Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: 5endhL4D8q71cpX0wJSbdHl6ttPgyH3hVbHC6zebv90=
Subject key identifier: BE:7F:28:19:C4:81:C5:FB:56:28:03:86:04:31:17:76:5C:41:B8:C8
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019EDD2EE9E5C9833F53A4264ECC0BC81F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 1235
Signing time: Fri 19 Jun 2026 00:01:39 +0000
Manifest this update: Fri 19 Jun 2026 00:01:39 +0000
Manifest next update: Sat 20 Jun 2026 00:01:39 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: EZGtfv4bY8BwHDe40/mbPXCtH1Uj+XwMXjYaZekLPU0=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:2e:e9:e5:c9:83:3f:53:a4:26:4e:cc:0b:c8:1f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Jun 19 00:01:39 2026 GMT
Not After : Jun 20 00:01:39 2026 GMT
Subject: CN=be7f2819c481c5fb56280386043117765c41b8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:d4:cf:2f:62:35:c4:ff:be:57:51:3a:56:
d9:b9:f0:89:07:f4:4e:bc:65:7e:ac:5d:3d:4c:02:
06:ee:12:d4:fe:83:39:c5:1d:2b:f8:99:0a:f4:fc:
bf:98:f4:5c:6f:f8:7e:c0:4e:7e:1d:bc:0d:c0:67:
1e:fe:2b:a7:e4:f8:c7:76:f1:70:c9:5c:63:b4:96:
55:17:05:7a:77:03:9e:7e:97:66:cc:08:5f:2c:87:
a1:dc:e1:54:5d:37:7e:fc:09:ba:83:86:34:11:e4:
d3:3e:e7:e9:dc:7a:de:2d:1e:63:af:9f:58:43:86:
02:80:2c:e0:ab:3d:43:5a:f4:65:d8:30:a3:f6:0d:
8f:cc:51:54:d3:69:7c:4a:ee:27:65:0a:11:c8:bc:
60:58:62:ac:4a:c0:ff:08:2a:fb:b3:b3:ac:b7:ea:
15:63:dc:c7:a7:11:ea:55:13:fc:d7:6a:f5:1b:80:
91:92:91:68:8f:2d:f0:e6:08:e5:c2:90:25:6c:cc:
95:e4:a1:34:35:e6:50:27:f5:ab:75:80:8b:15:3a:
77:69:8c:ec:4b:72:e2:e3:81:d8:f8:0a:2e:15:68:
c0:fb:20:db:a9:b6:66:83:57:a6:48:04:c0:96:73:
43:65:de:1f:88:c6:6c:92:f6:30:d5:f7:de:9a:34:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7F:28:19:C4:81:C5:FB:56:28:03:86:04:31:17:76:5C:41:B8:C8
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bd:59:ba:42:e6:3c:7c:6b:66:94:f3:04:d8:f3:f3:81:0a:
27:04:6c:47:43:94:84:43:34:cd:d0:f1:6f:18:53:41:d2:8d:
8b:69:04:2e:14:0e:3a:18:9e:97:c7:11:4b:68:d7:39:c7:cd:
54:d9:6f:ab:db:d7:75:3c:d4:36:ee:6d:95:8a:f8:0e:2e:37:
cc:74:f4:cf:72:39:85:1c:57:40:53:ed:bb:c7:10:7f:f1:e3:
64:3a:04:e1:ef:c4:73:cf:72:6c:01:f4:76:35:f7:bd:d4:2d:
37:ce:95:ba:16:47:b0:da:f7:4d:81:a6:9a:08:94:e7:19:14:
77:0b:01:71:17:43:81:e3:7a:46:e6:9c:36:a4:3a:8b:26:3d:
19:bf:7c:fa:bf:b1:40:a3:b6:55:d4:63:a1:7d:6c:e3:48:0b:
70:b5:be:1d:b9:a1:8b:e1:0a:ca:5f:c2:7a:aa:78:f4:0c:a8:
ed:5f:6a:e4:75:e1:ef:ed:76:1c:fe:11:35:f9:b7:fd:2f:57:
0e:8d:44:2c:93:99:02:62:05:2d:13:29:0a:fc:67:27:06:cc:
1b:61:19:e5:07:bc:db:c0:44:a8:28:36:e8:d4:06:4d:93:20:
a6:03:00:02:fa:b9:09:b4:69:74:9a:37:6d:93:35:ac:87:e8:
3c:b3:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:16:42 2026 by rpki-client