Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
File: AAeDpQgRvpLvroR8u1AXBoRHS8w.mft (raw, json)
Hash identifier: l8PTRFu1+4pqqEw80ztNVLQmEeFEPb33vgjABoqLX00=
Subject key identifier: 4D:F0:7C:F6:FA:F8:AD:44:35:E3:A0:F6:4F:CC:1E:56:A0:61:B4:00
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 019F83E865BA88E2F49905523CCB88BA9781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
Manifest number: 39
Signing time: Tue 21 Jul 2026 09:01:13 +0000
Manifest this update: Tue 21 Jul 2026 09:01:13 +0000
Manifest next update: Wed 22 Jul 2026 09:01:13 +0000
Files and hashes: 1: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (hash: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=)
2: AAeDpQgRvpLvroR8u1AXBoRHS8w.crl (hash: iRCTWkQxJNboQcqwTXIflGLiw1GEQDQz2UnpGYWDUCY=)
3: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (hash: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:65:ba:88:e2:f4:99:05:52:3c:cb:88:ba:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Jul 21 09:01:13 2026 GMT
Not After : Jul 22 09:01:13 2026 GMT
Subject: CN=4df07cf6faf8ad4435e3a0f64fcc1e56a061b400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:54:28:70:6f:03:29:85:a1:17:86:62:59:
3b:43:62:72:a1:1b:66:69:8b:c2:93:77:5f:f5:e6:
35:9d:6d:14:07:fb:43:2a:98:df:f5:97:9c:81:ad:
b0:15:4f:91:78:5d:71:9c:b0:11:1d:43:54:fb:78:
49:89:9a:e8:09:dc:c1:1f:d5:73:60:82:42:64:63:
46:4d:52:39:b6:93:87:ec:08:30:c7:37:77:ed:4e:
c6:79:5a:9f:89:13:6f:a1:6a:de:b2:e3:d5:36:98:
cb:28:0a:a7:cc:35:91:2d:b4:9b:b4:94:16:04:66:
ce:00:45:b5:5f:42:cc:6d:88:f2:7a:5f:25:b6:ce:
55:57:9d:f2:b1:94:9e:54:58:94:89:b1:ce:ca:19:
64:86:cd:f8:af:79:02:b8:b1:78:a4:c1:16:14:67:
45:54:cf:e9:db:b1:c9:90:e4:46:d6:71:0e:bd:6c:
0a:a7:cf:9f:94:17:4a:14:06:38:94:77:54:66:5b:
2f:9c:29:ae:37:2d:13:20:d2:e1:ec:ff:e8:f2:65:
df:bf:84:26:8b:29:2f:dc:73:60:56:1b:57:cf:e1:
cd:d4:cf:ea:06:a6:ec:05:35:97:ae:a8:ad:ff:f8:
03:85:aa:45:f4:bc:12:33:6d:9a:b4:de:ed:06:0d:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:7C:F6:FA:F8:AD:44:35:E3:A0:F6:4F:CC:1E:56:A0:61:B4:00
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8d:75:ff:40:02:ed:c0:46:bf:65:ed:ce:b8:8d:68:57:66:
c5:c5:3a:e0:a5:60:33:38:9c:30:1f:86:55:44:69:0b:fd:07:
49:b3:bc:80:fd:da:0d:41:03:69:c1:c2:a2:52:3e:76:ac:9b:
d2:52:20:6c:13:a2:06:e4:77:98:3b:ad:d7:24:68:e8:3c:3b:
c6:c0:0c:16:c4:79:2c:84:62:c2:18:8c:73:1c:e7:22:9d:13:
79:cd:d2:77:70:67:4f:f9:65:35:44:bb:2a:56:08:78:6e:4c:
b7:58:2e:bb:64:48:8a:ca:d0:e2:f6:16:c7:dc:18:16:c2:92:
ce:2c:7a:c1:65:b4:b6:5c:61:e8:5e:ee:06:8e:fc:6d:89:ef:
39:cb:d8:ed:d9:4d:d2:34:6b:c0:aa:aa:ea:70:1b:7c:96:13:
6f:90:ab:8d:dd:39:d6:b5:da:5e:52:f3:06:3e:57:5d:88:b0:
c0:3a:ae:e7:53:c5:72:82:34:a1:90:85:2f:eb:5f:dd:bf:fb:
17:08:b4:13:23:d9:09:49:f9:54:91:9a:18:25:25:88:84:2a:
a2:24:ff:de:70:c0:7f:82:94:7a:12:e4:9c:63:e1:77:5a:74:
cb:ac:4e:93:98:e1:97:1d:fc:17:e2:50:ee:b8:d0:0b:c7:6a:
c9:32:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:50:18 2026 by rpki-client