Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
File: AemEvojKuDCuuB0O2HaPQzE11Zo.mft (raw, json)
Hash identifier: jiew/KTzIwjGC/G4v0yFj6n7DP2JLeMypXNzqpbQOfg=
Subject key identifier: 8D:9D:18:A6:E1:F7:EB:04:6E:E1:07:D5:CA:95:02:6D:BD:79:53:BF
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 019F85D63BFF6191D0D3F10F168AB82ADD11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:37 +0000
Manifest this update: Tue 21 Jul 2026 18:00:37 +0000
Manifest next update: Wed 22 Jul 2026 18:00:37 +0000
Files and hashes: 1: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (hash: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=)
2: AemEvojKuDCuuB0O2HaPQzE11Zo.crl (hash: ReVRnBekXJf0eoW2WYvRj4IuTk7nofaXwMkDfYdjl4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:3b:ff:61:91:d0:d3:f1:0f:16:8a:b8:2a:dd:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Jul 21 18:00:37 2026 GMT
Not After : Jul 22 18:00:37 2026 GMT
Subject: CN=8d9d18a6e1f7eb046ee107d5ca95026dbd7953bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:9d:33:59:a4:20:59:ca:13:c4:09:a2:d9:
80:ee:c8:30:d5:6f:61:ae:9d:7c:de:48:60:64:b2:
44:e7:99:66:7d:e0:db:e2:e1:ca:79:0e:67:34:6f:
97:31:b3:fa:e7:c1:f6:39:7d:3b:e1:8f:26:1d:e0:
c3:cb:3f:2c:1a:1d:7b:9a:05:fc:22:e2:77:d5:a7:
3b:f7:b5:29:f4:0a:d9:7b:04:38:e5:b2:04:85:e7:
44:9a:f4:9c:37:d0:c5:69:74:68:74:fd:4d:26:8a:
09:d0:c1:08:b0:c9:39:c9:15:0e:35:28:59:c1:3e:
e2:37:da:c3:ee:25:e9:2e:56:6e:bc:9a:d9:f6:c9:
0d:ae:c5:d0:9f:40:ac:d7:5b:19:0a:c7:f9:3f:d1:
89:53:b6:76:e2:84:97:31:bb:c6:91:ce:6f:eb:08:
86:e8:ba:6b:5f:f0:3c:b5:6b:6f:b5:5a:36:0d:13:
9c:7f:99:70:50:ba:f8:15:eb:ec:e0:9f:4b:1f:10:
0c:eb:03:74:4e:22:5a:ee:61:19:d0:55:4c:cd:53:
50:91:fa:25:ed:96:cd:06:39:81:4c:0a:33:8d:90:
1e:ad:4f:71:ca:04:29:1f:a7:e0:ca:c0:e2:7f:24:
59:33:d5:7f:e0:51:dd:15:81:fc:65:4d:3d:2f:f0:
a5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9D:18:A6:E1:F7:EB:04:6E:E1:07:D5:CA:95:02:6D:BD:79:53:BF
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e1:4e:39:4a:e9:1d:06:a5:b9:23:75:11:cc:b0:42:b6:3b:
5b:70:36:b8:aa:37:78:0d:73:1d:ab:ed:e5:9a:d1:88:b6:9b:
2c:94:44:be:e2:b2:35:d2:83:8d:31:74:90:be:d6:c4:c2:7c:
44:e4:a4:d4:83:f3:b3:53:4f:88:8c:36:21:99:e0:96:b8:95:
26:48:f3:d9:b6:c8:a2:a3:9b:5a:27:a9:27:53:20:14:ad:54:
f6:23:76:89:54:03:e3:5e:fb:8c:b2:53:25:09:c2:3f:73:12:
5b:23:d7:25:dc:40:1c:83:47:23:cb:c0:27:cb:a2:6c:77:bf:
c2:6d:44:da:d8:71:b1:70:29:37:e2:98:46:8b:01:ab:27:66:
eb:06:32:6e:5a:18:cc:31:2a:1b:2d:6a:19:d4:e2:d0:56:ec:
67:57:5f:93:0c:2e:3a:73:10:dd:f4:11:f5:e2:71:88:3f:4f:
46:09:80:7b:de:d4:f0:0b:67:16:50:0c:ad:40:27:6e:7c:69:
6e:f3:ca:cc:17:e9:75:ef:39:ba:43:cb:11:5a:98:60:b9:1a:
5f:17:e4:91:bf:fd:50:07:c1:35:1f:0f:d7:f2:d3:97:32:bf:
5f:63:b3:aa:54:39:a1:67:74:33:8a:72:d6:33:3b:5d:64:2f:
87:5c:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:38:06 2026 by rpki-client