Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: DmfKEEieDQN8zZHzcOBZrw4CtZ1q4pp4AIpwOki1HmY=
Subject key identifier: 45:D6:72:B0:86:64:F0:BA:C5:EA:D0:27:21:05:A5:F7:18:DB:83:08
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019FA304AE844ED6548DA56ABF37624093E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 10:00:20 +0000
Manifest this update: Mon 27 Jul 2026 10:00:20 +0000
Manifest next update: Tue 28 Jul 2026 10:00:20 +0000
Files and hashes: 1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: brGuicIiYplggLCIiS8uZH2w86WUWEc7EHY1zmhc/Xs=)
4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:ae:84:4e:d6:54:8d:a5:6a:bf:37:62:40:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jul 27 10:00:20 2026 GMT
Not After : Jul 28 10:00:20 2026 GMT
Subject: CN=45d672b08664f0bac5ead0272105a5f718db8308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:8e:ec:4f:e5:c9:92:ae:3f:29:54:70:f6:
e8:69:54:8e:a1:27:d9:98:a0:73:96:36:39:5f:15:
df:a4:1c:14:a6:c5:a1:dd:c5:2d:1e:ef:7d:6b:5b:
77:46:d0:c3:d5:79:b4:05:13:63:98:55:5d:57:d9:
7e:37:30:52:fd:17:0e:fe:47:2f:1f:65:c4:0f:11:
8f:91:da:1d:78:32:2d:a0:da:af:88:f7:2e:f2:7d:
6d:68:77:e9:52:02:1f:60:6d:d0:fb:34:dd:be:08:
38:11:41:42:e0:9c:58:02:84:76:93:f0:67:88:77:
3b:43:aa:a9:ed:d3:30:3d:0b:8f:66:63:d4:2c:0a:
ae:71:60:c9:8a:60:5d:a7:2f:95:19:bf:40:76:7a:
c8:99:a3:2a:e0:67:16:01:7a:29:a7:9c:21:3c:55:
fc:27:88:46:24:85:52:94:da:b1:d7:b9:4c:9e:63:
a3:82:e3:03:43:36:0b:b9:22:64:2a:bb:53:24:d8:
0e:64:59:93:d6:a2:ba:e2:b0:17:bc:1c:cb:1d:bc:
8b:11:cd:d3:07:35:18:20:6a:dc:c1:ca:56:ae:98:
e1:40:98:d9:d8:57:c3:0e:0a:3b:37:66:de:e4:8d:
9e:6e:c2:b2:38:95:6e:55:59:86:80:ac:a2:8a:48:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:72:B0:86:64:F0:BA:C5:EA:D0:27:21:05:A5:F7:18:DB:83:08
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5b:0f:07:50:40:b8:b2:2e:2f:fa:45:22:60:5c:ba:ce:0a:
26:d8:d9:46:ea:2f:ac:d8:79:0c:ce:2a:72:81:74:fc:ea:71:
02:60:0a:cb:57:87:66:28:ec:90:27:09:41:af:09:f5:2e:e8:
7e:fa:54:ff:6b:91:53:1d:4a:c6:4b:02:6a:1f:ae:e4:97:28:
ca:88:d4:e5:8b:c0:45:8c:7a:c6:2e:a7:1d:45:d6:54:97:b3:
a4:57:28:5f:00:ac:87:5c:33:27:f5:99:e2:ee:d5:be:f9:58:
56:61:3f:c4:33:d7:92:35:81:f9:b9:d2:cb:50:2e:66:1d:1f:
af:44:42:77:d4:f4:7f:4d:55:4a:0e:94:1f:c3:2e:04:2b:c9:
78:d0:51:91:9e:85:b8:87:b7:73:8a:3d:61:ea:8f:c1:25:4f:
1d:d5:a0:34:b1:01:31:8a:89:a6:a9:9d:5d:ac:ef:c1:77:58:
9d:ca:d7:36:23:b3:21:99:ed:0c:b2:64:62:32:51:51:75:05:
30:84:d2:bf:39:93:2c:00:37:39:49:fb:89:8e:3c:b0:a6:aa:
8f:d0:0c:11:39:d4:dd:86:9b:38:55:38:22:25:e0:e4:2e:da:
f9:9f:2f:02:4f:2c:8c:b6:31:5f:03:3c:dc:74:93:38:43:30:
ee:d3:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:45 2026 by rpki-client