Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
File: AemEvojKuDCuuB0O2HaPQzE11Zo.mft (raw, json)
Hash identifier: EKYxk/+zGyeY6aECV9Vp0ZsOvF/M/nPfo5IcNnKG2Q4=
Subject key identifier: 58:38:E4:42:4C:63:66:D9:25:C4:CD:3B:BA:D6:90:96:69:F8:CF:BF
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 01A08C7B25B0A22AB5462C81AFB44A00F403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:15 +0000
Manifest this update: Thu 10 Sep 2026 18:01:15 +0000
Manifest next update: Fri 11 Sep 2026 18:01:15 +0000
Files and hashes: 1: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (hash: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=)
2: AemEvojKuDCuuB0O2HaPQzE11Zo.crl (hash: 7vmnXApgj6YYpsCjSi/zmx/EU3sTKqC69n4GlTilPTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:25:b0:a2:2a:b5:46:2c:81:af:b4:4a:00:f4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Sep 10 18:01:15 2026 GMT
Not After : Sep 11 18:01:15 2026 GMT
Subject: CN=5838e4424c6366d925c4cd3bbad6909669f8cfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:2b:8b:fb:d0:4b:ad:47:47:7a:33:68:09:
2f:67:00:75:19:38:09:ec:72:71:ee:47:28:bf:56:
07:ff:6b:ff:27:71:16:10:5d:4e:7e:54:fd:95:64:
1d:d0:25:58:9d:89:dd:80:53:19:c8:61:8d:14:73:
09:fe:cc:3d:de:42:36:38:73:9c:62:dc:e5:97:ab:
e2:f4:cc:90:74:d4:6b:cb:01:b8:b8:1f:84:15:c6:
29:08:bb:57:03:e4:3f:67:5e:97:84:8a:e6:5a:85:
b9:88:77:87:f7:2c:14:ce:a4:a2:2a:6f:a5:4d:69:
67:fa:72:47:06:c6:f2:a8:4a:79:8d:80:a7:38:3d:
24:84:6e:9a:19:be:8e:50:9b:fb:79:53:8d:fa:9c:
ad:ff:f2:70:7d:32:b3:72:db:c1:33:80:f8:a2:18:
11:80:5c:a5:b9:e8:8c:dc:7b:3b:6d:a2:8c:4b:9e:
b0:ef:17:65:41:2f:9c:3e:e4:2f:01:2b:dc:62:c3:
b7:8b:a1:b3:80:07:c3:31:75:66:e0:81:d7:fe:2b:
ec:e8:08:e4:55:85:c3:84:0c:dc:58:9b:c9:e2:8f:
3d:a5:6f:d3:e0:b3:62:1b:7a:45:d1:2a:ca:00:86:
e4:b5:65:66:7c:14:2e:ab:47:8c:01:e6:5b:5d:f3:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:E4:42:4C:63:66:D9:25:C4:CD:3B:BA:D6:90:96:69:F8:CF:BF
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:6f:77:2a:38:29:a2:11:66:85:65:12:60:b2:e1:09:33:
ea:76:d3:fa:d3:58:25:2f:72:0b:98:92:a7:5f:b5:29:e7:b0:
2b:90:23:3c:af:6f:20:3b:66:89:fe:95:d6:3e:c5:93:4d:24:
b5:18:2f:0d:ed:38:1f:24:a7:90:79:a7:13:c9:23:0c:b1:e3:
54:91:f9:57:23:c4:2c:12:70:a4:b8:88:02:3a:fd:21:0b:fd:
fa:6f:4e:7e:c3:07:e3:44:a4:6b:dd:dc:bc:74:b2:dd:d2:98:
d3:2f:4b:1e:da:e7:b4:28:2e:d2:cc:77:55:59:ef:6c:68:b8:
a9:0b:a3:9a:71:27:86:4e:fe:52:55:7d:23:74:ba:87:91:c3:
03:9b:3c:1b:9c:35:8c:dc:9c:b5:21:2d:0f:fe:d7:18:a1:e9:
75:c9:da:1b:2e:39:28:76:ea:c8:1a:a9:66:49:2a:0f:8e:f3:
3b:60:c1:c8:80:52:29:52:1d:20:28:c7:d5:b5:c3:7d:f8:1f:
44:09:05:a7:69:52:70:80:4a:16:93:f4:7a:0a:fe:21:73:c8:
54:5a:7d:48:bb:a9:93:9b:f0:7b:99:22:cc:5b:94:18:01:a1:
c1:0c:81:91:75:fb:2f:38:53:be:0a:c1:1b:a6:fe:de:20:f2:
1b:01:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:55:27 2026 by rpki-client