Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
File: ac7WLmmPOc-za-DE0cmEBfZ641A.mft (raw, json)
Hash identifier: b0CK11NOAs4GqxBMNzjGneupAxeCrF3vuq0PyIuECTk=
Subject key identifier: 4D:6D:6C:61:C2:3F:12:28:03:B1:15:71:85:65:7E:E9:4C:C8:A1:A1
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 019F36A9B24078A6FF65EF17DC4AF54376A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:01:58 +0000
Manifest this update: Mon 06 Jul 2026 09:01:58 +0000
Manifest next update: Tue 07 Jul 2026 09:01:58 +0000
Files and hashes: 1: 8ds30e27s4jEGttTs6YlBQM3z5s.roa (hash: fhyuHvz2U+aS6Bex74blw3zMPMfs8rwkJE+Axsibwvc=)
2: DABiD7uw5X1UDgK0KYm4pTweBTs.roa (hash: CdIof73ob606H6HEETNJAXQA/8lVWBNHp980E+YLvcU=)
3: XHiCg7-vOaMABA4CYBKSVf3rQRk.roa (hash: g1IQNPouH48EoFzQdEYNrlJEZkzgvbZrvrkCirhFzgo=)
4: ac7WLmmPOc-za-DE0cmEBfZ641A.crl (hash: TeDSM9QV94EW/iA7MKvd4rd8mL0twnag+NaoEq1ov64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:a9:b2:40:78:a6:ff:65:ef:17:dc:4a:f5:43:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Jul 6 09:01:58 2026 GMT
Not After : Jul 7 09:01:58 2026 GMT
Subject: CN=4d6d6c61c23f122803b1157185657ee94cc8a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:c0:69:34:88:9d:97:e4:00:ff:82:94:51:
e2:35:99:aa:c2:46:60:44:d1:6d:e4:be:67:b6:31:
e9:1e:b1:ed:24:60:2f:0c:1d:31:58:14:2b:39:81:
37:74:8f:e9:ee:0a:c2:1a:09:9c:1c:82:2a:d8:6e:
36:50:a1:b1:ae:ed:e9:f6:b4:30:a1:b5:f1:c4:ff:
be:75:52:4f:4b:eb:6a:e2:d4:be:6a:cb:39:92:ac:
4a:79:8c:f3:53:72:ba:b0:43:f8:9d:a4:15:7a:69:
64:32:09:ad:50:16:2d:3d:a6:57:4f:78:53:b9:16:
66:67:bf:56:f8:4a:71:ef:4f:98:61:cf:64:c6:5d:
aa:c8:ef:1e:1b:95:c0:ca:79:9a:00:f3:7f:cb:02:
9b:1e:36:2f:78:69:47:d6:df:4e:b0:d4:c9:6c:80:
38:8d:71:85:2c:33:14:57:de:6c:21:fa:f3:45:1e:
a8:30:41:10:c4:67:4d:ff:e0:87:f0:85:65:3d:e6:
b6:fb:85:70:cd:01:60:77:ea:77:a5:0d:51:08:6e:
d1:d5:36:21:54:98:26:5d:4c:69:b5:d0:1a:8d:2d:
79:bd:18:53:1e:53:7d:e6:86:71:43:38:76:c3:22:
48:f0:2a:ac:8f:79:23:66:a9:bb:2c:c4:ac:8c:d1:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:6C:61:C2:3F:12:28:03:B1:15:71:85:65:7E:E9:4C:C8:A1:A1
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:27:67:cd:3d:3c:e0:23:af:d1:1e:e6:3b:9f:7d:a8:73:91:
af:05:6b:80:ad:aa:58:99:ec:40:af:5c:a1:41:91:07:e4:a5:
8e:15:13:27:ab:6e:1f:6b:19:21:db:bb:0f:40:6c:07:c1:37:
40:1f:2d:2f:ec:d7:12:10:33:02:c6:80:28:29:e9:4f:07:48:
1f:a8:95:55:59:e5:2f:00:12:fe:44:8f:7e:eb:84:d3:d4:49:
35:e2:19:c5:ad:b4:a8:73:f0:a2:9e:1e:a1:bc:0c:d5:71:c6:
2f:38:0f:70:2e:67:89:88:6a:e6:4a:39:2a:e5:a4:16:e6:05:
cd:bd:6f:21:a2:8d:bd:55:29:52:0e:d5:11:f2:24:8d:32:80:
14:98:a9:65:92:ed:d2:4b:ab:f1:a5:4d:b9:1d:47:d8:68:80:
c6:33:67:50:03:0f:6d:72:95:65:f6:1b:ec:e7:8b:7d:ca:dd:
53:85:68:b8:b2:a6:d0:69:0c:5e:81:e8:2c:e3:84:88:7e:9d:
95:5c:fb:fe:4d:aa:63:6e:e6:9d:4a:95:c2:dd:e4:04:6d:ee:
76:84:50:b4:d2:87:73:05:dd:97:95:02:82:a5:83:58:4f:e0:
e6:db:14:c1:c6:6a:a9:11:26:44:f2:30:45:20:58:d8:90:c1:
ad:75:c7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:03:25 2026 by rpki-client