Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File: aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier: tqE9OCdFXotfOsvVfWmoL4DQxkLslkiigRDXmV6/TpE=
Subject key identifier: 2A:BA:4B:A5:82:1A:43:0C:F0:D3:F8:63:B6:63:64:58:1D:60:DF:E9
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer: /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial: 019F9F5F23A38E22BE83183A23C1AF067445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number: 12F9
Signing time: Sun 26 Jul 2026 17:00:40 +0000
Manifest this update: Sun 26 Jul 2026 17:00:40 +0000
Manifest next update: Mon 27 Jul 2026 17:00:40 +0000
Files and hashes: 1: RPEQq3Oeg8g3f4Eb2J24vdtQ3DM.roa (hash: BE+VwtKl7zKClVOQGTL8tdfzuTZ8z6XoZx7cFV+84EA=)
2: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: rU6okrAkXtPlsvqsGf6+vt5SxQIxW5yctVcajUkaej8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:23:a3:8e:22:be:83:18:3a:23:c1:af:06:74:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Validity
Not Before: Jul 26 17:00:40 2026 GMT
Not After : Jul 27 17:00:40 2026 GMT
Subject: CN=2aba4ba5821a430cf0d3f863b66364581d60dfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:a4:b9:af:64:bc:70:2d:db:e2:c4:f3:9d:
7b:43:3a:c5:47:54:c9:43:31:6b:a9:c6:18:b3:ed:
18:9e:c7:08:78:ec:b3:91:b4:38:b5:26:71:17:3d:
74:d5:0b:05:d6:51:ac:07:1d:47:fd:d1:f3:d7:e2:
62:60:9e:71:c4:83:9f:b8:e9:d2:b3:c9:d0:3e:77:
8b:01:27:69:6d:80:38:6d:17:0d:b3:53:7b:62:cd:
63:37:36:b0:1f:c6:1f:b1:91:da:fc:ee:6a:9a:7a:
24:a9:56:da:ac:26:91:7e:ce:78:0a:e9:37:a1:ba:
0e:0e:e9:2f:6d:3a:d9:28:ce:dc:aa:a5:e8:09:00:
a0:b6:08:75:67:9a:4d:61:88:87:b3:d4:b0:6d:b7:
ae:e3:00:ef:3a:23:84:e7:5f:e1:1e:ca:9c:b7:65:
dc:6e:7e:68:1c:c8:f4:23:93:41:17:a5:06:84:66:
2b:a8:41:2b:94:ae:7f:12:14:46:58:c1:96:a4:16:
60:8d:d6:d0:81:3b:fb:b0:83:00:85:9e:d1:ac:76:
9a:18:6f:73:6f:51:bf:6e:2c:a4:31:6b:f9:2e:e5:
8c:16:1f:e3:63:e7:35:9f:66:3c:74:67:ad:8a:7a:
9e:6a:d7:fb:23:f6:c0:3f:2f:6b:93:85:93:45:dc:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:4B:A5:82:1A:43:0C:F0:D3:F8:63:B6:63:64:58:1D:60:DF:E9
X509v3 Authority Key Identifier:
keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:df:c1:ac:cb:0d:da:c8:a2:8b:01:6f:7d:c0:b8:2f:27:90:
3b:9d:38:38:b6:12:16:1b:0d:df:6c:98:05:df:55:2f:83:a3:
77:d5:00:7e:af:0b:15:97:cd:ce:4a:e2:49:9f:af:f2:a3:00:
cd:51:b1:c0:d4:17:8b:97:3e:9a:16:8c:c7:1f:16:d8:75:2a:
4a:3e:91:8e:0e:33:b6:e9:7e:21:50:30:93:87:8d:ea:25:2f:
bc:7f:20:00:bd:59:3e:cf:4f:a9:98:0d:13:02:ab:b7:eb:8a:
fd:81:b1:77:81:53:b0:39:92:56:4f:1b:60:46:87:f1:ec:c4:
86:71:e2:52:78:03:bf:9e:26:b4:0c:e6:3f:57:07:f3:ea:e3:
cf:ad:f8:7d:cd:e6:be:70:96:71:68:31:44:ac:8b:c1:17:92:
a1:d1:f2:bb:f6:05:99:21:ab:e1:80:d3:db:82:a9:b7:da:88:
c9:0a:43:ac:b6:b1:d7:fc:1c:18:fe:22:9d:e3:24:a1:24:8e:
48:ef:33:fa:6c:0b:dd:1c:fa:6f:ba:60:0e:8b:42:85:d1:6c:
e5:01:83:d0:79:7a:83:ed:26:0b:97:e2:1c:e7:29:e0:f9:df:
e7:a2:94:4a:4d:dd:78:0c:d3:c9:0d:1e:a4:c1:c3:eb:47:5d:
e6:7b:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:39:26 2026 by rpki-client