Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
File: ac7WLmmPOc-za-DE0cmEBfZ641A.mft (raw, json)
Hash identifier: woC3+Q08SWgulGQuHA69iFC4yKmJitipLc29VUNxIC0=
Subject key identifier: AF:65:6A:AA:BF:3F:A9:30:40:B0:D7:25:16:34:11:A3:A5:B1:49:7B
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 019FAA88C6EDE533887ECA47F38C09CA4640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:58 +0000
Manifest this update: Tue 28 Jul 2026 21:01:58 +0000
Manifest next update: Wed 29 Jul 2026 21:01:58 +0000
Files and hashes: 1: 8ds30e27s4jEGttTs6YlBQM3z5s.roa (hash: fhyuHvz2U+aS6Bex74blw3zMPMfs8rwkJE+Axsibwvc=)
2: DABiD7uw5X1UDgK0KYm4pTweBTs.roa (hash: CdIof73ob606H6HEETNJAXQA/8lVWBNHp980E+YLvcU=)
3: XHiCg7-vOaMABA4CYBKSVf3rQRk.roa (hash: g1IQNPouH48EoFzQdEYNrlJEZkzgvbZrvrkCirhFzgo=)
4: ac7WLmmPOc-za-DE0cmEBfZ641A.crl (hash: nG7UYz9GZJij9UZRSK7il4MKYtEvkTAy4+tmA3f20yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:c6:ed:e5:33:88:7e:ca:47:f3:8c:09:ca:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Jul 28 21:01:58 2026 GMT
Not After : Jul 29 21:01:58 2026 GMT
Subject: CN=af656aaabf3fa93040b0d725163411a3a5b1497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:c8:a3:d2:81:f8:e6:a6:0d:43:a7:4d:99:
c8:35:72:b0:68:18:67:8b:39:60:6f:9c:7a:e0:cd:
55:8f:36:c3:fd:d2:9a:36:18:20:9a:73:6e:97:6a:
6f:4a:9b:84:a4:2a:37:79:3f:b9:ce:be:e8:9a:62:
7a:e5:38:42:8f:4c:30:21:d4:fe:d2:22:38:3d:ed:
4a:12:09:5a:d5:8a:e8:c4:31:0d:2c:76:4f:b8:ae:
a1:1a:60:6f:58:cf:19:92:8f:d3:78:91:ee:eb:c0:
85:ff:fa:fc:8c:cd:ec:bc:10:e1:ba:d1:20:ec:cb:
b2:6f:92:43:2f:bb:5e:2f:7c:10:22:14:26:c9:bd:
4f:5f:77:09:37:85:81:0a:c5:f8:bd:e8:2d:04:2f:
7d:de:21:5b:be:76:ac:20:d1:2b:ed:02:17:8c:63:
c6:d8:bd:fd:4f:65:bd:b9:25:08:08:a4:a5:2c:25:
c4:da:83:53:82:0c:bb:1d:f9:e7:de:f3:cb:ea:9b:
22:98:fc:3d:27:c8:87:ec:29:60:cc:c4:ad:c0:42:
27:8c:cd:ea:1c:d2:79:9e:82:0a:3c:71:d4:8f:bf:
c7:c7:c1:32:8b:1d:54:5c:ac:5d:32:7c:af:47:8b:
c4:54:d0:35:48:3a:9b:de:2f:99:dd:ae:48:25:9a:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:6A:AA:BF:3F:A9:30:40:B0:D7:25:16:34:11:A3:A5:B1:49:7B
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5f:d6:9d:4a:39:b4:f6:8e:97:ef:d9:c1:e1:79:bf:73:eb:
6d:5c:af:30:d2:e2:a9:d8:7e:fd:65:19:4d:26:f7:0f:29:2f:
2f:97:f9:ba:71:5e:88:7e:f1:dd:21:e1:80:e5:e4:d7:ee:00:
7b:64:2d:a7:1a:a5:43:e6:60:02:8b:8f:0c:df:71:9c:6e:d9:
b6:7a:3a:37:d7:ea:ea:26:2a:7d:c9:c7:42:0d:93:06:87:50:
09:90:f1:73:b0:dc:fe:e6:56:f3:1d:1f:3a:ff:6b:a3:4d:79:
bb:c9:16:af:aa:1d:fa:e8:5d:01:20:b4:aa:21:a7:28:25:7d:
3f:84:86:b4:3e:f6:ad:d7:80:50:4d:17:f4:c9:d1:3b:e1:46:
3c:e3:c6:a9:20:d5:2c:06:96:fc:d5:a2:3b:25:ec:24:6c:31:
ac:1e:f2:78:b0:8d:c2:c5:17:52:0e:4e:56:05:ea:0c:31:d6:
7a:f2:1e:88:37:56:3d:8f:18:ad:89:05:04:a4:2c:70:10:77:
5b:a1:d4:c8:12:1c:1e:cf:47:4d:bc:8e:45:a2:55:b7:6e:fe:
32:3d:f2:98:2d:a7:4a:9c:46:b9:68:12:83:f5:51:a6:8a:71:
09:78:fb:f9:04:3e:5e:03:f9:b8:13:c2:cc:47:e0:43:2e:dc:
8a:31:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:21 2026 by rpki-client