Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: AH8jUUO7g41/pGLLZeUEMg2CNZDWUZ+0dFjC9OnInsc=
Subject key identifier: 3E:A5:91:FA:E9:AE:A1:04:A1:40:C5:14:90:28:13:B6:C5:FD:82:21
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 019FF910D05B7CBD7E7677C9C68FC1E014EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 011E
Signing time: Thu 13 Aug 2026 03:00:56 +0000
Manifest this update: Thu 13 Aug 2026 03:00:56 +0000
Manifest next update: Fri 14 Aug 2026 03:00:56 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: Kf2+nA3Viv4UQHDYNoMkw6TKT8Sgs8I+ENyrBtO3XVk=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:10:d0:5b:7c:bd:7e:76:77:c9:c6:8f:c1:e0:14:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Aug 13 03:00:56 2026 GMT
Not After : Aug 14 03:00:56 2026 GMT
Subject: CN=3ea591fae9aea104a140c514902813b6c5fd8221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:7d:32:d9:b7:aa:c9:41:f6:4b:f4:8e:6c:
57:15:1a:64:de:ca:87:8d:7a:d4:4c:17:d7:34:cb:
cb:f6:37:15:79:b9:1c:c2:d6:5b:ba:25:50:4f:2a:
c8:30:73:56:2a:ca:9a:8d:ce:7a:34:a7:d2:db:d0:
d4:73:02:85:bf:2c:93:62:86:5d:79:39:58:10:2d:
86:ff:1d:cb:b3:fc:c3:c6:ef:2c:1d:0f:1c:93:90:
19:f8:b5:49:16:83:2e:88:36:51:96:1b:29:1e:18:
85:6a:6c:0a:f1:b9:1d:21:08:4c:d3:19:ff:cb:f7:
06:b5:ce:f0:cb:d8:94:a9:06:51:1c:e4:1e:45:08:
4e:7a:f5:2c:da:0b:c0:03:9c:18:c9:83:9f:1a:ac:
06:f8:a7:b0:05:0c:6a:9b:2e:e9:2c:4f:41:fb:68:
a7:27:29:5d:10:cd:1c:5f:e6:aa:fb:17:ea:12:c4:
46:0a:e1:eb:53:a9:c0:0c:ca:bb:e9:97:ac:4d:38:
3c:6e:dc:ac:65:72:aa:88:bd:19:f8:11:2f:f9:50:
94:e9:c7:89:e8:cc:53:d3:83:94:75:4d:17:1f:dd:
90:50:0b:08:7e:5f:1e:81:92:c5:3a:a3:7c:33:a2:
0e:fb:dd:29:31:b9:f1:49:c9:c9:1c:48:49:8f:3b:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A5:91:FA:E9:AE:A1:04:A1:40:C5:14:90:28:13:B6:C5:FD:82:21
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:43:30:5d:94:57:ce:b8:f6:8c:1b:0c:94:0f:6d:db:22:97:
d1:47:4f:30:da:80:7b:39:31:59:3d:12:80:4b:fa:de:28:86:
44:4d:5a:1a:bf:7c:08:0a:f4:f7:6f:76:09:4e:e2:2f:1d:0f:
2d:2f:43:9f:b7:54:ed:be:f7:75:3d:3f:8f:88:0f:06:b2:92:
43:7e:b5:0a:53:46:a9:78:0c:84:55:ac:fd:14:a8:07:95:9b:
4c:86:6a:2f:11:1b:57:11:0d:c8:5b:86:2e:bb:ec:3e:8a:d1:
b5:eb:92:4c:c0:18:0c:07:d0:a5:cd:23:7d:c5:4d:6b:c8:6a:
05:c8:a8:a7:6c:56:71:dc:87:d3:86:03:1d:e1:c1:a3:3f:ad:
f2:c2:40:43:a6:58:f9:0b:5d:4b:ad:2b:68:fd:44:0b:16:d1:
be:a2:2a:4d:78:df:33:31:72:85:2e:72:51:3d:df:f8:ea:eb:
52:97:27:d8:e5:b7:3f:30:ea:7a:66:be:df:fb:23:a2:e2:58:
dd:34:43:e2:b2:36:3c:85:00:7b:91:b8:c2:85:fd:b2:7c:74:
f3:12:ed:bb:c7:21:4c:e6:8c:6c:45:08:2c:8d:a9:d6:e6:e4:
40:f1:5b:f6:74:60:cf:2f:84:39:1f:d7:5c:cd:ab:c0:ad:b5:
50:9f:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:42 2026 by rpki-client