Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.mft
File: rulyCvaiOPXyGD8kr8HGM1vUmJs.mft (raw, json)
Hash identifier: E9Fjb5lBYZGsvnpk3aVNSrT5rgD2tELRJKYh1XGBRNQ=
Subject key identifier: 43:FE:4A:29:9C:88:13:76:6C:4B:15:D7:C2:05:FA:4A:3A:EF:79:37
Authority key identifier: AE:E9:72:0A:F6:A2:38:F5:F2:18:3F:24:AF:C1:C6:33:5B:D4:98:9B
Certificate issuer: /CN=aee9720af6a238f5f2183f24afc1c6335bd4989b
Certificate serial: 019F792D827DCF52F0AB636AB6E1201B820E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rulyCvaiOPXyGD8kr8HGM1vUmJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.mft
Manifest number: 43
Signing time: Sun 19 Jul 2026 07:00:53 +0000
Manifest this update: Sun 19 Jul 2026 07:00:53 +0000
Manifest next update: Mon 20 Jul 2026 07:00:53 +0000
Files and hashes: 1: lowYknS0Iv7qlnUiFibi-aPZRKk.roa (hash: btYuS2SWntQEuI31gA/9LOF0gEbQfkmD7aR2AXpYUBA=)
2: rulyCvaiOPXyGD8kr8HGM1vUmJs.crl (hash: BPGZOHbH+uUjiua06IO23/7HNfATnTLPKJcJ1x23QFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rulyCvaiOPXyGD8kr8HGM1vUmJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:79:2d:82:7d:cf:52:f0:ab:63:6a:b6:e1:20:1b:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9720af6a238f5f2183f24afc1c6335bd4989b
Validity
Not Before: Jul 19 07:00:53 2026 GMT
Not After : Jul 20 07:00:53 2026 GMT
Subject: CN=43fe4a299c8813766c4b15d7c205fa4a3aef7937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b3:44:49:2a:f2:a5:c3:94:d4:a2:7d:e9:6d:
ae:2f:4f:97:f2:ed:33:26:56:a4:c8:cd:8b:81:35:
9b:6b:11:97:5d:5e:fc:e1:67:24:57:fc:ca:3b:a3:
19:47:fa:47:b2:49:ff:a5:4f:fe:a1:b9:39:14:97:
d5:d3:44:ce:59:69:ac:09:17:98:62:7e:0f:9b:32:
9a:1f:8d:c6:b6:ca:dc:9d:67:ef:04:ce:1e:e8:34:
a2:0f:3e:b8:99:bc:84:16:19:29:44:b1:cc:91:5b:
3b:66:64:17:2f:1a:cb:a7:66:b4:f2:00:92:92:78:
a2:37:45:90:34:d0:c5:01:d4:cc:3c:b9:ee:b5:f9:
fe:35:4e:1c:a2:93:0a:4f:69:3e:6c:5f:36:6b:05:
88:13:4a:7a:29:42:c3:d4:ea:dd:57:c6:9f:c9:13:
5c:62:6f:2b:28:e9:01:f6:4a:7e:49:80:15:4e:ab:
50:e4:58:45:c6:a1:3d:f5:5b:96:7a:7f:81:b3:a2:
e5:3f:71:7b:35:31:f6:5c:21:9d:5a:e0:05:57:ef:
48:b3:d1:c5:d5:18:22:6c:29:01:e1:83:6c:77:ed:
b1:6b:21:d9:a8:2d:a7:38:67:5f:7b:5e:cf:30:6c:
7b:71:79:a5:61:38:4b:39:50:ed:b7:b0:b9:22:de:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:4A:29:9C:88:13:76:6C:4B:15:D7:C2:05:FA:4A:3A:EF:79:37
X509v3 Authority Key Identifier:
keyid:AE:E9:72:0A:F6:A2:38:F5:F2:18:3F:24:AF:C1:C6:33:5B:D4:98:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rulyCvaiOPXyGD8kr8HGM1vUmJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9cff30-d8eb-4ca0-99f4-eade13818a64/1/rulyCvaiOPXyGD8kr8HGM1vUmJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a3:10:1e:3a:2f:9b:2a:02:72:47:0e:90:0c:00:eb:43:45:
9e:ea:c5:54:ec:b1:c4:ab:d5:8a:42:f6:84:2a:a5:68:fb:87:
d2:b9:e7:65:2d:88:3c:b5:70:59:8a:8e:ad:b4:5e:e9:7e:85:
fd:98:b0:69:44:89:59:01:30:36:24:4b:fb:eb:6c:fb:61:b3:
e5:14:e5:c2:13:72:78:59:3a:76:4d:96:93:9e:51:99:e5:1a:
b7:dc:1c:51:af:2e:a2:96:c9:b5:7a:f5:3b:80:79:de:77:7b:
1a:56:d4:8c:4d:f3:28:cf:6b:af:1a:8d:f4:b6:96:70:ad:7f:
d4:1c:78:fe:f4:44:30:ad:de:a3:8d:cf:53:ad:eb:07:c8:f3:
1a:b7:3b:ce:ac:b5:e6:3a:96:3b:3e:e7:da:33:f4:07:e0:6a:
fd:67:3d:19:12:e6:11:fc:ff:3c:3e:5b:15:00:7c:c5:9a:54:
56:5f:98:88:9a:38:b5:3e:08:21:8a:0f:a4:1b:94:3d:aa:b9:
77:fc:d8:fa:08:ee:68:98:3e:83:54:79:68:0c:a6:52:ba:10:
cb:33:9c:78:b3:f4:93:b0:59:45:0d:f2:3d:97:28:5b:b6:5f:
f2:3b:90:ad:fc:c9:4d:71:e2:bf:a0:b8:79:d8:a5:30:86:65:
89:a6:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 09:10:57 2026 by rpki-client