Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
File: rhVFyl4w95yXBeJw8eh_r6-5pjI.mft (raw, json)
Hash identifier: a97ysjCT3XuvO/9LlGiD7GONe1inX2AyBbJamqeeZsE=
Subject key identifier: A8:F7:08:6E:3C:1B:3A:90:CF:0E:65:25:B4:75:70:1D:73:E0:87:37
Authority key identifier: AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
Certificate issuer: /CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Certificate serial: 019FA8D0A9B9F5A18FEAF5BF2330E52F22D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
Manifest number: 01D1
Signing time: Tue 28 Jul 2026 13:01:14 +0000
Manifest this update: Tue 28 Jul 2026 13:01:14 +0000
Manifest next update: Wed 29 Jul 2026 13:01:14 +0000
Files and hashes: 1: Q-4xy1lFuJPS1HBEiepclcPTuBk.asa (hash: gVcBXJQ9XX31XjFRDkaY8dMZNMEC1KZe+1TPQeZlpsw=)
2: rhVFyl4w95yXBeJw8eh_r6-5pjI.crl (hash: cM4PBZF3UcVEf0y9hI9/kKicwVbTQsR02zZN5pnOXNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:a9:b9:f5:a1:8f:ea:f5:bf:23:30:e5:2f:22:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1545ca5e30f79c9705e270f1e87fafafb9a632
Validity
Not Before: Jul 28 13:01:14 2026 GMT
Not After : Jul 29 13:01:14 2026 GMT
Subject: CN=a8f7086e3c1b3a90cf0e6525b475701d73e08737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:8b:3a:24:a1:19:10:df:05:46:59:53:c6:
df:e1:0d:b5:82:11:4d:9a:f4:67:37:13:9a:39:ce:
c3:54:ac:78:7b:38:11:62:6c:94:f9:d7:0c:f1:27:
33:20:1c:1a:97:8f:dd:c9:e7:5e:d8:5e:d0:61:03:
55:d2:15:5a:24:eb:43:00:a9:48:c6:f5:85:3e:3f:
bb:d7:54:1a:2b:0c:e6:30:69:8d:0d:a9:f6:21:29:
df:ec:60:fd:89:e9:1d:5d:bd:ee:95:87:28:cc:bd:
98:8c:b7:48:27:89:11:6b:76:65:17:fd:7e:ae:05:
a1:b9:fa:02:fa:5b:0d:33:0d:3e:be:59:50:4b:56:
34:25:d5:9f:bb:77:3e:3c:30:ce:c3:00:bd:17:ee:
fd:8a:31:5e:e7:cf:87:eb:92:d2:52:26:2a:ea:5f:
b0:eb:a5:29:6b:81:e5:07:ce:33:45:aa:d3:3c:12:
dc:ea:7a:0b:10:ba:38:44:b0:10:6e:e0:c5:b4:ed:
80:aa:b5:47:42:a3:9b:16:f7:0b:1a:26:06:a1:c3:
9d:af:df:a2:15:a2:cd:1a:7d:ff:81:8c:56:a3:1c:
b4:5e:3a:65:f0:43:a7:03:ad:43:e4:1e:dd:b6:17:
1c:88:e4:6b:41:41:8e:ba:ff:34:93:90:ad:73:9e:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F7:08:6E:3C:1B:3A:90:CF:0E:65:25:B4:75:70:1D:73:E0:87:37
X509v3 Authority Key Identifier:
keyid:AE:15:45:CA:5E:30:F7:9C:97:05:E2:70:F1:E8:7F:AF:AF:B9:A6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rhVFyl4w95yXBeJw8eh_r6-5pjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33f12a-9fca-4828-b8f1-9c704f815aaa/1/rhVFyl4w95yXBeJw8eh_r6-5pjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b2:2a:fe:a8:41:2e:f4:4b:8c:3e:6f:5b:77:4c:1f:51:21:
d0:f7:64:f4:3a:f7:76:47:98:c6:3c:85:f8:61:25:9a:2f:f4:
f8:fc:b2:b0:c2:8f:de:1e:af:97:f6:e1:31:f6:a1:4c:11:5d:
1d:4d:f8:b3:aa:89:21:d2:ec:68:8d:0a:df:21:e9:40:cb:97:
ad:2e:c0:bd:e9:46:9a:ee:51:09:df:e2:e5:4c:55:92:c5:ec:
a1:89:e8:1e:b3:f0:f5:2f:df:79:97:63:0f:8b:20:b0:df:7d:
03:6b:d5:e2:03:b3:8a:ea:26:46:1a:6c:19:4c:5b:cc:a1:6b:
57:70:d9:70:40:96:1c:2e:d4:d4:02:23:00:6c:54:55:52:fe:
92:f4:41:33:d2:bd:fd:b2:2b:09:a2:0d:07:7a:9e:45:a9:04:
d3:91:ff:16:64:a7:15:1a:29:3d:7a:a7:2e:6f:88:a0:cb:11:
ba:df:9e:02:22:45:20:df:24:9a:aa:1f:9a:7c:3f:3e:b6:f2:
91:85:b8:8d:e8:29:73:1d:0f:f6:35:08:64:ff:a3:4c:05:84:
08:77:87:67:e4:86:21:6f:eb:d2:bb:07:94:2d:17:ac:db:cb:
98:e8:84:ed:b9:ed:5e:58:f0:d0:99:93:88:f9:95:0f:e2:66:
31:cc:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:56 2026 by rpki-client