Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: ZcykFc6nACGAfw1i6RMBrnnZyMR6G14YvL3GjFcmlds=
Subject key identifier: AC:88:B0:F1:82:34:C1:E0:AC:4D:1E:64:FF:37:FB:F5:B5:22:76:8E
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019EB9FE07914882FDDAEA846E3637030D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1670
Signing time: Fri 12 Jun 2026 04:01:33 +0000
Manifest this update: Fri 12 Jun 2026 04:01:33 +0000
Manifest next update: Sat 13 Jun 2026 04:01:33 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: Ib4bluy6IWK/X+e77+5bImFZyVS8XNeeNMWb9qRe+Ts=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fe:07:91:48:82:fd:da:ea:84:6e:36:37:03:0d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jun 12 04:01:33 2026 GMT
Not After : Jun 13 04:01:33 2026 GMT
Subject: CN=ac88b0f18234c1e0ac4d1e64ff37fbf5b522768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:90:69:17:12:8d:8e:66:25:27:c0:49:29:
c7:6f:5d:96:b2:fc:40:19:60:fa:ed:c9:74:72:6e:
8e:ee:f0:2b:b1:67:28:82:26:42:4d:fa:cc:87:d7:
d9:62:25:9c:52:5e:4c:b4:69:93:22:03:03:7c:82:
88:21:14:75:d5:08:c8:7b:cf:ad:8d:57:0f:13:c8:
de:86:9b:7f:e3:de:2c:cf:04:92:e8:78:bd:77:36:
e0:29:4d:16:89:bc:da:64:ed:6e:cf:fa:6a:8e:47:
89:ba:13:87:79:2b:31:a9:a5:b2:48:0a:b7:f6:f2:
28:33:2d:30:89:3d:d6:95:ca:25:11:cb:13:74:b9:
d1:ae:34:54:78:e7:b9:ff:d6:01:a4:aa:db:f9:67:
f3:a6:75:3f:07:28:41:a8:0b:45:34:c3:6f:40:7c:
a7:2d:c4:14:70:29:4c:45:11:67:b9:9f:32:22:25:
08:07:49:51:0a:3a:d8:66:1a:e8:42:95:8a:e1:68:
e9:bc:f8:a6:96:2c:36:64:c3:d3:57:f6:1c:4d:16:
3a:46:25:47:cd:03:10:cd:7a:e4:a7:95:e4:56:e8:
e6:c4:23:ee:c7:17:9d:7a:31:b6:29:fa:e1:52:a2:
42:92:c4:3f:10:6e:bd:44:bd:1e:c9:21:5c:e3:02:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:88:B0:F1:82:34:C1:E0:AC:4D:1E:64:FF:37:FB:F5:B5:22:76:8E
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:25:ab:ca:78:09:ec:8a:fa:86:a9:e2:33:7e:85:1c:86:22:
33:ea:d6:a8:c0:43:f1:a3:ca:2d:2a:57:33:eb:4d:ff:85:b1:
63:98:e7:21:46:7b:3a:6b:aa:5c:a1:53:62:e7:02:97:4f:3b:
6e:a9:a7:95:f8:b6:ba:df:a0:99:4b:5c:ea:df:a6:c4:cb:65:
f5:b6:0e:b9:95:ee:60:a6:b7:38:68:89:08:fd:06:88:c4:6e:
3f:8e:ab:98:d1:2e:ea:18:9d:62:cb:86:85:98:d8:97:28:8d:
9c:a8:be:a4:36:cd:63:69:95:8e:f5:96:b7:b8:05:4b:18:40:
85:a8:fc:e1:25:c4:60:b8:94:ec:3f:de:3c:d7:51:bd:45:5a:
8b:74:dc:f9:bd:a4:dc:c4:e3:ef:81:aa:2d:64:65:d4:43:52:
bb:2d:ae:cc:90:6c:2b:91:33:5e:fb:d3:da:17:86:d6:95:71:
bf:0d:01:22:df:6b:1b:85:4e:ed:42:10:43:df:77:4f:8f:ff:
60:03:f1:e0:0d:f5:32:80:c3:df:6e:f9:62:e8:83:74:52:9e:
09:8b:1e:a0:a2:83:a6:53:69:75:f3:39:ac:34:7e:96:11:ab:
6e:4a:ae:1a:3b:fb:10:d0:79:e8:1a:fb:06:bc:d3:67:28:05:
3a:3c:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:49:38 2026 by rpki-client