Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: xbPOj01hXtlhWvTgdmwtxcxNwKC6W+K+kwNFOAaVKok=
Subject key identifier: 78:A5:E9:61:58:99:68:07:4D:BF:BF:9B:1D:C6:C6:82:69:A6:7D:92
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 019FA116FF51199DCDE465E733A535001158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 01:01:06 +0000
Manifest this update: Mon 27 Jul 2026 01:01:06 +0000
Manifest next update: Tue 28 Jul 2026 01:01:06 +0000
Files and hashes: 1: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (hash: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: beodWbuRQBFR93xH+8dH1Guj7wP0CymR5VkQZv68iAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:ff:51:19:9d:cd:e4:65:e7:33:a5:35:00:11:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Jul 27 01:01:06 2026 GMT
Not After : Jul 28 01:01:06 2026 GMT
Subject: CN=78a5e961589968074dbfbf9b1dc6c68269a67d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:9f:80:5d:2a:f4:6d:19:c2:5d:84:e4:c7:
eb:5f:66:f6:34:ab:e4:b3:ab:21:a8:07:d3:39:e3:
3d:fb:2e:63:4e:4a:f9:e4:24:60:c3:82:21:3f:9b:
d2:a6:20:7d:03:f1:59:9f:13:b6:f5:66:4e:87:9c:
65:e0:87:cf:72:39:f3:3b:36:cc:cd:8a:49:be:ed:
c9:9d:19:69:a9:a6:fc:a7:06:e4:19:cd:74:75:83:
34:72:b2:ed:2c:0d:b9:42:c7:1a:7e:47:5e:96:db:
be:f1:ad:3b:42:16:8f:bc:e3:48:e6:86:40:cc:65:
0c:fa:65:10:6c:28:61:15:61:59:ff:e4:a2:b7:7d:
91:e0:b7:a4:27:89:f3:38:17:94:7f:fd:d2:f3:d0:
a1:f0:bc:45:e6:da:84:bd:44:95:80:55:b0:42:5e:
27:8f:b4:0a:f0:c1:9a:16:55:93:0f:23:bd:ee:7b:
ce:78:9e:12:5a:92:32:fa:e6:47:a7:f0:87:9d:33:
91:bd:00:29:c1:a0:41:74:36:a9:d9:93:bb:ec:9f:
9b:dc:37:bf:7f:31:77:f2:28:b6:7e:1d:84:d5:a0:
2b:71:da:99:cb:52:39:ec:74:b1:af:17:11:8c:24:
96:15:41:da:e1:64:fd:68:3b:00:99:bf:26:43:37:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A5:E9:61:58:99:68:07:4D:BF:BF:9B:1D:C6:C6:82:69:A6:7D:92
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:24:fc:53:e5:26:f0:26:af:e9:e4:5f:a4:75:80:c2:97:e4:
8f:64:04:75:71:1f:3f:d2:ff:06:bb:27:b2:fa:e9:c4:27:5c:
67:68:bf:2f:28:b5:14:2f:f3:fd:a8:ed:31:40:91:1e:47:32:
b7:af:2d:20:3c:d1:80:7a:22:3a:7b:7c:af:2d:2f:ee:4e:e6:
13:fa:70:5c:1e:75:18:ac:6b:91:26:41:47:e7:59:97:00:db:
59:3b:f6:b0:7e:36:1a:24:2a:11:04:b6:ef:00:72:66:be:22:
38:bc:70:37:0a:ad:7d:1c:50:58:fc:09:32:5a:47:72:70:5e:
5f:2d:60:97:2d:05:aa:42:e6:cc:01:fb:dd:77:21:0d:20:3d:
ff:e8:42:fa:9d:52:72:a7:83:b1:26:3c:33:d2:f5:aa:3b:82:
b4:e9:a7:3f:db:0b:b7:92:ee:a2:e8:5d:1d:12:a5:a5:e1:41:
14:7f:41:4a:3a:18:78:f7:99:cd:15:e4:d6:e9:16:6d:46:81:
92:0f:18:cc:77:ed:9a:cf:3a:92:3f:b2:5c:9f:d4:8d:b2:ff:
f7:89:bd:0d:12:1a:30:fd:6f:28:0b:e5:c6:23:14:1c:0c:22:
51:f1:a2:fe:f9:fe:2a:c4:ba:4b:d9:99:af:cc:e7:f7:c4:7d:
66:69:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:56 2026 by rpki-client