Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json)
Hash identifier: PU+OaRsYFTPFZWiC8brVj/5/0sVLPDunswb0zGHx2kI=
Subject key identifier: F6:95:BB:02:62:6A:D2:1E:7D:47:F4:AC:EE:8B:5D:C0:F9:E1:1A:15
Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Certificate serial: 019EB8B4A3F7AAA35A416455EBD4BA3BAC6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 22:01:46 +0000
Manifest this update: Thu 11 Jun 2026 22:01:46 +0000
Manifest next update: Fri 12 Jun 2026 22:01:46 +0000
Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: huHRGWMbtLi+LV1ONfIL0UYnxvakUnNREf49s79e+JI=)
2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:a3:f7:aa:a3:5a:41:64:55:eb:d4:ba:3b:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746
Validity
Not Before: Jun 11 22:01:46 2026 GMT
Not After : Jun 12 22:01:46 2026 GMT
Subject: CN=f695bb02626ad21e7d47f4acee8b5dc0f9e11a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:03:32:0c:4d:0c:99:03:3e:d1:20:e7:3c:
2b:ee:66:7b:f6:c3:71:e6:21:46:e1:f3:dd:70:5b:
09:5b:f2:e3:cd:9c:c4:61:8b:56:f2:00:2f:2e:36:
7c:78:8c:ba:7e:62:34:96:2e:b4:f3:55:16:50:53:
82:cc:a4:2a:c4:57:0a:14:50:b5:b1:b6:82:29:48:
eb:b2:bb:08:d6:88:b9:7b:cb:ff:98:85:61:e5:a9:
37:61:7e:ba:15:64:78:2d:9a:36:d6:25:d6:02:68:
8b:be:91:bc:a2:94:7c:62:56:df:9f:a3:8a:6f:74:
60:38:98:e6:b5:a6:14:42:48:5a:b5:6b:e2:7a:d0:
63:34:5b:ea:e5:7f:be:0d:cb:d4:1d:93:c7:bd:6f:
71:e1:77:0f:fd:c7:69:c3:92:f9:bd:48:43:99:70:
87:f3:21:1c:c9:00:8a:d4:10:2a:0a:c0:33:49:d1:
8d:1e:86:ce:44:4c:d0:97:8f:71:ab:f5:d9:96:35:
2b:7d:c1:82:ad:d3:f8:a4:6c:0f:fb:ca:78:4f:9b:
00:84:a7:12:72:d6:a1:f7:4d:bb:0a:e5:9e:ef:6f:
f4:5d:55:ec:34:6d:b6:54:91:50:a4:f9:df:e5:a1:
2c:d5:c0:1e:5d:e9:55:17:f7:e6:3a:cd:b5:bc:53:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:BB:02:62:6A:D2:1E:7D:47:F4:AC:EE:8B:5D:C0:F9:E1:1A:15
X509v3 Authority Key Identifier:
keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:1e:63:78:60:d4:03:37:c1:9e:3b:93:a6:e2:3e:c9:c7:
ed:90:c7:3e:77:5d:b7:2e:29:32:36:c3:f2:18:74:4d:9c:a0:
28:a7:27:6c:43:3a:7e:b4:33:33:15:7a:d5:5b:6a:cd:b5:22:
5b:ae:66:52:b3:06:4d:76:67:9a:d1:70:db:ef:3f:97:58:dd:
ad:14:fa:12:d0:2f:2b:8e:eb:f7:1a:33:39:ad:48:a4:5c:ee:
63:b2:85:7b:aa:9c:0f:fb:68:1c:d7:b9:2e:6f:cc:a5:d7:34:
5a:49:30:ee:5a:3a:0c:d1:0d:30:d6:97:65:43:43:f6:1a:e1:
36:2f:6e:9c:78:0a:29:f4:52:5d:96:3c:d9:84:ed:fe:2a:19:
2c:66:32:7a:ba:9d:4e:1b:6e:b5:b4:38:9f:4e:73:d9:c0:c1:
e3:fa:1e:4b:62:4a:1e:ad:c8:a0:ab:a2:cb:db:5d:03:58:17:
c1:f7:e4:b3:e0:b9:32:c2:f3:03:04:fe:cb:2e:53:32:5e:8d:
9d:9f:ec:1f:1e:aa:6e:d3:32:73:bd:b2:8a:c2:40:28:a5:fa:
ea:d5:e0:f5:00:89:47:b9:87:1b:9f:64:7b:75:66:c9:0c:c1:
da:18:78:2e:6d:5e:49:e3:fe:b9:0c:25:80:64:2b:78:9c:fb:
68:e4:80:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:31:26 2026 by rpki-client