Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: 3iG2tz9yLjsDl2dIMh2/6v1COf+uhXxr1wXdvf5R9uc=
Subject key identifier: 63:90:9E:90:1D:93:5A:3C:4B:98:54:47:DD:AA:75:CD:91:5A:E0:59
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 019EFC16886A26C99A87A23E259917EAF52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 9B
Signing time: Thu 25 Jun 2026 00:03:15 +0000
Manifest this update: Thu 25 Jun 2026 00:03:15 +0000
Manifest next update: Fri 26 Jun 2026 00:03:15 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: 6/nrRo4/v+wO5u5SJkTehYTAABT1WE1Gjor5nUAg/rQ=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:88:6a:26:c9:9a:87:a2:3e:25:99:17:ea:f5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Jun 25 00:03:15 2026 GMT
Not After : Jun 26 00:03:15 2026 GMT
Subject: CN=63909e901d935a3c4b985447ddaa75cd915ae059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:73:35:0d:25:93:89:ae:21:4b:6c:e6:5b:
c3:e7:3a:ec:4d:8c:78:9e:9f:16:3e:93:42:77:5a:
a8:fd:35:8a:aa:67:85:78:0a:b3:7e:d6:ad:2a:f8:
fb:6e:7d:47:a3:a7:74:6c:b3:70:54:de:9f:45:4c:
29:bc:be:6c:8b:2e:ce:44:3b:60:ca:ad:54:ac:76:
a9:ef:67:41:1a:03:c1:ce:b3:54:0e:91:c7:52:6e:
bb:7f:cf:3c:1e:b0:89:61:70:af:2b:e3:7a:0d:a9:
f5:1c:24:b5:f8:e8:54:cd:59:fc:13:c4:d6:c7:42:
31:fe:3c:71:1a:73:5e:c1:ee:c8:58:3e:1c:b9:2e:
c9:a3:01:97:61:76:ff:69:94:b4:de:56:03:31:98:
67:0c:c0:6a:24:2e:7c:df:ba:6d:b5:96:8f:dd:c1:
76:ca:f6:e1:30:6c:52:77:94:5e:a7:cc:3a:95:a4:
e9:c4:2a:a8:40:1c:1c:6d:7f:fe:0b:7d:d1:70:b8:
00:33:4e:a9:9f:de:af:5c:df:93:20:fa:c5:6e:4d:
c0:da:64:36:6e:a5:e9:bb:95:b7:96:41:63:29:45:
4a:cb:9c:44:e7:5b:84:41:c2:78:32:a5:10:be:f3:
81:82:b3:b2:78:8a:5f:0d:50:28:3d:1d:bd:0c:be:
c0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:9E:90:1D:93:5A:3C:4B:98:54:47:DD:AA:75:CD:91:5A:E0:59
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:63:36:48:36:b2:c0:21:ea:0d:a4:01:4e:0f:11:0c:f9:18:
6c:c8:3a:96:8a:de:16:39:10:ac:cc:80:ea:24:f4:a2:03:5c:
b4:b0:34:ef:c8:2d:9e:55:2d:a4:35:8f:10:75:20:0e:dd:2b:
04:66:f9:88:c1:fc:5a:d0:b5:62:ef:80:d7:4c:1f:b2:6d:8e:
c5:5b:92:34:94:bb:07:1c:b2:33:2c:3d:e6:3f:53:20:ed:5d:
52:19:b6:7c:7d:96:32:d7:de:12:b4:0b:c0:e8:70:9b:e4:cf:
7c:ba:25:4c:3f:b1:8b:4e:6c:39:b5:f4:b4:67:99:58:c7:c4:
76:82:c7:b1:1c:49:9e:bf:62:cb:76:f6:22:de:cf:8e:53:1d:
02:78:59:fd:8a:f7:eb:98:29:9b:b5:43:15:93:0c:fe:fa:30:
23:b4:6c:3c:46:60:c9:24:f0:66:96:5c:27:fd:ee:df:1f:ce:
29:33:28:67:3b:e2:a4:b0:b3:4b:55:fe:aa:d0:97:b9:75:f3:
d7:4d:0a:70:8b:a4:95:23:cc:e5:72:11:5a:89:e8:12:b4:d1:
8c:e3:1e:6c:45:83:42:af:3f:89:94:be:22:75:c1:90:b0:36:
78:df:e5:93:b2:f8:bf:cc:19:1a:98:9a:63:43:24:74:d9:c4:
8a:4d:c0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:51 2026 by rpki-client