Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: ffF9xBUY024QIUEsEQvW/+lc4RICUpUQaxJwsRCBUUM=
Subject key identifier: DA:70:78:6C:C3:65:78:CB:CE:5B:54:DE:21:26:37:19:AB:F6:8B:E3
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 019FA9750953F4A0F6CF105DCA337BFF74F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 19F0
Signing time: Tue 28 Jul 2026 16:00:47 +0000
Manifest this update: Tue 28 Jul 2026 16:00:47 +0000
Manifest next update: Wed 29 Jul 2026 16:00:47 +0000
Files and hashes: 1: 8TXv8e4Zt8_eQ6NWirkqe9E0W_4.asa (hash: 4wwxHNIkgVcJLmHw8uy0TiaVWMubR0OMs0Q3hfAmuIk=)
2: Bq58wAV24LxCZfTqHikKpc1Pf90.roa (hash: Z38fRBPUaqDEJWZAtaIhWDjBuRq5J5FcYiFjJcjIdC4=)
3: g2mfEORB4KTxQPtrqS9KmJwGt60.roa (hash: ckCX/PTaFOHfPb57/FfMCnl07XdvXwOjflYamRZ+ttU=)
4: im5Fb-9w5mmPjp20JVfM6UTi9ZI.roa (hash: Lno5hcnACQyBSV8jBaTu79StES2mMHGRUyHa5ifNUXg=)
5: kEa8o2UnqelmH_ygtilQKIay4-U.roa (hash: wdOm+SKzMVc+6qYyPwtZWi4vySs728OYrMlkH8naows=)
6: o2zKTEKdkma_CEqLLr3-nWa-bTg.roa (hash: K00xY1oGfH9hHVRaGcI7b3OeCoea9X65r82JQ/DAkQ4=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: XSorf64CgIe9yZ5fo2cUBwPojIlUHnSYoBc1rcNxwwQ=)
8: wDyGi9jWmZMB8lYHVhIMXvPFj4Q.asa (hash: x1KdrUN6ejhw/k+dP4uf7xrYb09HG6a00Ztpj8NCQt8=)
9: yl_8RQWT42NWgczzOlDn0gK7u0w.roa (hash: AZgf7E7lVvGrL5j+ea4NwUOdqabLA6/5isp7lMtBrHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:09:53:f4:a0:f6:cf:10:5d:ca:33:7b:ff:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jul 28 16:00:47 2026 GMT
Not After : Jul 29 16:00:47 2026 GMT
Subject: CN=da70786cc36578cbce5b54de21263719abf68be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:06:bc:5e:3f:23:8d:92:1a:c5:9a:1b:d6:
46:64:e3:66:0b:b3:ec:27:8e:5b:02:24:92:30:df:
f0:37:28:7b:ae:d0:fe:a1:f4:b7:4b:c3:ef:0d:2e:
98:03:7a:a2:27:3e:2f:a7:d9:a2:2d:ab:ef:47:cc:
d3:44:a7:b8:6c:01:dd:89:31:71:8b:98:ec:d8:f5:
ca:b1:aa:be:58:7d:f1:1a:c1:da:df:da:ed:fb:74:
3b:94:22:cb:17:f0:70:b4:2c:10:1d:8c:de:35:78:
cb:c4:8a:ac:16:7c:f5:c8:71:2d:7d:94:48:90:46:
cb:51:46:65:d3:74:0f:bd:8c:3e:5b:4c:73:8e:d3:
fb:ed:43:f5:0c:b2:35:ac:b3:f5:dd:d3:b4:d6:5c:
78:ad:50:8c:df:69:46:a1:60:1b:a2:81:67:36:18:
e2:92:c6:b7:e5:73:f0:91:d4:59:3f:bd:af:6f:a3:
56:51:16:fd:3a:63:6b:91:8a:0c:7a:f0:d0:0f:a5:
28:34:99:42:cb:99:b4:a6:a7:64:1d:23:41:c4:d4:
27:04:33:8d:ba:2a:b9:24:8e:eb:16:98:a8:51:61:
11:44:45:0a:c3:5d:47:6a:ee:35:57:69:58:99:57:
d5:57:28:1d:be:8a:8a:ad:20:27:f5:50:42:1b:3d:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:78:6C:C3:65:78:CB:CE:5B:54:DE:21:26:37:19:AB:F6:8B:E3
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:aa:8d:85:fc:f4:72:c0:23:57:f9:8e:aa:6d:6b:72:1c:25:
d0:d2:3e:b8:fe:8b:e4:2e:4b:a8:72:54:d9:42:90:55:69:4d:
c2:a2:db:08:d2:d2:a3:7c:b3:14:6f:23:c7:5b:bd:57:fe:29:
c7:72:e6:0a:7b:85:be:13:5a:f7:a6:53:7b:a9:01:e7:71:f1:
14:15:ef:48:92:d2:fb:8c:34:a2:b0:9e:2a:3c:b2:9c:22:5f:
d2:d7:97:cd:6e:30:e5:31:5f:ab:f2:18:de:ad:6b:b6:89:bc:
74:d0:96:ed:17:93:c0:84:fa:67:81:74:2b:f2:76:4c:54:7e:
6f:d7:e1:89:e9:6f:1d:d1:b7:c1:08:c8:d0:5f:1a:00:b0:cd:
c2:95:4a:97:4c:6c:9a:7b:1e:9f:ac:41:a3:31:57:3e:29:6d:
46:03:04:b3:e1:ff:ed:cc:e2:a5:6b:66:e6:36:22:c1:cf:a2:
fe:7d:b2:c6:5d:ad:d1:b5:4d:bf:ce:61:ea:02:c3:db:5c:06:
9c:a2:76:dc:39:7a:69:3d:ee:5e:ab:6f:db:46:68:10:0e:d5:
1f:3c:e2:06:c1:9f:ca:0b:2f:14:d5:a9:4f:21:e9:89:83:1c:
46:9a:04:66:6a:20:03:ba:d0:31:5f:e2:50:3f:2d:7a:1c:73:
99:58:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:20 2026 by rpki-client