Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
File: rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft (raw, json)
Hash identifier: DPqNXifgKkEx/qWGIz5PHzBZ3fitSCzPRUe2EcrFmls=
Subject key identifier: 43:3C:E3:42:A9:98:E0:67:52:D5:90:E7:4B:14:D0:1C:B8:83:3A:CD
Authority key identifier: AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
Certificate issuer: /CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Certificate serial: 019FF9B6C5F51394D70956A4B33D4EF3403F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
Manifest number: 76
Signing time: Thu 13 Aug 2026 06:02:12 +0000
Manifest this update: Thu 13 Aug 2026 06:02:12 +0000
Manifest next update: Fri 14 Aug 2026 06:02:12 +0000
Files and hashes: 1: 1-ERVtGkQFVLEAe5xG0wIY6GGE34.asa (hash: mjH6RC1GOMQBGylDtGbnzG1J9xH1Inj7D3rVzqYEW3c=)
2: rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl (hash: RuwvKGx3wW9KCW+j/MDrlE6OSAk1UKhhEqJonHL4dT0=)
3: tF6OZDIuvO_4gHcUUPVxkptJ-So.roa (hash: CNMlE4sv1Wt5NYL3ambevPDyZVwmhdaYb/bTSeYfSYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b6:c5:f5:13:94:d7:09:56:a4:b3:3d:4e:f3:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac41130d77d0f6822df6dc71f569aaff47f672de
Validity
Not Before: Aug 13 06:02:12 2026 GMT
Not After : Aug 14 06:02:12 2026 GMT
Subject: CN=433ce342a998e06752d590e74b14d01cb8833acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:b3:db:b0:a6:a1:c8:32:26:e3:6b:5a:57:
cf:4d:08:73:4c:a1:76:1a:d4:8f:41:85:30:69:b0:
82:79:56:de:3b:e4:65:1c:67:d2:03:6d:43:2c:d1:
07:b4:54:c7:54:fd:bf:db:69:d3:e5:87:93:52:64:
c3:e9:7b:03:70:b9:90:b8:be:e9:b9:7d:5b:7b:53:
8e:03:74:da:b9:0e:98:0d:bf:a6:f5:ab:b3:6f:43:
84:c3:09:b5:ec:83:5f:13:a1:27:5b:4b:bc:8a:db:
bd:30:15:d3:b1:15:1d:d7:19:4a:a9:09:7a:72:45:
a9:c7:b4:9a:7c:37:3e:07:12:9c:db:11:40:6e:96:
67:be:d6:d3:2f:fe:2a:b9:5e:31:4e:98:59:29:35:
f3:ac:bf:31:73:a1:bf:df:a7:33:7e:52:22:f0:70:
32:d5:13:51:c4:c2:18:7e:d6:d7:1a:e5:e9:b6:85:
fd:fb:4c:a4:f9:45:ed:4b:d0:65:9a:04:6e:4b:fe:
61:b4:d1:a8:9b:e6:3e:f8:1d:a6:a3:17:c7:6a:66:
87:03:b5:91:79:f3:b6:10:34:a2:e6:c0:16:c0:63:
04:85:0c:68:8d:87:f2:5f:f8:46:37:5c:3a:02:1d:
ca:09:84:5e:e5:17:0b:9c:0c:93:db:1f:17:18:aa:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:E3:42:A9:98:E0:67:52:D5:90:E7:4B:14:D0:1C:B8:83:3A:CD
X509v3 Authority Key Identifier:
keyid:AC:41:13:0D:77:D0:F6:82:2D:F6:DC:71:F5:69:AA:FF:47:F6:72:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEETDXfQ9oIt9txx9Wmq_0f2ct4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/03affa-4029-4ad7-979f-fd8b91ef53eb/1/rEETDXfQ9oIt9txx9Wmq_0f2ct4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:86:ec:63:9e:02:f5:40:87:e9:15:35:24:b9:5b:0c:ed:
3e:74:f0:3c:b7:e9:71:51:8c:45:d4:0d:56:80:f3:e2:2a:c6:
23:f5:db:c9:c0:57:3e:41:d7:d8:dc:ec:65:ca:e1:74:f6:37:
dc:1d:40:8b:d3:ad:a7:74:ca:9e:af:9b:dd:a6:9f:12:13:5a:
9f:58:41:9d:1c:12:c9:0b:da:ec:1e:87:73:f6:f9:b5:96:e2:
62:74:38:73:ef:4d:06:34:a5:1d:d2:2a:ca:b7:7b:e1:5b:42:
aa:1c:ae:de:92:51:94:a1:b3:f4:25:86:99:62:29:5c:41:e1:
fb:4f:11:1a:be:b7:39:19:b0:f2:04:19:23:c5:a8:9e:1c:b3:
b1:b2:b0:1f:6b:6f:56:8d:bf:32:dc:c0:54:60:47:7c:2d:9f:
17:ed:5d:24:1b:e4:98:7b:8a:ac:09:53:21:78:c4:05:1c:f4:
d7:53:2b:b6:50:d4:d6:b0:6e:9f:3e:7b:8a:18:89:3c:59:a8:
c0:59:55:24:86:8a:1e:9f:d5:4c:7f:6c:f5:33:7a:02:69:28:
31:e4:75:6d:4b:3d:af:9f:7b:b9:b7:04:38:0b:54:02:2d:e7:
8d:6f:43:25:04:6d:65:52:cb:ef:93:b0:37:b4:46:73:bf:a2:
9f:dd:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:45:44 2026 by rpki-client