
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: xh1xuGBpBaaRxMluD7WZlRvh9cRhCC9yqBHSOoKoWIQ=
Subject key identifier: AA:4D:5C:13:DD:7A:72:FE:D7:06:6C:95:CB:96:1C:B1:96:F1:BC:C8
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019F84C3413199DF9B8AB91614B129CE1F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 19C5
Signing time: Tue 21 Jul 2026 13:00:16 +0000
Manifest this update: Tue 21 Jul 2026 13:00:16 +0000
Manifest next update: Wed 22 Jul 2026 13:00:16 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: niZmGZR0RZh4mZMN8YlnB/yFYSQEL4C/cKEvxAr9BkQ=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:41:31:99:df:9b:8a:b9:16:14:b1:29:ce:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Jul 21 13:00:16 2026 GMT
Not After : Jul 22 13:00:16 2026 GMT
Subject: CN=aa4d5c13dd7a72fed7066c95cb961cb196f1bcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:2b:10:cf:63:03:cf:95:46:8d:70:5d:b3:
86:b2:ab:69:47:c9:82:5d:81:26:d7:1f:4c:b0:ef:
15:d6:00:0c:79:fa:8f:58:a2:b0:3f:75:6d:16:5e:
3a:31:f4:c3:71:30:e1:02:08:bc:86:1d:e5:6e:2b:
a0:8a:7b:d8:8e:f1:ff:66:7e:0f:c1:d8:2a:3b:19:
81:23:de:ef:c2:03:b5:73:49:e3:70:00:bd:42:d4:
27:31:f1:dd:8f:fd:94:9e:a0:70:8f:64:be:f1:8a:
53:7c:89:e0:38:3b:11:21:d8:7b:a5:68:73:20:09:
2b:84:d5:ac:c9:4a:ab:60:c6:e5:85:be:4c:f5:ad:
cf:d8:ec:eb:86:5e:1f:77:93:43:16:6c:8e:74:d4:
40:49:bd:8b:0e:5a:e0:d9:f9:e2:2d:94:63:06:cd:
ef:ed:ec:0a:87:c7:e0:ec:42:03:c2:40:68:f7:9d:
fc:f1:59:2e:ea:03:91:40:bd:c3:be:f9:98:1c:a6:
a1:89:53:bd:85:f4:fc:0a:e9:50:ae:fa:2f:3a:af:
ff:b5:7b:69:21:03:2e:9d:14:d0:08:b5:8c:05:df:
02:f2:88:64:d1:c3:89:54:e9:24:18:10:ca:c0:fa:
e0:cc:97:a5:4e:3e:07:1d:31:c7:70:82:fd:2d:c2:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:5C:13:DD:7A:72:FE:D7:06:6C:95:CB:96:1C:B1:96:F1:BC:C8
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:26:04:b3:f9:a1:16:58:9d:9d:96:26:9f:af:b2:f7:ea:bb:
d5:85:65:cc:6c:f9:09:46:24:9b:42:3b:09:ed:60:d6:71:eb:
0e:df:c0:b0:c4:04:cf:c3:7e:3a:76:d5:74:52:3d:57:cc:dc:
24:51:6a:be:e8:ad:8d:97:52:ff:2b:55:0c:14:3b:82:71:25:
e7:3f:3f:d9:9c:92:f5:95:e1:0e:7f:3d:58:76:ac:19:78:f5:
4e:de:2e:cc:c3:47:ea:71:00:68:68:71:bd:b7:06:4a:02:06:
62:3f:b6:e8:8d:53:9d:f6:f3:6c:f4:6f:76:e5:93:59:6a:7a:
95:01:b5:36:4c:a2:c6:55:8e:55:6e:25:c5:49:35:43:1d:0b:
c1:e0:59:da:8a:98:ac:c7:83:a2:1f:ca:85:61:ed:1e:e6:6c:
63:6d:f0:4d:a5:c1:ea:84:c6:ba:3d:cf:8f:c6:09:41:ca:83:
0f:0f:6b:a4:17:32:8e:01:dc:43:09:27:96:be:14:89:b7:dd:
f8:2c:35:8d:c1:3b:c6:78:e8:2f:a6:18:b7:dd:7a:34:69:b4:
f0:2e:b4:ee:95:a2:45:c0:0e:50:dd:d2:ea:ec:81:e9:b0:b0:
7f:7c:a0:ab:97:f5:74:c8:69:84:65:7e:10:21:22:49:e3:c4:
8a:4b:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:16:56 2026 by rpki-client