Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: 9axz1X0NLLCZGYlYDZrjuo0ZYe0J7Mh0kjqJdwbxo/g=
Subject key identifier: 60:8C:89:DD:0C:0F:DA:01:C2:43:2F:50:E4:10:4B:F4:4A:1D:23:2F
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019FFE00697ECA02728EBAADAF0E59C5E1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 02:01:07 +0000
Manifest this update: Fri 14 Aug 2026 02:01:07 +0000
Manifest next update: Sat 15 Aug 2026 02:01:07 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: gIXR9BtZGRfvKo0VQuoL7wpjjujjfGhFZafXFYFf8EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:00:69:7e:ca:02:72:8e:ba:ad:af:0e:59:c5:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Aug 14 02:01:07 2026 GMT
Not After : Aug 15 02:01:07 2026 GMT
Subject: CN=608c89dd0c0fda01c2432f50e4104bf44a1d232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:2b:33:2e:a9:9b:b2:37:69:0b:3d:07:71:
3d:e1:5f:f9:4c:ad:d8:20:34:f8:89:c3:f3:93:65:
89:16:54:cf:a0:6d:c6:3a:fa:e4:aa:7e:0e:b7:c4:
c0:a2:30:de:9e:24:e4:d8:09:56:b5:ee:6d:ee:35:
7a:ad:95:4e:a7:b8:e8:a1:66:43:1e:d9:32:f0:9a:
f6:d9:a2:25:12:5f:1e:c9:c4:ae:5a:cf:54:41:c1:
c1:81:3c:12:be:b2:21:48:6b:f9:32:58:a5:4c:c6:
ae:6e:39:1b:05:69:a8:72:3e:04:19:98:f8:cd:fb:
6d:7a:21:58:5e:9d:e2:fb:50:34:ce:85:c6:4d:99:
43:b7:02:61:c9:2d:ac:5d:46:04:2f:6c:29:8a:2a:
cb:59:11:8b:e3:be:25:72:9d:23:d9:6d:e0:9c:21:
2f:d4:76:90:65:45:d4:bb:0a:59:39:dd:a8:3a:90:
6e:bf:0a:7b:d6:92:78:86:6e:e8:33:dd:76:ca:61:
2f:53:37:55:be:6e:71:35:72:77:34:9c:30:01:36:
90:e0:60:b0:77:a6:ed:a4:7e:21:f6:29:9a:3d:a6:
0c:78:0c:72:b6:d6:40:0b:2f:8d:3d:08:a5:3e:33:
3c:ad:ae:83:45:a5:8b:56:8b:7b:c8:95:5c:68:fa:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:89:DD:0C:0F:DA:01:C2:43:2F:50:E4:10:4B:F4:4A:1D:23:2F
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:54:ca:58:99:56:e1:8b:28:70:26:35:1c:1f:78:e5:1d:9e:
4c:4f:e3:cf:12:ec:99:d7:57:0b:23:ca:c6:6f:51:fd:cf:dd:
ce:9b:60:7d:d6:31:df:f0:dc:80:6a:c9:d2:f4:10:29:46:7f:
e8:0a:6c:07:3a:bc:01:2c:ef:53:01:d5:cb:c3:11:e4:02:97:
a9:b0:4c:23:9f:24:06:49:30:73:8e:bc:50:c0:e3:c3:64:6a:
f4:2e:57:48:71:fb:b3:c4:80:a6:ae:4f:98:62:a6:1f:35:b0:
ec:0d:a7:de:15:eb:3b:2b:0f:a9:e3:9f:a3:e2:29:a0:20:58:
5b:e8:47:fe:74:50:0b:b0:7b:0d:c4:c5:f4:a9:26:83:39:dc:
78:09:57:13:d3:86:1b:9f:20:aa:a3:2b:09:f9:ee:82:1e:d8:
dd:7e:8f:8c:85:8a:30:68:0e:16:6b:1b:44:1f:d1:79:72:27:
75:ca:1d:28:1c:62:76:ee:94:6f:d1:4e:10:1d:2f:32:5a:c0:
ef:a5:76:ff:5b:ef:48:45:84:77:d8:c7:c1:7f:61:6f:3b:51:
0f:d2:d1:03:11:a8:26:9b:98:97:27:51:0e:5e:4d:de:6d:98:
d2:63:0e:cd:7a:58:27:c2:96:79:7e:d4:60:9a:f7:de:d6:f3:
c1:c3:e3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:11:21 2026 by rpki-client