Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
File: AemEvojKuDCuuB0O2HaPQzE11Zo.mft (raw, json)
Hash identifier: EnaQX+VSVfVIAmGi3b+3OBl3FA0fx6ue0zSgi6Vh8L8=
Subject key identifier: 0C:31:61:89:9F:60:A8:BC:7C:BC:CF:08:ED:3F:DA:42:BA:7C:49:BC
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 01A181BDBF4D50AB4D4C031F6D7B7908F89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:58 +0000
Manifest this update: Wed 28 Oct 2026 09:00:58 +0000
Manifest next update: Thu 29 Oct 2026 09:00:58 +0000
Files and hashes: 1: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (hash: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=)
2: AemEvojKuDCuuB0O2HaPQzE11Zo.crl (hash: lnyiamkRsUiyOrKg6c1Tg4iyYCTorwJs82FAZ7RBGO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:bf:4d:50:ab:4d:4c:03:1f:6d:7b:79:08:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Oct 28 09:00:58 2026 GMT
Not After : Oct 29 09:00:58 2026 GMT
Subject: CN=0c3161899f60a8bc7cbccf08ed3fda42ba7c49bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:78:af:75:f2:31:a6:b2:09:e9:11:00:4c:
1a:e6:bc:b8:8b:dc:f6:06:6d:d0:82:91:6b:de:89:
1c:8a:78:fd:e4:eb:8d:44:69:a7:b9:67:37:6e:4c:
ad:d1:d0:43:6a:4a:e9:5c:23:06:ee:63:2e:1f:aa:
4b:d5:1e:45:72:7e:cd:1b:72:40:35:a4:6a:bc:02:
fd:64:6f:c4:db:6b:bc:a3:c1:63:e7:63:fc:28:8a:
51:78:bb:af:f6:6a:6f:d5:cd:5f:a1:0e:82:d3:39:
70:06:c9:7f:58:fe:85:36:79:61:9b:b6:77:b3:bc:
e6:c0:25:c9:db:6f:ba:3b:37:db:11:b7:a5:f7:06:
7f:70:d2:38:63:2e:e0:70:cd:28:40:5a:28:31:e7:
6c:b1:df:56:f5:42:f8:53:63:94:56:ba:e2:5d:1b:
6e:0c:d0:3c:95:71:95:33:d1:7e:72:7a:93:b2:2e:
9c:57:b7:84:82:f7:2a:73:9e:68:a2:d0:87:84:04:
c5:b8:70:1d:66:59:fc:f6:55:da:ee:ce:f8:15:46:
3c:f2:ff:a4:02:bc:39:50:2a:ac:dd:cf:62:a7:07:
bf:91:c4:3b:05:70:75:c2:2f:e4:47:6b:1a:5e:97:
53:3c:dc:ca:25:ba:33:7b:3a:c1:77:5e:84:52:2b:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:61:89:9F:60:A8:BC:7C:BC:CF:08:ED:3F:DA:42:BA:7C:49:BC
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:4c:f4:1a:54:4e:2e:b9:01:e2:a7:d9:77:53:52:d5:ce:f5:
b1:c5:a4:a6:d0:bb:4a:b4:4b:45:fb:50:2b:b1:9e:9c:af:40:
8d:b1:95:f0:5d:ab:14:18:6f:c2:3c:f6:80:93:d3:3b:90:5b:
e7:96:b8:fe:56:cb:9b:af:62:2e:43:37:98:31:43:63:82:22:
b7:90:3a:8d:b1:b8:21:08:f8:35:38:9a:e8:73:19:71:be:7e:
be:48:5f:5b:68:4d:90:e9:e6:73:ac:e8:dd:9b:46:4b:1d:7f:
c4:82:01:d6:1b:f5:aa:95:7f:9b:76:47:28:0b:fb:fc:15:1d:
99:4f:65:34:1f:8f:7c:5d:6f:d9:3e:a9:a3:29:db:56:a0:fd:
9a:e4:92:b0:93:25:8f:9c:bd:3b:32:74:99:86:21:76:23:3c:
d4:07:75:91:37:4d:21:bc:5f:b4:8c:d6:d7:b8:4d:50:1c:a9:
c2:1b:06:62:62:ca:0e:62:16:2b:b0:fb:13:85:0a:0d:4c:23:
4b:bb:c6:80:f3:38:14:79:52:35:84:a1:36:71:ee:25:60:4d:
b4:8a:d1:81:39:72:62:69:1b:8f:18:01:fc:66:68:00:84:43:
af:43:c0:3a:96:ef:ee:a1:99:56:d0:04:56:e1:be:10:2c:9a:
f9:a1:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:06:38 2026 by rpki-client