Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
File: aYnSq4tNJSLKb6fEFEFigQLp4wA.mft (raw, json)
Hash identifier: su5s2ywd0AyRXzBALzRll8IQHAJ6tLM5G4dj3lDRoMs=
Subject key identifier: 47:0D:D9:86:2F:31:30:39:11:07:71:17:B9:9C:CC:0E:11:44:B1:B8
Authority key identifier: 69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
Certificate issuer: /CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Certificate serial: 019FAC7629C7C20CD3A7C123EB3387BBCFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:52 +0000
Manifest this update: Wed 29 Jul 2026 06:00:52 +0000
Manifest next update: Thu 30 Jul 2026 06:00:52 +0000
Files and hashes: 1: 49pi52pOyp_C4o4f22tUfRHrnbA.roa (hash: 2rlC05X5kAD0AZs+XN50Ny1OraFocKa1Q7W9eIat73A=)
2: aYnSq4tNJSLKb6fEFEFigQLp4wA.crl (hash: sv0wX5yiM6ret6/JQCsUci3ax1cfSLVA/qGn1eZPi7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:29:c7:c2:0c:d3:a7:c1:23:eb:33:87:bb:cf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6989d2ab8b4d2522ca6fa7c41441628102e9e300
Validity
Not Before: Jul 29 06:00:52 2026 GMT
Not After : Jul 30 06:00:52 2026 GMT
Subject: CN=470dd9862f31303911077117b99ccc0e1144b1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f2:61:98:30:65:63:d4:99:2f:8b:af:b1:5c:
98:70:85:74:7f:50:40:f4:a7:32:df:a1:15:01:63:
f4:fd:cd:c2:2c:01:87:14:fa:ae:c1:23:cb:5f:67:
d9:49:60:e4:5a:b0:33:15:1f:ad:2f:5b:6d:09:1d:
a0:4c:55:87:a3:e7:3f:44:32:ec:11:17:fa:1e:d9:
39:25:65:e8:22:13:1d:5e:35:6f:f7:e7:49:47:c4:
ea:6d:9b:be:22:84:87:4a:bf:4c:25:90:66:6d:e6:
5a:bc:2b:60:c8:3e:97:40:6f:35:90:e6:c9:ae:e7:
c1:8e:e2:4b:0c:b3:c9:bd:34:70:21:df:ed:1c:57:
16:1f:57:64:72:54:cd:b4:ee:f8:93:83:6f:1c:36:
1a:7e:17:73:a1:37:86:d6:24:ed:43:a6:04:c6:15:
fb:67:7a:08:e8:16:ea:31:33:e2:bd:1d:81:46:4a:
17:22:93:79:58:08:d1:a1:c3:97:e1:d3:af:57:33:
80:d6:bb:b4:8e:8f:ce:e3:aa:ec:78:e2:ca:cc:0a:
e4:25:06:3c:9b:ec:6c:4a:9b:a6:22:d1:38:2e:04:
a9:7b:4f:2d:f5:99:45:a7:29:67:52:c6:47:13:ee:
9e:83:a0:5d:58:ca:a7:1a:25:85:19:42:5d:7b:c8:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0D:D9:86:2F:31:30:39:11:07:71:17:B9:9C:CC:0E:11:44:B1:B8
X509v3 Authority Key Identifier:
keyid:69:89:D2:AB:8B:4D:25:22:CA:6F:A7:C4:14:41:62:81:02:E9:E3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYnSq4tNJSLKb6fEFEFigQLp4wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9a7d3e-2e7e-4135-94ca-8c4adea3efac/1/aYnSq4tNJSLKb6fEFEFigQLp4wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:32:b1:44:50:a7:15:89:64:32:1c:b0:ef:2e:55:c4:7c:e8:
77:4f:2b:56:19:16:c6:bf:e3:fb:a4:1e:68:83:27:40:7e:b4:
ba:01:3e:f3:ae:f3:31:17:51:5c:76:53:64:e8:e0:07:c4:dc:
bb:95:53:64:c6:59:02:6f:90:31:81:33:3d:b9:11:0c:35:64:
78:b2:9d:6f:ff:9c:e1:4c:0d:6e:e1:12:50:f6:d9:45:92:90:
41:49:90:75:89:3b:90:9f:4d:3d:e3:25:45:a0:2f:5d:71:f0:
87:4b:c9:f0:c7:41:8f:9a:bd:9b:00:a0:f5:2d:78:af:7c:fd:
61:8d:d4:b4:72:a7:3a:47:57:3e:5a:05:62:38:52:63:b8:a6:
a2:4a:08:10:e5:4b:1b:76:c2:aa:16:40:52:24:8e:7d:6d:76:
38:30:50:3b:91:9f:04:95:58:e8:49:0e:3e:94:e2:1e:14:80:
32:0d:72:5e:c0:35:56:27:1c:bc:00:e4:93:13:b0:c8:0a:62:
fd:03:89:55:27:33:77:f8:a0:e8:d1:12:62:9d:78:a8:63:74:
05:e1:a4:cc:5a:5f:fe:d7:e9:04:3b:a9:cd:07:73:9a:27:62:
8a:d3:ea:f6:58:42:2a:9b:b2:02:bc:09:28:07:0c:e8:d1:d3:
52:2b:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:55 2026 by rpki-client