Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier: /oSIQscdRGmAqAN+UuP7n+7ciUDiC75WTi0uPjnD7FM=
Subject key identifier: E1:64:0D:6F:CE:64:26:A7:56:B2:86:F6:02:17:9F:89:D8:85:96:43
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 019E2B4BF7975AA5F5DC4DEF7E1BEA15F5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number: 0DBF
Signing time: Fri 15 May 2026 11:00:59 +0000
Manifest this update: Fri 15 May 2026 11:00:59 +0000
Manifest next update: Sat 16 May 2026 11:00:59 +0000
Files and hashes: 1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: LgUUs/g7yb91i6uHx0aqBEglpp28HY5ya5UAhXJuTOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4b:f7:97:5a:a5:f5:dc:4d:ef:7e:1b:ea:15:f5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: May 15 11:00:59 2026 GMT
Not After : May 16 11:00:59 2026 GMT
Subject: CN=e1640d6fce6426a756b286f602179f89d8859643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:35:aa:f7:fd:c0:db:37:d4:e5:09:73:5f:
9c:c6:67:ac:5a:13:11:e5:ac:d6:0b:e5:dc:12:98:
21:a2:8b:e2:b4:8c:35:43:72:d3:ba:43:dc:52:84:
8c:d4:a2:23:71:b7:00:4b:3d:80:2a:88:ef:fa:00:
db:3b:8d:e7:47:dd:a4:7f:d7:68:84:f5:58:bb:ac:
e6:c2:b2:3a:24:80:22:ab:c0:fa:68:76:1a:45:24:
34:fc:ea:fb:bc:c2:22:86:be:90:d7:30:67:e0:24:
2c:52:9b:80:5c:73:83:04:8c:1e:b0:cb:6d:95:a2:
b4:6b:7d:ad:65:86:4a:5f:7d:26:3d:29:7f:99:2d:
d3:7b:8f:21:6d:f1:18:eb:23:ee:7b:09:48:d3:da:
17:2c:62:36:7a:95:64:03:78:a4:08:82:aa:b3:8a:
d7:d7:c9:f9:58:43:2f:7f:6e:e5:5d:17:1c:6d:c2:
8d:88:16:5d:79:6f:78:d9:d4:a9:16:21:67:c0:83:
ac:f5:7e:9a:8c:36:f0:c6:ef:03:f4:c1:da:4a:95:
b1:da:e9:1c:62:2e:bc:f6:aa:ad:f7:72:20:8e:06:
39:53:c0:21:01:46:99:96:df:18:fb:68:51:10:2e:
ad:1b:56:49:25:69:9f:e5:76:fb:4f:a7:dd:1a:02:
ce:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:64:0D:6F:CE:64:26:A7:56:B2:86:F6:02:17:9F:89:D8:85:96:43
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a7:d4:99:c9:f9:9e:23:80:a5:38:8b:da:1b:50:b4:57:36:
7b:bd:ff:d7:c1:f7:c8:f8:c3:cc:cd:f6:89:89:20:c6:4e:78:
1a:91:db:bb:c2:d1:50:b1:6b:e1:5e:7d:c2:16:2d:c8:4a:d9:
0d:9a:78:89:93:8f:bd:80:46:d2:6e:06:e4:db:b0:57:05:63:
e9:70:05:a5:f7:51:2f:97:18:67:97:c6:f3:5a:3f:37:eb:3b:
78:3e:dd:98:12:26:25:dc:c1:2d:1d:49:bc:b3:d1:28:92:48:
5b:61:be:65:48:c2:a5:1a:c6:13:ee:49:9d:f8:cb:4d:22:59:
d6:92:9c:31:23:8f:3b:0b:bb:30:25:3c:88:3f:dc:71:c9:30:
b6:87:ae:af:b9:bc:12:08:c9:a0:b7:b8:1f:2e:51:e6:1b:0f:
05:88:30:f7:df:12:6e:ee:c2:fa:41:4c:22:00:12:e5:31:c2:
8e:71:63:e7:cf:d4:56:ef:32:84:b4:e3:ea:a3:f0:fc:09:e0:
f9:df:d1:bd:2a:2c:5e:37:43:03:69:4d:73:b6:be:1a:c9:a7:
4e:b9:c6:a9:fd:a7:d2:52:bd:0c:38:9e:ac:da:5c:d3:d5:cd:
a6:8a:ff:c7:7f:a3:91:f9:25:79:22:0c:7f:b9:64:ed:f1:ca:
12:20:c6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:04:46 2026 by rpki-client