Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: oVFoU+/hhB+rwgfIWKDJ9tNXwGw+VtQ1IE5KX5xT99A=
Subject key identifier: DF:B1:C9:55:95:39:75:C0:E5:0D:77:6D:9F:87:17:F5:D8:2D:04:FC
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019EB8B4A814832AEA311C6F3F43AC298810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0AB4
Signing time: Thu 11 Jun 2026 22:01:47 +0000
Manifest this update: Thu 11 Jun 2026 22:01:47 +0000
Manifest next update: Fri 12 Jun 2026 22:01:47 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: yvvAM1Z4qUe6PYSvQrTOpS9Q6MC4hBBCDvVC6JPgKZ4=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:a8:14:83:2a:ea:31:1c:6f:3f:43:ac:29:88:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jun 11 22:01:47 2026 GMT
Not After : Jun 12 22:01:47 2026 GMT
Subject: CN=dfb1c955953975c0e50d776d9f8717f5d82d04fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:71:a4:48:c9:96:77:a1:22:5a:84:fc:1f:
bf:46:9d:67:fd:a3:ab:60:cb:4b:85:1b:23:ae:87:
75:7d:40:e9:e9:52:9e:69:92:64:16:93:06:a3:df:
23:75:6f:61:00:18:2b:e8:99:52:d3:6d:95:3c:05:
f6:05:34:ed:93:07:0d:d3:67:c0:0f:7f:44:ac:fd:
72:4b:1d:65:f6:12:af:65:c8:03:1d:4a:84:59:46:
a0:d9:c9:8f:fe:c2:63:6a:80:c4:d6:20:fb:18:73:
25:f6:01:32:d1:20:f7:9b:80:31:d2:4c:10:51:ae:
c5:d6:56:04:b3:ec:34:93:6d:74:e3:25:cc:56:01:
91:c4:fd:90:55:50:60:38:e8:61:b8:73:06:de:c3:
83:7a:16:11:52:f4:8e:91:86:16:06:92:c3:22:68:
89:8a:86:24:e4:a1:21:37:2b:8a:0e:7d:5b:e1:ca:
87:3c:0b:da:1a:f1:d1:59:fe:a4:b8:3c:7a:0a:76:
44:7a:8a:8b:ef:a3:1a:4d:59:16:80:ea:15:d3:c7:
29:16:1e:ea:6b:6f:18:a6:91:8b:ff:e5:36:b5:f8:
08:7d:74:34:1f:ef:4c:a3:21:27:56:58:ef:3f:7a:
21:39:63:97:c4:27:0f:4b:ed:42:4c:3b:34:88:ba:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:C9:55:95:39:75:C0:E5:0D:77:6D:9F:87:17:F5:D8:2D:04:FC
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a7:c3:e1:77:79:10:4e:01:09:d9:1d:9f:58:d4:52:b8:92:
37:80:9d:87:0b:9f:19:63:ce:69:eb:51:b8:5c:c5:e5:ef:6a:
d8:97:cf:9d:86:11:a6:d8:50:30:3c:c5:ab:0e:d6:a6:4d:73:
b2:41:4c:30:b9:3a:b2:c0:36:91:d3:d0:8b:a5:6f:90:79:1d:
fb:5c:06:73:b4:4b:00:5b:91:0a:95:ef:5c:da:3c:e0:9d:80:
e5:06:e4:51:1b:c2:8d:7c:e0:8c:25:ec:6c:de:9c:f0:25:67:
5e:26:39:86:1d:76:be:f1:85:ad:a4:10:b4:0d:ba:d7:13:90:
9f:9e:aa:d9:01:e9:b7:a5:a3:2d:08:49:75:6d:dd:e6:f8:27:
05:5a:4c:bd:90:f6:15:57:ed:dc:28:7e:b3:84:cd:ee:06:dd:
46:8c:2c:e1:1d:4b:26:b9:92:df:78:46:b7:17:82:71:39:c1:
ab:1f:fc:08:ca:eb:c5:59:10:d2:a8:f0:5d:2e:b7:62:da:6b:
af:38:4a:f0:8b:bf:d1:87:8f:a5:f9:f3:54:0d:81:e4:a8:17:
a4:6d:54:26:a8:f9:99:2f:da:c1:76:b3:7b:9d:bb:97:43:61:
25:47:b4:70:ed:8b:52:51:5d:67:c6:13:02:23:be:ed:2b:5e:
fa:52:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:31 2026 by rpki-client