Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: FViD3avCHQmeSqa1THRTzi+MvAL+QfsQObx/uQDv9pM=
Subject key identifier: F4:E2:FF:A2:54:4C:E6:85:F2:AD:82:C3:0A:41:B0:D7:55:81:41:3C
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 019FAC766E470D12BE417A0F012AB17AE726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 0162
Signing time: Wed 29 Jul 2026 06:01:10 +0000
Manifest this update: Wed 29 Jul 2026 06:01:10 +0000
Manifest next update: Thu 30 Jul 2026 06:01:10 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: N5A5bC84EeCOyaS1UNQ3+J1P0PlsTpgqAoXbXQ6J3IU=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:6e:47:0d:12:be:41:7a:0f:01:2a:b1:7a:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Jul 29 06:01:10 2026 GMT
Not After : Jul 30 06:01:10 2026 GMT
Subject: CN=f4e2ffa2544ce685f2ad82c30a41b0d75581413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:8b:e3:da:1f:4d:0d:84:9d:de:6a:6c:08:
93:e5:e7:22:f5:20:06:ba:32:96:b4:d6:b0:b7:f6:
32:a9:60:46:f9:70:20:29:bc:52:ff:55:f0:00:0c:
9f:05:ae:c2:1d:8a:bf:e3:e6:78:f0:ca:95:8c:76:
a7:bc:03:9b:f1:9e:3d:b5:d8:bb:23:f0:15:92:73:
94:bb:48:71:0e:b1:5f:88:cd:eb:f3:47:cd:8f:03:
f7:e4:f4:f7:68:69:8c:61:d1:35:ce:c1:05:c2:ed:
d7:e2:4c:68:7e:8f:cb:5b:ac:98:53:fc:70:65:03:
88:5f:91:7c:11:9c:c5:37:03:9a:38:bd:d6:23:39:
10:66:0f:12:86:ac:d9:fa:49:af:04:1d:50:43:59:
18:a3:c4:35:a9:31:42:97:e5:91:5d:64:e6:7f:92:
2a:bf:4d:53:70:00:52:3b:fa:f3:19:88:55:0c:72:
2c:9e:a2:4e:91:57:8d:e1:35:3a:ab:a9:b0:0f:ed:
8a:ac:c4:bc:61:30:aa:8a:55:bc:2c:20:20:a7:78:
fc:e5:c9:9a:fc:d8:3c:2f:fe:e1:36:01:a7:7f:9e:
fd:6e:c8:b1:d1:4c:b6:4f:44:17:44:e3:04:34:85:
47:20:9d:8a:55:71:d6:ae:ff:74:7d:60:0b:a5:80:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:FF:A2:54:4C:E6:85:F2:AD:82:C3:0A:41:B0:D7:55:81:41:3C
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:6c:68:14:90:6d:79:20:9d:76:c4:03:2b:a9:fe:a7:cb:
08:9f:03:97:51:35:9a:6d:80:76:ca:46:11:ee:0f:86:5e:0c:
70:4c:4c:c5:b1:40:9b:a5:4e:99:f1:f1:61:8e:88:62:8e:78:
2c:20:66:fe:54:96:97:94:c5:e8:63:a9:cb:77:cb:c3:0f:7c:
e5:34:ca:22:8d:53:9e:97:f2:a1:b8:ab:b6:0b:9b:af:ab:e5:
41:06:60:a6:52:84:17:eb:79:4f:b4:43:ab:66:4f:a1:62:a0:
2b:c7:7c:28:c3:09:3c:19:3d:52:ca:80:fa:33:a0:8e:5a:5a:
61:8e:13:98:10:cb:a6:2a:7e:cf:24:d8:05:30:a3:ee:e9:82:
4a:3f:1a:9b:3f:3d:65:02:5d:4b:08:38:64:0a:aa:ea:df:10:
91:c7:ca:7f:8c:d8:75:60:86:00:ac:6d:c4:c7:a4:95:eb:d3:
1a:f7:bf:11:a0:a1:c9:60:05:55:8f:46:f0:8e:24:11:27:5a:
88:f3:65:d0:25:a5:66:80:53:0a:53:d4:ed:99:0f:bd:54:96:
c2:02:dc:c6:6d:2f:0e:eb:ce:30:cc:c8:c0:1c:90:ac:f0:75:
d8:61:86:c4:99:52:05:6e:f4:21:41:b2:e2:a7:8f:63:8e:63:
b5:94:62:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:13 2026 by rpki-client