Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: ehM3TjOfW/gDGY0ljFNQFwAWqaNjNPJpUXT8h1YjR64=
Subject key identifier: 79:C7:47:95:A0:50:11:F0:54:FF:39:BB:11:82:E4:22:5C:DE:33:77
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019EBBEC5833A2A8AF67B18E595BEF0AE39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1671
Signing time: Fri 12 Jun 2026 13:01:28 +0000
Manifest this update: Fri 12 Jun 2026 13:01:28 +0000
Manifest next update: Sat 13 Jun 2026 13:01:28 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: in69aVACYakRYPAcdr9fWC82V3VQ1wb+CkOMQ7h0x9Q=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:ec:58:33:a2:a8:af:67:b1:8e:59:5b:ef:0a:e3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jun 12 13:01:28 2026 GMT
Not After : Jun 13 13:01:28 2026 GMT
Subject: CN=79c74795a05011f054ff39bb1182e4225cde3377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:93:9c:98:70:78:71:f0:28:06:96:49:ca:2f:
44:30:8a:ce:81:fc:5f:d3:9b:9f:7d:37:b4:58:f9:
7b:5c:72:a0:82:47:bd:1e:06:f3:ed:d5:c7:49:3f:
10:70:70:62:a0:9c:c9:02:b0:02:1f:1d:2d:6e:fc:
b0:ba:cf:cd:db:b6:52:cb:c2:f1:c8:52:ee:99:ba:
e4:d5:5c:85:0b:07:c2:a4:79:f1:94:4d:a2:a1:c1:
c6:cc:a7:2f:66:2c:10:25:19:64:a9:3f:3e:dc:21:
08:7d:c1:c5:99:82:09:11:4c:53:3e:ef:c9:4e:3f:
24:38:95:ec:b0:bb:39:81:b6:14:98:93:fa:93:c0:
38:09:12:05:70:ce:7b:2a:07:09:b6:6a:c2:68:fd:
b5:7c:98:96:f9:b3:08:cc:fc:3e:de:82:49:70:ae:
b6:ad:51:f1:f8:5d:2f:59:63:d6:fa:02:5e:68:e7:
ca:36:cb:a9:97:36:b0:c0:08:f5:6b:c6:15:73:66:
1b:06:ed:66:e5:d5:53:30:41:2e:b3:25:b3:45:b9:
36:85:2c:64:9c:90:1f:4f:96:2c:ed:2f:46:c9:d2:
c3:bb:53:26:8b:cc:b9:a6:3e:31:36:4b:0c:be:62:
27:30:8a:60:aa:c9:21:69:c3:d5:0e:bd:78:45:0d:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C7:47:95:A0:50:11:F0:54:FF:39:BB:11:82:E4:22:5C:DE:33:77
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:1b:71:e2:5e:d4:39:28:9e:cd:81:05:05:98:a1:12:2c:
d6:6d:c7:46:bc:0a:0a:35:b4:03:09:f5:87:de:85:50:dc:56:
a3:a0:de:34:ed:65:62:82:59:99:a5:fe:35:54:aa:8a:d7:23:
49:39:20:c9:bf:0e:72:c4:09:7f:8e:2a:53:87:a9:c7:a7:0e:
3c:68:ee:9b:db:e1:bc:3f:de:55:dc:5d:13:b8:6e:cd:b0:da:
39:ac:39:8b:d3:42:f7:a1:55:27:e6:41:ee:3f:18:e1:d4:84:
ba:cf:a8:a0:db:e1:91:09:48:b0:cc:cb:b1:63:78:7d:4d:bf:
67:34:67:e3:f4:1e:39:08:aa:e7:5b:7c:d2:b5:86:bf:07:c3:
b3:d7:dd:7b:eb:ad:66:fb:32:db:96:87:81:6f:9d:24:c2:fd:
76:b7:62:ab:32:e2:20:fd:82:f5:2b:b8:3e:af:c7:67:1f:97:
7c:d6:1b:4f:90:1b:25:03:35:aa:16:1e:7a:2e:a5:3e:db:95:
4d:db:17:7a:52:05:c9:c3:c2:86:73:40:6c:29:c1:2a:a1:e1:
7b:1f:00:6f:f6:85:c5:38:f2:8d:49:00:b0:a2:29:77:8e:2b:
b1:d3:06:31:ed:af:b8:5a:65:99:40:8a:da:6b:39:c2:da:d7:
27:de:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:54:18 2026 by rpki-client