN=21f9fbece2cc7b939b2502a5dd17dd470b541657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:38:54:a5:9d:df:29:68:8e:50:c6:80:a0:
0a:d1:22:06:39:be:b9:3d:3d:e4:e3:94:c6:ae:43:
e3:9d:ee:4c:dd:46:78:63:03:64:ba:23:25:d8:93:
1e:cd:f8:31:aa:08:e9:e4:bf:d2:b9:44:a8:8f:00:
dc:01:d7:e7:50:c1:4d:e1:f0:56:13:5f:56:48:c3:
6d:9f:6b:94:a5:d6:b7:6c:f3:37:c2:67:c3:52:1a:
8d:f5:9a:a9:0b:aa:e8:53:2a:b4:2f:87:71:84:27:
f6:5f:85:c3:98:99:16:6f:c5:6f:48:e3:0b:0c:67:
e6:99:a1:c6:95:1c:9f:4b:86:02:29:75:a0:e1:7c:
36:0f:57:13:47:15:53:4a:fd:3e:4c:95:9c:4c:61:
bb:54:b4:41:eb:fb:48:dd:dc:be:e7:43:fc:36:69:
20:d3:83:02:cf:a4:26:37:d9:2d:fc:e7:3d:ad:df:
7f:99:5e:c8:f8:1b:87:e1:9d:8e:0a:8c:1e:14:b2:
90:f1:96:e3:49:43:00:39:f4:b3:d1:81:92:b4:7a:
51:ae:03:ff:cd:92:29:0e:17:d7:a4:38:5d:c9:48:
f7:19:7c:d0:c7:28:dd:97:f8:06:16:9c:54:4b:57:
7e:14:2a:08:6d:76:19:fd:e7:f2:6a:74:a6:ea:ae:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:FB:EC:E2:CC:7B:93:9B:25:02:A5:DD:17:DD:47:0B:54:16:57
X509v3 Authority Key Identifier:
keyid:AC:05:F4:68:9A:44:C6:C9:BB:10:2A:C3:13:1B:6E:70:53:4E:AF:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAX0aJpExsm7ECrDExtucFNOr0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/rAX0aJpExsm7ECrDExtucFNOr0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9a:3e:5a:98:f4:3c:22:aa:94:86:39:31:d0:ad:cf:6f:1f:
0b:d5:e9:c7:a3:d1:ac:f7:8e:18:89:a8:c4:0d:51:8b:73:ba:
93:18:60:bf:ce:e6:c1:5a:90:9c:e7:69:1b:93:1b:50:d3:f4:
a0:c7:6f:c3:7c:69:1f:b5:74:36:b6:0c:d7:94:f4:8c:03:8f:
59:a2:de:9e:4a:e1:13:a7:d7:a1:ad:8e:ff:f8:79:02:1e:e3:
6f:03:9c:54:79:ce:cb:93:f1:86:a7:56:de:02:51:2c:76:96:
7d:7f:f2:6a:1f:42:1b:90:51:23:2f:a9:57:6a:1b:ac:bc:d6:
e4:67:71:7b:a3:b7:4d:5c:5d:6c:c0:c9:d7:ed:93:49:d6:b0:
92:7d:e2:a7:ce:98:ee:bc:b3:fc:9a:3a:ee:57:7a:3b:ab:22:
df:c5:90:f3:83:5b:2f:41:b7:34:61:60:47:9a:d7:e3:e7:4d:
80:ac:34:7a:2e:da:57:f8:28:f9:86:d2:11:0e:6a:84:90:74:
9d:2c:cc:47:5f:8d:94:50:c2:87:54:19:ad:1a:f5:a5:6d:aa:
c0:af:92:67:3c:42:a7:62:32:b0:1e:0f:27:39:83:6e:97:2b:
e0:f6:ff:f0:67:3f:a1:dc:3f:ea:56:a5:05:aa:dd:a2:aa:10:
3a:dc:35:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:48:38 2026 by rpki-client