Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File: sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier: rpjrzi4fMIY3up9ntw7qO/wbZO0bIzS3xGDjMbNHhxw=
Subject key identifier: 09:46:3A:0D:07:6E:EC:12:0E:C8:72:4D:5D:4C:FA:45:DE:DD:6C:14
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer: /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial: 019FACACB3B41A3FADBE02130C79412DB069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 07:00:26 +0000
Manifest this update: Wed 29 Jul 2026 07:00:26 +0000
Manifest next update: Thu 30 Jul 2026 07:00:26 +0000
Files and hashes: 1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: C5GX8BnXR8iDSAkhvv76OyF3C3RfnzFlGVP8MRlBw/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:b3:b4:1a:3f:ad:be:02:13:0c:79:41:2d:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Validity
Not Before: Jul 29 07:00:26 2026 GMT
Not After : Jul 30 07:00:26 2026 GMT
Subject: CN=09463a0d076eec120ec8724d5d4cfa45dedd6c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:6d:8b:c5:79:5f:ff:08:b1:73:fe:13:77:
76:ae:54:ed:7b:76:98:51:12:1b:3a:e2:c8:36:47:
5b:4f:92:6c:8a:3c:71:c6:ad:64:79:33:a8:71:91:
71:94:51:48:61:de:5a:da:07:15:1a:46:02:82:8d:
82:44:53:0d:7d:8b:92:db:29:1d:86:22:27:a9:21:
57:dd:a5:7f:6e:7a:1a:c7:ad:ab:1e:9e:24:86:f1:
da:6c:0d:56:f7:0f:1c:be:4b:5a:5a:89:e1:f9:f5:
16:5f:6b:8c:e6:58:09:18:9b:c3:4b:ad:82:e5:6f:
c0:be:0f:a5:e9:2f:fc:71:89:10:d2:03:88:af:d0:
16:22:b8:56:c1:7c:a9:47:d0:7e:e6:c2:76:74:49:
fc:0e:2e:f1:16:56:36:b9:2a:54:f1:c5:c0:66:9c:
ed:4a:54:7e:57:7b:86:25:5a:b6:fd:3f:80:95:8a:
e7:4c:d0:5e:3c:d3:6e:36:42:5e:e0:47:0f:60:f4:
ff:41:97:0b:03:9b:0a:0d:3c:ca:e8:f4:f7:7a:d4:
36:a1:dc:19:84:d9:a2:10:14:39:8a:84:08:53:fb:
5b:18:21:6a:87:61:bb:c1:96:18:4e:64:22:ca:e4:
ff:8f:16:e3:cb:e9:18:0e:08:e0:a6:36:62:e6:89:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:46:3A:0D:07:6E:EC:12:0E:C8:72:4D:5D:4C:FA:45:DE:DD:6C:14
X509v3 Authority Key Identifier:
keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c8:fc:ec:26:cb:12:92:20:8d:54:e6:36:84:47:98:2c:38:
f9:7e:a3:be:99:ea:f7:d4:36:f4:f0:bf:78:56:ba:71:19:5b:
33:5e:eb:00:b5:37:54:73:92:19:3f:66:2c:e5:b1:49:64:a4:
2e:82:6a:2a:a4:0b:38:0e:63:d8:be:52:b7:e8:e8:75:96:da:
5a:e3:c5:87:29:73:b9:04:8b:8a:b1:5a:ef:c6:85:bd:8c:2b:
b9:0f:91:6c:f7:e7:bb:7b:bd:21:5f:86:ee:b2:1b:cc:ae:03:
33:2f:f7:91:8e:2f:8f:51:ca:5e:bf:e0:51:13:c6:46:33:9f:
cb:82:f2:a6:05:88:09:34:5e:3f:c9:b5:11:93:d6:e4:a9:e8:
83:10:b6:c5:76:8a:4b:cd:67:85:e6:ca:f2:e5:c5:bb:bc:f1:
63:7a:43:f1:c9:21:b2:26:0b:63:d6:1e:4d:9c:a6:c4:f5:4f:
fc:14:0c:1b:9f:b0:1d:c2:73:0b:d2:46:c9:2f:1e:5f:4e:25:
ac:48:ee:5a:68:73:e8:96:74:a6:af:0e:3e:b1:43:a0:e4:52:
a4:a0:38:62:9d:65:57:6d:c2:3e:cb:48:02:67:21:e5:72:40:
a4:6e:d7:27:b0:c3:4d:b3:dc:5e:aa:ac:23:7a:e1:8d:12:5b:
12:05:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:35:03 2026 by rpki-client