Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File: aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier: bjRaXxcJoUFiaTiW3K0x96JlUZaKLRtoFqXL/n07P0A=
Subject key identifier: 65:F0:C1:55:BA:B4:81:83:C1:66:B5:29:D3:BC:93:EC:3C:19:C2:6D
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 019ED085B1F49F15F19863B7EC615D96D944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number: 0AA3
Signing time: Tue 16 Jun 2026 13:01:22 +0000
Manifest this update: Tue 16 Jun 2026 13:01:22 +0000
Manifest next update: Wed 17 Jun 2026 13:01:22 +0000
Files and hashes: 1: CLI88VHiEhgKE-1aGQUntQikJ5Q.roa (hash: ZVHFqHEU1nz5pNZPpYsPfnWS/ZMoHolHN6V8GvVDEFc=)
2: Jl_sYXdLZY6LvwTOjI4Ivkon2zc.roa (hash: UfbfdfYRRXhEErXk2SVvIxQQ/2IYnFtsKwlFklKvl10=)
3: XRNvoKreqEdZEhJbOno-5BqPGEE.roa (hash: z4A5c3Ug9WBluQD4ssGRXcELVIDjB7HhErsV07uP9GQ=)
4: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: ZR2wmKW1CWw9UTx8Nagg0WpSR9OW/S8Gf2SVFcyHRZ0=)
5: cMhJe9vMQdQscfbNYoY-RkxcY2s.roa (hash: 93wi+LrRWDjLqjvMhMNKSnr4mEg4br0bsv0cTgfuNiY=)
6: i_fytzvyxwG53KWVE9QAYKkho0Y.roa (hash: 5GkZyytH7JdVjBbsZ02ixFMBkgHMmde3+fzDOBq+r/s=)
7: p6WJDUmkrZTi2ydBqJW-U5fF3Ms.roa (hash: tChmnA2OZ6ar9x3H+45dejO4Gb9P462WbOfjtPU/W8w=)
8: r_ZJyy1H5Ytar0NlqRrjDEm17lM.roa (hash: +sYf7FlHcDL4+/H52w762XwNy7Z8plqNAAGvu5Wp3Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:85:b1:f4:9f:15:f1:98:63:b7:ec:61:5d:96:d9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jun 16 13:01:22 2026 GMT
Not After : Jun 17 13:01:22 2026 GMT
Subject: CN=65f0c155bab48183c166b529d3bc93ec3c19c26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:77:59:7f:67:0c:79:f2:bc:16:0a:ff:17:
49:91:7e:1c:af:aa:21:3e:b8:16:5d:49:9e:19:e2:
90:31:d4:ed:2c:58:45:5a:be:86:de:76:c7:54:cf:
f4:08:74:b9:85:a7:26:ff:6f:46:1f:44:c8:e5:95:
08:57:65:0b:16:99:60:63:a4:73:c9:f6:d6:dc:f1:
ca:f8:eb:62:f5:10:b2:f5:2a:50:a7:09:55:6d:07:
a2:87:89:66:f8:1d:e1:5e:34:20:eb:b5:b9:ee:af:
e6:59:62:35:af:4c:26:fb:6c:99:58:a9:cb:2f:a5:
37:fb:df:7a:e4:09:fa:89:34:be:dd:fe:71:4b:36:
e1:3a:bc:24:e1:f5:f2:a4:d4:30:58:db:e7:d4:a8:
88:4d:3a:19:05:2b:76:00:a5:ab:66:a6:c9:44:c3:
3e:9c:05:f2:aa:42:5c:93:6f:c9:1e:73:1b:49:d7:
55:52:db:95:3a:6b:d9:29:91:d1:89:62:35:9c:54:
97:d6:c7:6a:87:51:eb:56:57:d9:44:6f:d1:9f:40:
d9:49:25:17:2a:54:a2:b4:b1:30:8f:c2:83:cc:54:
49:50:ed:b8:ba:38:a8:af:07:19:57:b7:54:3b:c9:
79:18:26:bc:fc:9c:9a:aa:2f:42:8e:89:fd:55:59:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F0:C1:55:BA:B4:81:83:C1:66:B5:29:D3:BC:93:EC:3C:19:C2:6D
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c5:40:61:fc:70:0b:d7:c2:76:69:51:2f:86:8a:3a:85:0d:
9b:44:26:17:b8:ff:57:30:4f:58:c2:d1:e8:6f:00:42:8a:1b:
b3:ac:0b:71:4d:ff:db:3a:5c:a7:07:c7:d3:9d:1f:ab:8b:7b:
f8:a0:27:89:3e:89:4f:f8:21:e3:e2:3d:05:ec:13:ab:91:56:
06:77:ac:1d:f8:80:42:7e:11:82:b0:3b:4c:c6:57:af:f7:37:
45:10:be:b6:bd:6d:6c:03:08:17:54:81:2d:c3:c5:19:80:43:
fc:8a:e4:0e:f3:f4:31:91:64:cb:15:9e:cd:3d:69:3a:5e:75:
36:7b:c9:df:f1:3b:8a:4c:a5:83:55:f7:e8:b3:3e:5e:95:ae:
28:ca:1e:ea:a2:51:ad:55:f3:30:35:b9:d1:c4:33:7c:b0:25:
4c:64:51:16:37:4e:7c:e1:35:b2:d7:3e:fe:74:20:65:6c:c3:
0d:81:c7:f9:20:cc:1e:93:5c:73:c3:87:cd:ae:cc:b9:76:38:
97:bf:e2:ce:ef:57:0a:a9:46:34:df:98:7e:7a:e5:8e:86:07:
b8:09:40:1f:2e:b9:b9:e2:bf:4d:95:3f:c7:5f:67:28:60:13:
8b:c5:a9:e3:26:4f:2f:5c:b5:06:11:9d:9a:46:17:b3:04:9e:
e7:d4:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 18:55:12 2026 by rpki-client