Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
File: rDxbVWwAUfY7zKUE6u6YM20K6n0.mft (raw, json)
Hash identifier: pqp1kaC/bWb7n/emlXzxIMm5b6QtlHwlX/8EgwgJDkA=
Subject key identifier: A4:A2:F4:4E:BE:7E:40:BB:1E:7E:F3:F5:E1:D6:0B:A4:F2:05:98:F0
Authority key identifier: AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
Certificate issuer: /CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Certificate serial: 019FAE640CF76B66A0C7782E6D6D7B32311D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
Manifest number: 4F
Signing time: Wed 29 Jul 2026 15:00:20 +0000
Manifest this update: Wed 29 Jul 2026 15:00:20 +0000
Manifest next update: Thu 30 Jul 2026 15:00:20 +0000
Files and hashes: 1: 8meTSesX-bzpkzyvx9ELA1ZiM5Y.roa (hash: wPyw7XGgTqagRr/B70qwK48d2umXqb3H9XJBsVrBmTU=)
2: rDxbVWwAUfY7zKUE6u6YM20K6n0.crl (hash: 2XhbXbQFSGubT9R44HEEKQJV6N+tsct19Uppsj7w7iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:0c:f7:6b:66:a0:c7:78:2e:6d:6d:7b:32:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3c5b556c0051f63bcca504eaee98336d0aea7d
Validity
Not Before: Jul 29 15:00:20 2026 GMT
Not After : Jul 30 15:00:20 2026 GMT
Subject: CN=a4a2f44ebe7e40bb1e7ef3f5e1d60ba4f20598f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:2e:80:7a:60:0b:21:52:4a:dd:39:90:b9:
2a:b9:6c:f4:a2:2e:54:b8:7b:eb:1e:89:1e:5d:67:
b6:a8:ef:d0:63:e9:e7:0c:50:fa:a2:6f:26:88:a7:
4e:fa:0c:7f:b6:86:87:16:9e:68:04:21:9c:77:c1:
56:21:f5:ac:b7:92:4d:c2:59:a4:77:60:0d:4b:35:
f4:c3:e0:9a:e0:8f:c9:cc:ff:f9:fc:00:70:da:da:
e4:03:60:9a:85:af:bc:ba:d2:42:91:fc:a1:d1:aa:
d8:7b:ca:cb:cb:01:aa:47:cd:b9:e9:ba:16:ee:81:
b0:4c:eb:13:34:1c:58:0c:ad:9d:d4:6a:dd:3a:da:
4d:92:9e:a6:c8:6a:d2:4a:30:db:68:3c:93:50:11:
70:76:e7:9f:00:ba:53:14:25:6f:8a:14:2f:c4:4b:
6e:52:5f:42:d3:56:fd:80:b3:58:f9:b0:db:70:d0:
0f:29:07:13:e1:22:77:90:3f:7f:e2:ee:0b:a6:6b:
e7:fe:88:ae:8f:0b:d7:37:64:1d:60:22:dc:7e:d4:
83:24:0d:0e:15:10:69:8d:b3:ee:76:37:6d:ff:62:
63:7c:67:cf:6c:c2:2c:74:ff:00:31:b6:11:75:74:
22:74:8b:e0:c8:f4:3e:d0:eb:0a:18:d4:d8:a3:2c:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A2:F4:4E:BE:7E:40:BB:1E:7E:F3:F5:E1:D6:0B:A4:F2:05:98:F0
X509v3 Authority Key Identifier:
keyid:AC:3C:5B:55:6C:00:51:F6:3B:CC:A5:04:EA:EE:98:33:6D:0A:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDxbVWwAUfY7zKUE6u6YM20K6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/rDxbVWwAUfY7zKUE6u6YM20K6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:ca:81:5f:95:7b:69:3d:07:fb:05:0e:6c:37:f8:af:a2:
28:8a:9f:f0:db:96:14:36:67:d4:ab:6f:d0:01:75:5f:3e:6d:
f0:2d:3a:7f:b6:fb:a8:2d:7c:f4:da:bc:46:e3:99:40:05:01:
34:7a:52:dc:c6:81:03:d1:05:d1:bd:a2:59:70:5d:fb:44:dd:
86:3f:2a:04:ba:18:06:2e:a1:55:76:fa:1d:0d:da:74:d8:be:
4e:b5:d6:52:04:07:50:e1:6b:77:88:9c:dd:4e:78:8e:bf:02:
fb:d4:a0:ee:76:69:e8:78:ef:de:38:40:e6:4b:07:07:d0:c8:
59:bd:5f:00:b6:87:78:78:65:97:ba:b0:db:c8:ba:cf:3c:e3:
4d:74:70:5e:55:df:98:3e:93:e1:8b:35:94:80:49:96:35:2d:
a1:fc:cc:11:f9:74:f0:10:07:a0:ab:86:56:44:3b:c1:11:10:
00:9b:2f:9e:9f:de:19:8a:91:6d:c5:a6:0f:69:ab:bf:54:92:
0e:3c:bb:1b:37:8c:c7:29:99:f0:c3:ed:d1:c7:d3:63:ec:17:
fa:20:16:9d:6c:cc:0c:9c:9b:c7:bc:de:ac:72:e6:ff:6e:b4:
81:bf:af:25:9c:15:37:09:cd:98:84:c9:82:7d:7b:12:05:c3:
22:93:74:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:47:11 2026 by rpki-client