Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: mT9kjfNfWDNltubLb8pZyt0U3Rh4cNAd3f/+pFTlYs4=
Subject key identifier: 3B:29:2B:1B:FE:A0:25:43:D9:01:7B:E9:44:55:B7:D9:05:D4:8C:01
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 01A0D315B35697C4425F249E275E5A57C392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 11:03:29 +0000
Manifest this update: Thu 24 Sep 2026 11:03:29 +0000
Manifest next update: Fri 25 Sep 2026 11:03:29 +0000
Files and hashes: 1: 0tjlFCD9R3QvhuaUb8R98x3yaAA.roa (hash: QW/Cv+tz1AwpdParcrVZ17Ri4asuS8geM/KpLVI71iU=)
2: RYe-A-tcBgsvnTviE-ENg27AeMY.roa (hash: BIG9Ev2/ZDOm8EsC2U3aW/Qd5R8vFaAuiSgknEWjyDA=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: vkk0oSPdYFfdfO5+FsUUKB2haW8u6/G2Rpbat+GmIr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:b3:56:97:c4:42:5f:24:9e:27:5e:5a:57:c3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Sep 24 11:03:29 2026 GMT
Not After : Sep 25 11:03:29 2026 GMT
Subject: CN=3b292b1bfea02543d9017be94455b7d905d48c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:ea:7d:35:6d:42:6e:fb:a6:fb:db:0c:3d:
75:68:3d:8c:29:9e:8c:f8:3c:85:71:21:a4:58:d5:
84:f8:e4:dd:af:20:03:86:09:15:e2:e8:a5:ba:6a:
42:af:c8:20:18:fa:6a:33:30:9a:77:ee:e4:2b:36:
bd:11:2e:4a:08:c9:f7:45:e8:b2:cd:90:32:16:d7:
c2:46:7c:0c:a2:c8:23:1d:92:0d:32:5a:8e:6c:0d:
00:a6:b6:4a:85:c5:c0:c3:0a:88:2d:ae:0b:7f:e8:
10:52:15:4e:84:3e:b3:44:d0:c6:16:ee:ba:ff:2c:
cf:2b:96:0d:1f:07:40:db:3c:4a:8d:4c:84:3c:d6:
2c:f4:b4:77:c7:63:67:33:a2:9b:bb:ab:16:c2:b2:
cc:ff:b2:d0:55:f8:f3:0b:7b:36:e6:83:f7:a9:17:
90:f7:18:ba:e6:6a:fb:37:29:dc:6b:9e:3e:c2:58:
67:e9:f9:d3:ed:b8:37:86:26:25:f6:dd:4b:fc:e2:
80:aa:d3:67:97:2a:8d:b9:95:d7:04:d2:c5:5d:ab:
0b:65:17:8a:c5:6b:03:73:ff:04:74:aa:cc:5a:4d:
20:56:7b:29:23:8d:b7:ef:27:c2:2c:d9:74:8a:88:
7b:52:4c:dc:d8:03:dc:51:9f:e1:60:99:5a:db:50:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:2B:1B:FE:A0:25:43:D9:01:7B:E9:44:55:B7:D9:05:D4:8C:01
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:12:e9:62:17:7e:c9:11:8b:ac:e0:8a:b2:7b:0d:d8:47:b9:
7f:83:4e:f0:33:a3:41:34:7f:13:79:89:80:cd:18:04:90:97:
52:7c:e3:8c:87:07:32:35:8f:97:ca:b6:8c:22:5a:cb:43:27:
a3:04:94:aa:ce:ee:34:a9:65:77:b7:5b:e0:ac:ad:35:cc:d6:
5c:70:a1:28:31:04:6b:04:92:87:1d:8e:bc:db:71:38:80:91:
f2:ac:65:f1:1c:85:a3:16:d6:f4:37:1b:b2:c1:79:3c:0c:0a:
01:a7:24:ea:c3:ff:cb:a6:2c:93:4c:81:d4:ce:e1:32:05:b8:
66:bd:d8:d5:77:fc:90:70:50:76:c4:4e:47:22:a5:eb:2c:95:
16:cf:11:58:d9:f3:fc:17:d8:ab:57:16:2f:0b:86:f8:ac:bd:
1a:2f:84:ad:4d:27:81:13:58:b3:46:9e:31:46:99:b5:59:e9:
34:a4:5e:a3:58:7d:16:cd:6c:97:ac:71:3e:7b:86:6d:34:85:
5d:26:3b:b3:de:8e:68:19:c3:fd:18:cb:02:93:6f:4d:8c:02:
50:58:77:e8:88:b2:d7:84:45:ac:95:12:50:dd:05:f3:1a:30:
a4:14:95:c7:b8:a4:a8:96:44:48:6b:6e:e2:b9:6c:e4:9e:7d:
7f:44:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:04 2026 by rpki-client