Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: HWN8zOOqF8GnAdoshODbfuk5xOJfoU4k3spDvPi4Hy0=
Subject key identifier: 27:E2:1F:8D:05:8D:82:43:5E:30:FF:BD:09:03:CB:63:5C:C5:F1:23
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019FA260A389C2E07F61F74D6C5FB8DE3214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0B2E
Signing time: Mon 27 Jul 2026 07:01:09 +0000
Manifest this update: Mon 27 Jul 2026 07:01:09 +0000
Manifest next update: Tue 28 Jul 2026 07:01:09 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: uoP7FWJk4vZuMfUraqNf6VBqzjYwspP9DKvQ5S1k4b0=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:a3:89:c2:e0:7f:61:f7:4d:6c:5f:b8:de:32:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jul 27 07:01:09 2026 GMT
Not After : Jul 28 07:01:09 2026 GMT
Subject: CN=27e21f8d058d82435e30ffbd0903cb635cc5f123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4c:d8:38:fe:c4:13:9c:3d:c9:83:be:65:18:
04:89:7c:b4:20:66:84:e8:46:bc:af:d4:98:93:fd:
4c:7e:f9:cb:3c:fa:5c:29:9e:f2:78:10:68:45:a9:
e5:08:7e:94:2e:88:82:fb:5a:aa:96:ff:9e:e3:89:
f9:4d:23:df:00:fb:16:43:37:6b:5b:58:f0:bd:40:
b3:5f:ed:5e:55:5b:28:1b:2b:f8:6d:49:1c:8b:13:
e5:67:68:0d:8d:63:1e:eb:e1:1f:6a:ba:00:1b:33:
51:6c:84:03:b5:9c:33:b8:ea:76:b2:f9:6f:42:4b:
29:31:77:06:86:24:7c:84:cf:57:37:81:9e:be:7b:
0d:cc:b5:71:bb:07:f6:14:6a:7f:7c:6b:f1:e1:9c:
8f:0a:da:e1:6a:bf:91:f6:98:42:b9:8c:59:f8:f1:
9b:5c:df:7a:c1:fd:72:0f:09:55:2b:a0:46:05:3c:
0a:ab:ee:fa:2c:7b:df:f5:83:48:02:40:af:8c:70:
7a:b2:24:6b:4b:c4:09:58:ef:68:08:92:b3:29:c7:
48:bc:6f:6c:69:16:fb:80:21:ce:75:39:d0:c7:07:
6f:10:fe:86:d0:f4:d6:8e:81:5e:32:0e:fb:a0:4c:
21:88:51:13:73:b4:9e:bd:85:df:13:2a:50:83:32:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:1F:8D:05:8D:82:43:5E:30:FF:BD:09:03:CB:63:5C:C5:F1:23
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:90:af:ee:21:dc:8b:d6:5f:92:a8:b7:69:a6:f9:22:88:7f:
86:06:52:6d:15:fb:3f:17:b2:d3:c3:8b:e1:d0:70:01:b1:87:
a2:f4:41:69:fc:9f:9f:84:10:d3:86:c4:3b:9f:40:ce:d3:96:
66:d6:62:a8:8c:d6:c6:7a:0c:28:88:92:50:ef:e4:f1:6d:79:
d5:85:33:2d:fa:d3:e4:ce:eb:5b:f9:f0:1f:df:9b:60:d0:b0:
6b:c9:ea:44:35:d0:ef:f0:2d:18:32:21:1e:cf:0d:b7:69:7b:
33:0e:87:ef:c0:49:a9:b3:1d:b9:66:fe:ad:92:eb:ba:25:37:
46:1f:57:48:21:08:00:2a:66:89:b4:83:8c:71:55:d8:5b:ff:
3e:89:20:e7:ee:1a:42:f7:38:e5:d5:28:57:bb:44:cc:ef:bc:
34:b1:6e:f2:32:1c:27:8c:36:bd:b4:77:1e:a9:ad:ee:90:aa:
c2:8a:83:e1:06:63:98:1f:0a:17:21:d5:24:d2:15:fa:38:7b:
45:60:0e:cb:6f:19:a0:66:b5:ca:63:87:a0:8e:36:0d:10:5d:
7d:59:25:5d:aa:fa:54:d5:09:bb:82:9e:4c:14:23:be:fd:88:
20:36:45:e4:01:c3:fa:37:f0:03:43:9e:94:5a:b9:22:41:6b:
da:65:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:05:04 2026 by rpki-client