Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: GYcPFJKLZB23i8O12GPhmGbA56Sc4HqNV5fl1em0u7w=
Subject key identifier: A6:0B:45:23:FA:16:A7:5F:2F:A4:9D:D2:0B:12:7D:AC:97:3B:FA:27
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 019E28B945BC1CF10192AB08F35C64DB57F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 189E
Signing time: Thu 14 May 2026 23:01:31 +0000
Manifest this update: Thu 14 May 2026 23:01:31 +0000
Manifest next update: Fri 15 May 2026 23:01:31 +0000
Files and hashes: 1: VmSEi88h8EdX70CoZBoX1PGWIw4.roa (hash: cwT1GcadLbcYd+EhAmWFsga6gtnL8WtN6n2eRtcoP6o=)
2: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: IfZkDPS1qP/tIlMTITnAH4gwiYLvulbvVwiC5PBf4WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:45:bc:1c:f1:01:92:ab:08:f3:5c:64:db:57:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: May 14 23:01:31 2026 GMT
Not After : May 15 23:01:31 2026 GMT
Subject: CN=a60b4523fa16a75f2fa49dd20b127dac973bfa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:11:ed:d6:2b:81:aa:ac:7e:70:28:27:96:
0e:35:30:61:2e:3f:32:2f:c2:35:a3:72:ba:bb:5a:
c9:c3:a0:b6:44:73:f4:4e:fb:da:e3:e6:36:37:d7:
06:dc:68:81:38:4c:0f:ea:d0:33:6c:54:2d:a1:3b:
8c:9f:ce:27:24:02:8a:ed:99:fe:d8:9e:bb:33:fa:
8f:35:1d:3e:4b:76:15:1e:57:d3:16:45:02:10:c4:
0b:2d:ed:e3:b1:f7:d2:0a:64:b9:13:3b:58:14:04:
f0:ab:8c:11:8d:a0:51:67:b5:13:4e:99:6f:16:c8:
ed:ea:03:1b:84:0e:b2:e6:0f:2c:dd:f9:86:47:78:
e7:ab:77:16:64:79:99:5a:78:42:13:06:7b:29:57:
7c:eb:93:0a:a3:a2:b4:10:6c:06:a7:91:07:58:80:
2e:c9:b0:b1:27:af:eb:13:5d:4a:88:f2:91:ea:6d:
19:4a:3b:09:83:ab:f2:c3:fa:ff:3b:0f:ec:e9:ee:
e6:88:89:63:ef:02:1b:3e:82:2f:30:7e:7f:10:e7:
88:b3:f9:8f:29:00:2b:a1:fc:95:3f:bc:9d:a2:4f:
d4:26:0c:a2:88:4c:94:23:7c:86:8b:9d:66:2d:8b:
4f:d8:54:b5:cd:5d:b4:d1:58:c0:86:cf:93:4d:53:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:45:23:FA:16:A7:5F:2F:A4:9D:D2:0B:12:7D:AC:97:3B:FA:27
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:36:58:aa:df:ca:58:f8:51:5c:a7:bd:fd:f6:2f:6a:50:
aa:5d:f7:0c:ce:95:76:dd:0d:1e:7d:d0:8c:dc:ad:eb:a1:64:
de:e6:2c:f4:65:95:f3:dc:f1:44:32:f8:ec:17:b5:37:39:42:
c2:1c:27:17:2f:9b:01:82:d0:2f:1e:b6:db:38:bc:a4:ba:46:
a8:88:59:e0:22:7e:02:e4:3c:fd:63:ba:9b:43:e5:12:5f:a8:
a6:ee:d2:a2:91:58:58:50:14:ae:9f:97:5c:a1:4d:c2:18:b1:
be:c8:80:83:8f:ab:fd:94:70:dd:ea:10:42:90:12:dc:f0:08:
77:bb:d8:26:2a:f7:77:f3:55:ec:f0:32:10:32:3d:fb:10:02:
78:52:91:b1:00:f3:eb:44:da:41:ac:e5:3f:bd:3e:73:ef:de:
39:e0:75:15:20:40:b8:95:57:57:4b:1b:4b:ed:ee:6e:98:4c:
be:13:32:f4:86:6f:df:b1:3e:b1:30:0c:c9:72:32:c7:27:53:
6c:5e:26:2e:c1:90:0f:d3:5b:a9:6b:f0:0a:09:5a:0e:cb:06:
7a:1d:71:2e:7e:62:be:59:0e:ae:8f:46:b8:53:8b:a2:16:2f:
30:11:1e:ec:72:b2:38:c3:f3:bf:28:6f:d7:dc:66:0e:7a:46:
e4:43:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:05 2026 by rpki-client