Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: TpFiH64RJYBYf3qrgvnt4BWaIyeMEnwmqyYeGEJix3w=
Subject key identifier: 4A:AC:39:B4:85:0F:CD:41:82:A0:64:CA:2C:91:89:16:CE:46:2D:54
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019FA1BB873F043C130CFEEA3F69B95CBA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0E9E
Signing time: Mon 27 Jul 2026 04:00:49 +0000
Manifest this update: Mon 27 Jul 2026 04:00:49 +0000
Manifest next update: Tue 28 Jul 2026 04:00:49 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: Wwdf/6u+xOaUSDv8rdVxNKxMuwmTwji9mUHcpfBjQcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:87:3f:04:3c:13:0c:fe:ea:3f:69:b9:5c:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Jul 27 04:00:49 2026 GMT
Not After : Jul 28 04:00:49 2026 GMT
Subject: CN=4aac39b4850fcd4182a064ca2c918916ce462d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ff:a1:48:d0:d7:dc:8e:e1:f8:61:47:07:21:
51:fb:3e:4b:58:49:6f:04:6a:9b:25:2a:e1:c5:c8:
d7:13:5e:52:65:ec:aa:d7:b0:60:63:4a:97:78:8d:
a9:ae:cf:9a:d7:1d:06:81:cf:10:02:40:56:91:3a:
46:71:ca:42:af:e1:d4:2b:be:d2:a9:35:01:4a:f6:
c8:53:ff:e2:6a:f5:1e:49:c2:d0:f7:2e:ee:fa:8f:
3f:d9:92:1d:71:6f:53:62:aa:a2:76:a2:9b:d2:22:
e1:b8:41:55:a4:ac:e4:24:ad:2a:7f:f4:17:c6:35:
bd:17:d3:60:aa:ca:30:db:17:7c:65:0e:e0:81:37:
22:d8:fc:29:8f:71:73:f6:fb:88:9a:a9:80:32:4c:
97:e8:24:59:c7:d6:4e:20:42:52:a4:cc:28:63:b2:
e4:ba:52:9f:1a:36:55:56:54:fc:44:1d:0a:93:0a:
51:db:1b:67:ee:61:6c:93:fc:03:8d:d7:9b:c1:f3:
ff:f5:b4:34:76:b6:27:f1:44:5c:19:1d:50:c3:d8:
d0:f8:f3:63:4a:9d:d4:2f:39:b8:4a:f5:eb:c8:61:
14:47:5f:e6:29:4a:18:7b:05:92:4c:92:6c:05:3d:
3a:d0:67:c7:af:93:c6:fb:1b:10:90:83:89:2a:60:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AC:39:B4:85:0F:CD:41:82:A0:64:CA:2C:91:89:16:CE:46:2D:54
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:50:24:28:86:77:a7:14:e9:19:ac:dd:6e:99:72:c4:46:
b0:ba:bb:fc:cc:83:28:66:2b:e8:33:25:8a:09:bb:9c:2c:b6:
c9:9b:f0:68:e4:51:a2:92:35:47:9e:20:32:84:65:b9:41:cf:
64:3c:c4:da:d5:ed:69:73:5c:85:39:64:62:44:79:04:5e:1a:
9b:ec:c5:e6:9f:cc:21:99:e5:7d:fb:c8:21:9f:f6:ac:29:41:
b8:cf:46:07:82:2a:58:96:00:1a:93:ff:07:03:8e:28:bd:d4:
46:47:90:d2:2b:6d:d5:1e:0c:25:30:a5:0b:e4:b3:b7:ac:80:
04:71:ec:f3:db:3d:c5:0e:2c:45:22:da:28:12:e2:59:74:04:
99:d3:20:71:5e:93:9a:b1:1c:4c:cd:7a:a4:a9:a6:79:b3:9b:
25:65:49:e8:a6:fe:91:bf:41:ea:16:12:a1:6a:5f:cc:3c:26:
2d:41:fb:b4:cd:0d:73:30:68:bf:7e:89:62:ff:da:44:a6:63:
8b:f9:8c:97:fa:05:01:e5:2f:6c:24:72:b9:62:23:27:9a:41:
48:a9:dc:78:e7:36:75:7a:74:7f:84:38:fc:d7:9a:55:a5:1c:
6d:ae:8b:8e:d2:82:42:03:36:34:8f:68:53:40:e9:5c:59:3d:
2f:27:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:28:31 2026 by rpki-client