Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
File: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft (raw, json)
Hash identifier: CfaZH1s/uv5l9BbHovrdu2U2eOXf+H1oCH2R+DKICVA=
Subject key identifier: E7:6E:FA:DD:6A:60:63:3B:DA:57:7F:B3:5E:6E:33:83:FE:DD:5D:93
Authority key identifier: 69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
Certificate issuer: /CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Certificate serial: 019EFC4B0E39AA699A1A40113FDF82C28040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
Manifest number: E9
Signing time: Thu 25 Jun 2026 01:00:37 +0000
Manifest this update: Thu 25 Jun 2026 01:00:37 +0000
Manifest next update: Fri 26 Jun 2026 01:00:37 +0000
Files and hashes: 1: J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa (hash: Y9Sl5qo068W4cXHevYj8cD+ueqCNlhqEdVBmw2lUsvI=)
2: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl (hash: ETzCUm0Vb2QFQw7ayGeqFbowE0ddp52F620rcxKbx6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:0e:39:aa:69:9a:1a:40:11:3f:df:82:c2:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Validity
Not Before: Jun 25 01:00:37 2026 GMT
Not After : Jun 26 01:00:37 2026 GMT
Subject: CN=e76efadd6a60633bda577fb35e6e3383fedd5d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:ba:c5:fc:94:a8:11:1e:3d:32:1b:99:dc:
38:74:20:08:58:c5:61:69:41:23:54:7f:0b:db:88:
4b:63:70:01:d7:29:27:50:52:11:a1:91:1d:d8:a1:
41:84:e0:83:54:32:8d:c2:96:94:88:b2:36:f9:20:
c0:c8:57:5f:b5:4e:b7:c8:a6:bc:0a:a0:4e:de:22:
34:65:73:ef:b2:42:6b:6c:43:39:47:5e:b0:c4:37:
79:8e:e3:f6:68:e9:93:c1:19:65:7b:bc:e5:8c:a4:
c4:f6:b0:23:06:80:0e:e1:96:d9:dd:74:5e:1c:a4:
50:6f:26:69:0f:26:85:29:5a:20:69:55:77:24:89:
62:02:c4:4d:f6:16:87:78:79:9f:eb:84:fc:2c:ad:
b8:65:7a:cb:a5:a5:bb:e3:0c:85:ec:b5:18:cb:48:
62:f9:79:fd:44:45:83:5b:20:8f:48:31:f8:94:24:
05:c4:1b:01:f3:c1:6e:8e:ec:f3:d7:46:e6:a9:77:
1e:25:43:01:5e:b6:b2:ee:1d:66:a2:98:b2:f3:88:
e1:e3:5e:ec:b4:32:1e:e7:d8:50:d6:00:4b:07:48:
1f:fe:80:1a:82:76:ef:1f:dd:99:a8:2e:2b:f9:23:
c2:6a:ce:51:e9:62:e0:dc:01:b9:94:11:92:32:b0:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:FA:DD:6A:60:63:3B:DA:57:7F:B3:5E:6E:33:83:FE:DD:5D:93
X509v3 Authority Key Identifier:
keyid:69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:d5:b6:d1:18:93:41:ef:b7:20:4c:46:50:07:f4:f4:dd:
87:a5:4b:0a:a3:9a:f3:85:b3:cf:39:e6:87:d0:48:f6:35:69:
c2:f6:5d:f1:ee:86:3d:ae:31:4e:ea:55:fd:ba:fe:49:e6:7b:
2d:d1:f9:f0:b2:1c:30:3b:0a:32:d4:63:97:90:83:56:3f:26:
41:aa:0e:a4:54:c0:96:48:06:79:97:22:9e:1d:c0:6e:57:3a:
e7:54:c7:04:b4:14:71:66:8f:82:cd:fc:8a:bc:1e:09:f8:aa:
51:59:c5:83:d7:33:96:77:96:8c:f0:e4:b3:fc:80:ae:bb:e0:
c0:8f:13:89:99:ba:71:dc:a6:aa:58:8f:a1:1b:71:a3:59:56:
c4:dd:a5:ef:ee:09:61:34:e9:35:bf:79:1b:dc:4f:1c:a8:ed:
70:82:bc:6a:ff:14:35:d6:73:75:86:86:6e:41:c4:71:3c:8e:
8d:96:f3:af:bb:2f:da:58:b2:ca:a9:12:81:2e:0a:80:7f:5d:
f1:e9:ce:7f:da:24:7f:6b:ba:e1:04:73:26:30:be:21:e5:e0:
ca:9b:09:65:3a:d4:8a:63:14:3f:99:84:88:65:5a:8f:55:7b:
8d:e5:45:a1:91:99:e2:59:55:64:60:80:cf:cc:80:fc:b2:26:
bd:c0:6d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:10 2026 by rpki-client