Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
File: ca0Clb70axWYk68wgc7WgZG3bJI.mft (raw, json)
Hash identifier: 1j+HqX/brH9OCPF8DzQFHisIY9lhIGqrE3UsZwyHVhc=
Subject key identifier: A2:AC:71:19:ED:48:CB:31:6A:C7:61:AE:17:FB:C9:8A:F0:49:02:41
Authority key identifier: 71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
Certificate issuer: /CN=71ad0295bef46b159893af3081ced68191b76c92
Certificate serial: 019FAC76D9327C17012B2ADB870A2D46794E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:37 +0000
Manifest this update: Wed 29 Jul 2026 06:01:37 +0000
Manifest next update: Thu 30 Jul 2026 06:01:37 +0000
Files and hashes: 1: 9vxud7StOxsVGpJ4u8HWgLt1evM.roa (hash: geRuwSQcxs/ntg9jtSwo/JgbYczfuqf3BwONRGwXIlo=)
2: ca0Clb70axWYk68wgc7WgZG3bJI.crl (hash: BeR1d7nnheXXEhmso8hJTLlxdekVO58Yc1XilrOx6Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:d9:32:7c:17:01:2b:2a:db:87:0a:2d:46:79:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ad0295bef46b159893af3081ced68191b76c92
Validity
Not Before: Jul 29 06:01:37 2026 GMT
Not After : Jul 30 06:01:37 2026 GMT
Subject: CN=a2ac7119ed48cb316ac761ae17fbc98af0490241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:42:18:98:11:1a:c0:b3:ae:e0:ab:c4:d8:b8:
e7:5e:7b:de:1f:76:61:22:48:6b:10:21:ca:d8:75:
71:4a:c6:3f:9f:a5:d6:00:06:a2:e7:58:b4:db:52:
03:d6:70:c7:22:45:06:e5:e2:31:c0:63:54:3f:b2:
da:20:01:48:45:5c:c7:1b:db:42:8c:5a:c8:ed:39:
2e:a7:7e:69:9b:01:2e:c3:9f:5a:b0:0d:bd:83:ea:
5a:7a:63:40:53:ee:00:9f:a0:df:4a:a5:99:90:64:
d2:f0:ad:63:99:16:ce:15:bd:43:19:f6:35:7c:61:
63:db:34:7a:3b:a8:b5:2f:d2:87:3a:25:6b:ec:4d:
62:29:2b:b4:28:86:b9:ae:4f:60:03:ef:48:2f:25:
a5:dd:fe:43:f3:34:9f:19:82:08:7c:26:f6:47:17:
60:d2:6f:c9:59:bc:49:ff:73:d3:c2:16:56:93:ca:
0b:6c:e2:c3:91:68:59:f8:04:52:54:7d:7d:59:51:
04:f9:75:b3:00:87:d7:6e:3f:45:b4:d0:09:e5:b0:
8f:9c:1d:15:47:10:02:45:56:6e:41:9c:ad:51:64:
e0:b0:f7:2b:b5:90:4b:eb:13:f9:dc:11:c6:54:76:
b4:a3:85:5f:ac:46:aa:0b:5d:df:a1:17:c1:55:c9:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:71:19:ED:48:CB:31:6A:C7:61:AE:17:FB:C9:8A:F0:49:02:41
X509v3 Authority Key Identifier:
keyid:71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:91:1a:e2:e6:3b:b5:0e:f7:78:c2:c5:fc:fb:61:2a:2f:
bd:e8:b6:fa:64:8e:9c:74:14:ec:d6:a5:f7:d3:0e:65:60:47:
ea:d5:e4:06:72:e6:30:43:60:d3:d4:29:61:a1:8a:f3:a9:ad:
5e:2b:3c:74:46:02:c3:13:8e:42:2b:21:c9:12:16:9a:11:bc:
b1:ae:3b:12:39:be:b8:44:1c:fd:77:a6:a0:da:5d:43:71:6f:
80:d6:13:96:cd:6f:69:a2:c5:68:8a:f9:18:3b:5f:09:e3:d6:
31:cd:47:08:45:db:ad:6d:8b:8d:fd:64:e7:35:43:13:fe:ea:
64:4d:1d:49:74:67:1d:04:e8:85:1d:47:26:77:46:38:39:a9:
fd:24:b4:b1:65:e2:a9:be:85:3f:6f:66:3a:bf:d5:99:29:65:
d9:7c:14:cd:4c:13:b1:a5:99:26:2f:9b:3c:68:ec:6e:c2:8d:
42:59:68:11:0a:ae:02:53:8b:91:41:c6:44:2c:e5:d7:b7:42:
ea:86:86:09:d3:7f:f9:b6:0b:76:c2:e4:10:1f:1d:51:89:82:
79:46:27:27:03:8b:4a:bb:31:ac:80:1a:cd:66:ed:41:74:47:
59:fa:37:78:82:9a:8f:82:0b:dc:5d:84:d1:5d:31:ce:31:01:
68:2c:91:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:29 2026 by rpki-client