Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: dJWfw4dTLCsmxqFPAcJDejodFFXb9tH80kO0Xbv+dXo=
Subject key identifier: E0:E7:9C:0A:08:FB:73:D2:65:F2:51:DC:2E:47:AB:A7:A0:67:43:B8
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 019FD2B3A8AE561530AF7FFF175068EDF559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 19F4
Signing time: Wed 05 Aug 2026 16:13:36 +0000
Manifest this update: Wed 05 Aug 2026 16:13:36 +0000
Manifest next update: Thu 06 Aug 2026 16:13:36 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: fmO8gbUbWqBZD7shdOLBY8heV6sW2iAQjJXHt3Eko3k=)
2: bKFR-ExETl9kc_NczqQy1RxK9rs.roa (hash: plcIB/DfvBpq4QLItxVjsjUSKb2BA3Zq8rL1ma4T6FY=)
3: pRSgM7v51dj4_nnKyTIe5vKbqck.roa (hash: zoPAj53DpixsBYDFs95Rz1APyotRYxKBCaNS8cQmVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:b3:a8:ae:56:15:30:af:7f:ff:17:50:68:ed:f5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Aug 5 16:13:36 2026 GMT
Not After : Aug 6 16:13:36 2026 GMT
Subject: CN=e0e79c0a08fb73d265f251dc2e47aba7a06743b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:e0:21:46:2c:04:51:38:70:3f:a8:e2:81:
7f:ac:3a:c6:38:84:52:59:be:9e:c7:b7:f3:78:20:
9c:e4:fd:b0:e9:67:3a:91:0d:bc:8c:0c:73:ac:3d:
10:f6:85:ce:1f:b7:f4:69:18:14:6e:8d:c4:8e:aa:
f0:bb:a0:dc:8f:73:97:46:77:ef:f1:28:83:38:7b:
f7:d8:f4:0f:5c:75:c8:cd:6d:9b:9d:98:1b:b5:3e:
48:24:71:b6:d5:6a:23:fb:5c:b6:f7:7e:08:5f:5d:
91:5d:3f:3d:9d:fd:3a:4e:fe:49:9e:94:96:5f:f0:
2b:bc:1f:5d:ea:61:51:ce:bf:dd:1c:02:07:7c:9a:
f7:c6:98:19:83:8c:0e:5b:26:4c:2f:b6:c6:ea:f9:
b6:47:1d:5c:b2:a7:da:74:dc:1c:93:58:2c:65:7f:
58:19:fc:f0:d6:61:9f:9f:45:4e:de:67:46:79:f7:
71:b9:f6:0f:37:44:4f:11:f9:6b:af:b9:a8:bd:99:
13:1f:5b:2d:10:e6:82:07:60:8c:e0:8d:ba:d2:e3:
94:14:00:47:f6:d5:5c:8e:b7:99:51:93:89:94:04:
35:b5:74:75:14:70:40:85:01:0e:42:20:21:8a:f1:
94:73:f6:9c:91:5b:91:79:7a:54:dd:c9:b9:94:8b:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E7:9C:0A:08:FB:73:D2:65:F2:51:DC:2E:47:AB:A7:A0:67:43:B8
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:bf:bc:87:89:9c:bb:bc:0a:ac:d0:a1:8e:ae:6b:df:2b:
de:cc:cd:a2:7d:23:a8:f7:9b:73:07:b4:28:2f:2b:84:91:2f:
e0:02:70:e4:43:6a:bd:a3:fa:0c:da:71:ec:43:98:ae:9d:0c:
90:bc:a5:a9:cc:99:64:36:aa:2b:f8:a8:94:7d:88:81:55:dd:
8c:a3:da:1c:55:42:83:62:25:51:c7:0f:14:e7:72:6a:a5:67:
2c:f7:6d:01:d7:b2:5f:f2:4d:81:a5:80:52:23:d4:5c:c9:41:
aa:8f:a0:45:ab:ae:8f:e8:38:79:fc:aa:7d:dd:53:fd:c9:aa:
ec:d0:00:6a:04:87:76:47:9d:11:c6:9c:f5:4a:35:d1:69:8a:
4d:81:ae:1c:fc:ed:7b:88:e1:51:1d:49:24:c5:0b:6b:22:42:
44:ec:06:7e:6d:f9:7e:af:ab:ed:2a:d9:d1:f4:d4:6c:d4:46:
70:dd:b1:97:fd:1e:bb:3d:d6:a4:09:45:86:c9:a6:b6:7f:00:
b8:b5:cd:c1:d2:f0:fb:35:30:c4:35:c1:14:c1:bb:30:ed:59:
40:49:7e:86:88:47:ad:51:01:de:11:de:5f:89:b4:71:c6:78:
f6:ff:3e:ed:75:f0:08:97:8b:36:e2:71:8f:1d:c0:e1:4a:8e:
6c:57:f6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:02:02 2026 by rpki-client