Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: tJj4HStkPgDCLj8KOQRoGv8HFWLY+4JmPx2YTpIrnM8=
Subject key identifier: 9D:6E:7D:E1:0C:A4:73:C3:54:4A:3F:41:1D:62:E9:BF:C2:10:E9:2B
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 019FAD88E250A2C94CEB0B10E9EC0E18EAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 19E5
Signing time: Wed 29 Jul 2026 11:00:56 +0000
Manifest this update: Wed 29 Jul 2026 11:00:56 +0000
Manifest next update: Thu 30 Jul 2026 11:00:56 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: 7BcHcmAgHDNyCFUzpofgPUdtQ7APN3KmZLXyS3k86+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:e2:50:a2:c9:4c:eb:0b:10:e9:ec:0e:18:ea:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jul 29 11:00:56 2026 GMT
Not After : Jul 30 11:00:56 2026 GMT
Subject: CN=9d6e7de10ca473c3544a3f411d62e9bfc210e92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:b0:6f:82:a9:9d:79:54:80:3c:47:90:a2:
24:f8:26:c3:0a:32:a0:52:d2:f2:20:32:39:62:19:
a3:93:71:8e:8b:5a:77:f8:9a:76:13:63:60:7b:6c:
87:6f:10:6e:04:c5:40:d4:87:dd:34:ae:4a:8a:01:
46:47:11:76:bf:08:dd:4a:55:9e:53:3e:17:67:ee:
c3:80:24:2c:d3:1b:7d:b9:56:32:1b:d5:ba:dd:83:
cf:78:89:58:a9:32:fe:30:00:48:d6:07:31:b0:8a:
de:ea:9d:03:77:66:2f:82:c4:15:a7:cb:e5:71:75:
b6:7a:bb:a9:aa:ae:92:c7:d1:60:e2:d4:e3:3c:c7:
25:8e:cf:f5:14:6a:37:5f:15:75:b2:31:76:fe:35:
be:63:e6:88:86:d9:60:99:0e:27:cb:bb:3c:67:42:
b2:70:e0:0b:9b:02:d4:f9:9d:cb:9d:97:d9:c1:63:
a3:7c:e7:07:45:26:cf:7e:20:3a:b4:e9:61:cf:c1:
4e:1c:4f:89:0a:14:bc:cf:6c:90:41:51:9f:10:2d:
ce:09:77:0a:a3:ef:13:79:78:f8:af:0b:6c:78:01:
34:3a:7f:de:33:38:82:a1:2d:99:5f:b5:78:e1:1e:
08:c2:6b:da:52:22:a2:23:02:84:0e:79:2b:34:14:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6E:7D:E1:0C:A4:73:C3:54:4A:3F:41:1D:62:E9:BF:C2:10:E9:2B
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:97:bf:18:49:8b:36:c3:3e:77:f8:76:2b:d8:b0:d9:40:6c:
fc:84:08:b6:bd:24:f8:eb:2c:02:8f:d3:5f:2b:1e:a4:1e:51:
61:8d:76:07:51:4d:1d:dd:78:98:25:73:10:57:91:24:ee:08:
30:c7:3f:44:07:64:54:fc:fc:d6:a7:fe:13:1e:c1:4e:6a:62:
4e:35:c7:1e:33:49:2d:c2:b2:ae:11:5b:ac:29:3d:aa:dc:10:
3a:89:cd:79:31:88:84:32:2d:77:78:18:a7:6f:5d:09:82:69:
74:41:bb:08:47:1c:c7:a9:0c:b6:e8:50:5e:67:31:5c:28:c5:
3f:ae:31:6e:29:5c:78:52:97:d4:5e:4c:f9:9b:32:f5:bf:b6:
e8:86:82:ab:41:be:e2:38:91:18:e3:4d:dd:8e:66:79:c4:f5:
07:cf:21:a2:97:89:49:91:61:5d:94:8f:1f:73:26:b1:e8:4e:
ec:fe:cc:61:98:84:a9:b6:24:ef:fb:f3:c5:17:74:f5:b0:30:
05:5c:02:90:a2:f8:85:3d:78:c2:49:71:6c:73:e6:79:fc:1e:
39:2a:40:f0:0c:e7:8b:82:dc:8a:b2:c2:a0:5f:80:71:c3:55:
1d:72:8e:4a:cd:d4:1b:c4:fb:43:4e:ee:91:98:18:41:b5:36:
9c:86:14:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:26:07 2026 by rpki-client