Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
File: rhVFyl4w95yXBeJw8eh_r6-5pjI.mft (raw, json)
Hash identifier: KuSJNww3OvaQWh0/z5XODW0xkWcOWpa3cHpWjqk1VmI=
Subject key identifier: 38:A1:8C:10:86:12:45:AF:9D:C9:1D:CD:52:E2:92:A5:E2:5F:4B:AE
Authority key identifier: AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
Certificate issuer: /CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Certificate serial: 019FF9ECB8021C1775A0424D225FC024163B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
Manifest number: 01FB
Signing time: Thu 13 Aug 2026 07:01:08 +0000
Manifest this update: Thu 13 Aug 2026 07:01:08 +0000
Manifest next update: Fri 14 Aug 2026 07:01:08 +0000
Files and hashes: 1: Q-4xy1lFuJPS1HBEiepclcPTuBk.asa (hash: gVcBXJQ9XX31XjFRDkaY8dMZNMEC1KZe+1TPQeZlpsw=)
2: rhVFyl4w95yXBeJw8eh_r6-5pjI.crl (hash: 0tmQCa7J3C5AtWlTkru5ceGW150lMYFl6TAIlSTY7UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ec:b8:02:1c:17:75:a0:42:4d:22:5f:c0:24:16:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Validity
Not Before: Aug 13 07:01:08 2026 GMT
Not After : Aug 14 07:01:08 2026 GMT
Subject: CN=38a18c10861245af9dc91dcd52e292a5e25f4bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:aa:6e:9f:f7:a1:37:e8:d6:aa:cb:b0:0c:62:
e5:91:d0:8a:32:13:00:00:0a:71:8d:65:de:ab:92:
3f:66:86:2a:21:6e:eb:18:75:40:aa:99:f2:7a:0a:
33:2a:00:94:02:5e:eb:08:e2:5e:41:d3:28:e0:e3:
02:ff:f6:01:f6:25:cc:ae:80:3b:60:98:49:91:d6:
b4:12:4b:b1:4e:44:07:f7:d2:aa:63:66:8c:dd:0c:
c3:2a:cd:83:a9:2f:98:e3:21:6f:26:c3:07:a2:da:
56:df:4b:36:37:81:6b:eb:76:7e:56:50:3d:56:6d:
bd:23:76:e3:48:e1:4f:81:5a:81:27:41:6b:27:5a:
b6:94:b7:1d:d1:fd:b9:49:c0:7d:c0:7e:f6:f3:d6:
e2:c8:b0:ce:a1:87:64:70:bd:e5:75:c5:35:d6:72:
30:7a:ef:26:f3:79:fd:dc:ee:fd:12:c3:6e:d7:05:
c0:2c:6c:a5:45:62:e5:79:3b:bf:29:a1:4d:13:67:
09:0d:45:f6:7a:b3:b1:84:ac:50:f4:79:87:9e:b0:
af:c0:99:96:53:16:09:8d:6d:4e:98:46:42:ad:33:
59:8b:2d:fd:02:23:ac:d5:6e:78:9e:08:8c:8b:32:
c1:01:60:13:9d:31:0a:f9:c7:61:ee:fb:fa:ed:18:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:8C:10:86:12:45:AF:9D:C9:1D:CD:52:E2:92:A5:E2:5F:4B:AE
X509v3 Authority Key Identifier:
keyid:AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:3a:b8:a8:04:2f:7f:14:b8:15:74:08:f0:ab:c5:a2:0e:
47:0c:45:3b:16:19:9e:c4:97:bb:f2:3d:57:01:54:fb:ab:a2:
42:24:90:0e:9b:8e:13:bf:24:c6:fb:eb:0d:f3:92:ef:c0:c2:
27:17:8a:dc:ef:b8:5d:ea:5c:2f:96:83:33:c7:47:d5:98:a9:
4f:b0:4f:35:e8:c9:46:46:69:57:13:46:70:5a:02:b3:38:a0:
fc:0d:77:b7:cd:b7:36:07:36:7d:6c:5d:3f:49:28:56:b1:e4:
98:ec:55:16:4e:3b:30:7a:dd:5d:19:50:04:35:9a:dc:09:ba:
2f:c4:f7:fa:4c:b7:03:c4:70:a9:5e:eb:a0:90:4f:96:d0:2e:
92:da:eb:81:fa:1e:3f:27:16:7f:d2:35:98:f7:1a:1d:de:60:
5c:5c:d2:cd:c9:bd:05:c4:07:c6:e9:25:7d:1a:a7:23:6e:9c:
a5:db:8e:65:eb:e8:c9:5c:e8:5e:9d:c1:45:c6:f6:fd:9f:73:
3a:be:af:18:f9:04:ce:72:7d:3a:18:11:5b:77:d0:3f:7a:39:
2b:81:fe:0c:29:e8:fa:58:c3:d4:7f:35:c2:0c:20:b4:80:fc:
b9:f7:2e:c7:46:b4:9a:23:a5:1e:72:81:b2:65:d3:5d:81:43:
a6:d6:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:44 2026 by rpki-client