Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: oaCGPhDDeqDR1C1C5MW6fLUfBIs6VAL87Eqv2OAMEOU=
Subject key identifier: F4:04:87:5C:F8:53:0A:14:68:B3:67:C1:C7:0B:9E:76:5B:EE:E5:D8
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019FA003C7E4F774D82D5BD418C860EDE7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 19DE
Signing time: Sun 26 Jul 2026 20:00:29 +0000
Manifest this update: Sun 26 Jul 2026 20:00:29 +0000
Manifest next update: Mon 27 Jul 2026 20:00:29 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: tHVg+O/5Xp72XPtYsp9xFHs9xJgN70bpfTc6FQmI2dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:c7:e4:f7:74:d8:2d:5b:d4:18:c8:60:ed:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jul 26 20:00:29 2026 GMT
Not After : Jul 27 20:00:29 2026 GMT
Subject: CN=f404875cf8530a1468b367c1c70b9e765beee5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:4d:c8:0c:f8:bd:5c:13:b2:3d:9f:67:4c:dc:
40:a3:32:2b:9d:a8:78:53:17:90:42:c9:30:49:33:
cd:59:e7:1c:af:43:f2:8b:b3:4a:5d:d0:81:65:83:
93:2a:22:c1:fa:f3:05:fa:16:66:ce:5c:26:f9:eb:
b4:18:f9:56:72:c1:69:63:ec:0f:9b:12:e8:a9:60:
14:b1:89:e7:f2:eb:d1:1e:3e:a9:07:c9:3a:09:2e:
1e:1e:11:b8:bf:07:19:8c:5c:00:91:ad:5c:c1:55:
db:79:8b:85:be:38:eb:86:22:5e:ad:9b:2c:e7:81:
b1:dc:5d:63:01:04:74:5c:0e:27:96:11:63:bd:77:
a4:3c:96:cc:15:50:b3:23:70:9e:43:a1:91:ce:cf:
52:68:8c:cd:7d:09:d7:23:d0:05:c9:c1:80:f7:35:
e9:cd:7e:df:f7:74:eb:2b:75:7d:b4:4d:dd:37:a6:
80:95:41:0e:7e:51:fd:30:77:7a:d0:0d:42:3c:a5:
4c:41:02:4a:41:4b:d1:50:f6:2e:e6:60:cd:10:20:
4f:4b:ab:17:b0:94:30:b0:ee:07:26:3e:a0:d1:cd:
ab:89:f1:bb:6b:20:c8:58:38:bd:cd:ac:61:2a:41:
7c:3e:cb:25:22:93:36:17:19:4f:9e:05:60:cc:ce:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:87:5C:F8:53:0A:14:68:B3:67:C1:C7:0B:9E:76:5B:EE:E5:D8
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:dc:a4:22:fd:f3:25:a2:05:30:51:d7:ca:96:56:a8:8f:c5:
e4:4b:33:e7:18:23:7f:d3:b5:11:62:8d:98:f3:fc:cb:13:da:
de:b8:7a:80:8c:7d:93:ab:35:0f:ad:60:f5:b0:22:b0:36:17:
c1:ea:73:9c:a0:38:8f:4b:74:3a:00:8d:d2:76:c6:c6:2a:e4:
f1:5a:06:1d:5c:13:fa:86:ac:3a:13:39:64:d6:d0:40:d1:7f:
0d:a7:ff:cc:80:a6:eb:a0:55:e1:e8:06:10:ef:91:0e:64:a2:
e3:3c:5b:8a:83:84:80:b2:5a:6c:4d:31:4d:8a:e0:5f:81:16:
63:7f:a7:30:6b:b7:d9:db:34:43:56:46:f2:2e:af:fe:0a:50:
04:01:cb:a1:74:b6:74:6c:a1:9e:00:93:ab:9c:d1:0c:98:2b:
9c:01:1b:1e:cf:fb:13:02:e9:39:f7:5b:86:b2:47:11:21:2c:
3b:8e:d8:d8:98:57:fc:15:61:e4:60:2e:93:15:6d:38:23:fb:
18:88:19:1d:8d:a9:2d:c3:c4:f6:d1:51:c8:90:12:06:23:b6:
e7:fd:85:7f:68:d4:66:c8:4b:bc:97:e0:e6:ac:78:d3:d2:53:
f9:85:4e:0b:b3:73:af:68:fd:cb:f3:8e:c0:07:f7:69:89:09:
a0:64:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:25:34 2026 by rpki-client