Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
File: rlAYJxRKMYi-oczuWGVv1kKdj5U.mft (raw, json)
Hash identifier: 7+6olrCj94AEd/gEF/8sFwLTLPt0ugsgZf00ghKo6co=
Subject key identifier: C0:60:56:55:2F:98:44:35:AB:B8:AA:06:C0:19:CA:AB:F6:EC:C9:D3
Authority key identifier: AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
Certificate issuer: /CN=ae501827144a3188bea1ccee58656fd6429d8f95
Certificate serial: 019FAAF5E27738A98465FE6AA1DC7FE05DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
Manifest number: 19D9
Signing time: Tue 28 Jul 2026 23:01:08 +0000
Manifest this update: Tue 28 Jul 2026 23:01:08 +0000
Manifest next update: Wed 29 Jul 2026 23:01:08 +0000
Files and hashes: 1: dNleK7oqqS4JYOVbb6S3XLVUiBA.roa (hash: eOgBYtYMR3J+l0721Hpv5YsWUbXa/qSUakud5H58TI8=)
2: rlAYJxRKMYi-oczuWGVv1kKdj5U.crl (hash: tg5lFpGGochtWXm+bv/pk35LSABBE3KPa76zSo7KGHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e2:77:38:a9:84:65:fe:6a:a1:dc:7f:e0:5d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae501827144a3188bea1ccee58656fd6429d8f95
Validity
Not Before: Jul 28 23:01:08 2026 GMT
Not After : Jul 29 23:01:08 2026 GMT
Subject: CN=c06056552f984435abb8aa06c019caabf6ecc9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:a1:85:9e:ee:bb:2e:bf:da:1b:00:be:62:
0e:3f:9a:7e:10:34:9e:22:bd:18:6a:d5:7b:40:3e:
bd:00:ff:a5:2d:14:39:70:ee:3a:a4:f8:31:db:5c:
14:0a:c1:8c:92:47:b2:e3:fa:0d:82:75:ca:e1:2b:
de:d9:1f:a3:92:eb:76:b8:66:bf:38:33:33:bc:8f:
72:23:5f:7e:70:f4:ca:b6:fa:91:41:3a:44:9a:63:
ea:80:73:54:db:ba:39:86:5a:7d:c0:2c:c4:9d:b0:
d4:f6:c9:a9:99:82:48:36:39:64:c5:2e:7b:6d:61:
00:a6:40:e2:ac:1a:ed:8a:fc:52:ad:7f:b2:f4:09:
0c:e9:a9:0f:4b:0c:8e:d9:6d:8d:c4:a9:36:6e:13:
5d:0d:06:5f:f9:4b:b2:9d:10:a0:6c:ae:c4:42:10:
95:9f:71:03:5e:7e:4d:aa:4c:0d:3c:12:f2:60:6c:
53:03:ed:20:ff:41:9e:1d:6d:81:2d:f1:fc:ac:e5:
3a:44:15:9e:2a:ba:d0:0b:69:34:78:76:d6:c3:30:
3d:a1:2f:20:da:df:10:a5:7a:da:2a:23:41:71:16:
d6:2b:5d:39:58:b3:d1:40:e5:c6:82:60:cb:86:13:
59:b4:dd:c0:5f:7a:a3:20:93:08:2a:3a:5f:b9:1f:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:60:56:55:2F:98:44:35:AB:B8:AA:06:C0:19:CA:AB:F6:EC:C9:D3
X509v3 Authority Key Identifier:
keyid:AE:50:18:27:14:4A:31:88:BE:A1:CC:EE:58:65:6F:D6:42:9D:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlAYJxRKMYi-oczuWGVv1kKdj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f56af-ebfb-4c88-a082-0986d8b0c6d9/1/rlAYJxRKMYi-oczuWGVv1kKdj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a7:c3:0c:86:bd:39:12:bc:2f:4c:14:b2:f0:0a:da:38:f5:
c2:31:4b:3a:a2:a7:60:a5:84:39:81:24:83:f5:49:79:50:1c:
a9:66:0b:3f:ff:f8:0e:e7:41:85:b3:f5:ef:99:85:5a:6c:c0:
49:8e:39:e7:9d:10:47:4f:96:27:45:e9:e0:0b:66:f2:27:4d:
e4:e0:bc:ae:40:9d:36:08:cd:a3:a0:60:30:33:55:b2:a7:5f:
92:84:f7:0a:52:61:7e:36:98:27:6b:c6:87:66:6b:c2:b8:aa:
4d:e8:f4:12:74:93:49:3f:c5:82:20:67:b5:59:87:f3:e3:32:
07:8d:60:b1:78:db:2c:d9:8a:99:06:98:d9:fb:a8:fd:b9:9f:
bd:cb:64:6f:3e:14:94:d4:89:f6:8e:e2:6c:18:8d:53:d2:84:
dc:21:6b:eb:63:ad:6c:6a:65:e5:75:3b:20:32:f2:f5:61:19:
3b:20:80:86:5f:8a:1b:be:07:6e:66:b3:85:f8:0f:e6:75:6d:
10:a4:5f:b3:59:26:6d:b2:47:4f:50:f5:b4:9c:cd:8b:3b:14:
44:17:e5:38:42:fc:b1:75:74:b2:39:9b:54:45:28:94:df:13:
19:87:c7:24:3c:53:36:49:cd:83:aa:c5:67:a8:b7:22:02:bf:
ef:84:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:50 2026 by rpki-client