Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: KTSTcmIGRvL42rl02aBeWbNtYd1ek5bzujyw7p/UU7Q=
Subject key identifier: 23:1B:E8:4E:65:63:38:10:AC:58:CC:07:03:A9:BE:B0:1C:F5:5E:70
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 01A029FD0B560547983844E56332DF8E7E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 14DE
Signing time: Sat 22 Aug 2026 15:00:44 +0000
Manifest this update: Sat 22 Aug 2026 15:00:44 +0000
Manifest next update: Sun 23 Aug 2026 15:00:44 +0000
Files and hashes: 1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=)
2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=)
3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: ncMAEJ5r6FE0pcIfb7llQO3dbsGHrwYrRrbx6tPF6jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:fd:0b:56:05:47:98:38:44:e5:63:32:df:8e:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Aug 22 15:00:44 2026 GMT
Not After : Aug 23 15:00:44 2026 GMT
Subject: CN=231be84e65633810ac58cc0703a9beb01cf55e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:4d:6b:4d:40:27:ed:22:c3:e2:90:50:7f:
e3:a8:fb:1a:30:79:01:c7:bc:ce:13:86:36:72:37:
27:dd:d7:36:2d:b4:13:2c:6b:2b:98:d1:23:05:93:
72:92:40:6d:8b:34:27:7d:d4:5e:11:e1:b8:ee:77:
86:ff:ff:7a:f3:95:b6:86:20:35:b0:42:bd:20:ab:
57:52:e2:98:f4:7a:86:06:3d:c3:54:ae:2c:52:e0:
a1:8d:87:c8:ea:7a:b5:61:7e:09:44:9f:d0:9d:2b:
a8:b0:e5:68:92:77:be:b7:27:c2:16:76:19:38:ef:
0d:a5:0a:cb:27:67:2a:6e:99:3b:98:16:62:5e:7e:
8d:8b:ac:d6:87:7e:3a:ab:76:cc:74:6f:98:e9:08:
7d:59:95:7b:18:c5:62:74:24:f3:09:6e:d7:be:c5:
8e:3e:eb:d0:54:22:52:39:2d:0d:79:ab:1d:7b:a5:
9e:4c:38:f7:f3:53:58:d3:79:84:96:2f:77:66:7f:
f8:5c:04:aa:f4:ec:d3:fe:ca:82:f2:71:af:f8:5b:
60:a0:f9:ef:12:3a:39:bf:6a:7b:80:b5:eb:83:aa:
ba:3f:b9:fc:41:6f:93:43:f0:2d:c7:80:be:bf:df:
05:01:b2:fa:5b:18:a3:1e:58:47:99:65:21:9b:d2:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1B:E8:4E:65:63:38:10:AC:58:CC:07:03:A9:BE:B0:1C:F5:5E:70
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:f6:87:60:cb:29:4a:92:25:96:54:0a:ad:4f:90:5b:bd:
07:03:88:58:b9:64:fb:38:52:2d:3f:79:d9:f3:b0:f6:c5:41:
fc:e5:2c:a5:52:93:c1:85:3d:b4:36:67:4e:d9:33:40:b7:b5:
31:ac:a3:be:f9:14:d2:65:44:8f:ab:7c:3b:0c:20:17:e8:c0:
59:3e:aa:42:91:73:a7:97:56:d4:1a:df:b3:a5:9d:59:2d:51:
e5:ed:48:21:68:9c:ac:11:a9:d7:a3:61:bf:15:3f:06:45:f8:
01:25:86:c2:b5:40:78:1f:d3:af:b4:35:4a:9b:1d:de:2f:3a:
93:bb:38:0c:43:d4:6e:aa:2d:27:06:6a:4d:f5:17:c8:70:95:
7c:3b:81:c2:d8:83:17:0b:1d:6f:26:8f:26:df:e7:d1:e0:21:
3d:01:92:04:b9:5c:b6:16:95:1e:a2:df:34:5c:69:71:26:8d:
8e:4a:aa:40:09:ba:38:dc:2f:c7:be:cc:5e:4d:22:08:eb:f4:
0d:73:db:fc:5b:29:99:5a:d8:39:8d:87:2f:d3:8b:3b:fe:ff:
9a:1d:c1:12:14:bd:7e:02:12:92:2f:e5:0d:2f:e1:c4:3c:a7:
13:f2:78:8c:bf:f5:d8:d7:bb:18:80:c7:1c:47:ba:62:ef:27:
15:00:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:13:55 2026 by rpki-client