Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: Y5vSWNjecfTryU6q8/PBrS7TzEgy60fgWbXQ2+YXN8s=
Subject key identifier: FB:56:08:33:5D:0E:DB:96:95:44:9A:8B:79:22:3F:79:37:44:A1:BC
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019FBAD72FD01D3F9732737D04F13FBFA8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 16F5
Signing time: Sat 01 Aug 2026 01:01:32 +0000
Manifest this update: Sat 01 Aug 2026 01:01:32 +0000
Manifest next update: Sun 02 Aug 2026 01:01:32 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: 2p71MIMTP6zYJYxto9cwoFuD8JIX44AG6b+AXEVwumI=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Aug 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:d7:2f:d0:1d:3f:97:32:73:7d:04:f1:3f:bf:a8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Aug 1 01:01:32 2026 GMT
Not After : Aug 2 01:01:32 2026 GMT
Subject: CN=fb5608335d0edb9695449a8b79223f793744a1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:6e:ca:26:52:c6:99:90:3f:92:d1:da:a2:
3b:e6:85:33:4e:7b:4f:ba:1f:e3:31:ce:76:43:23:
ed:cb:62:c6:c8:e4:d6:fc:f0:87:e1:aa:a2:a0:59:
ec:97:5b:22:eb:64:c4:b6:3e:8f:e5:f8:74:de:43:
ee:b4:25:6b:52:9f:7b:16:52:30:ec:45:cf:40:38:
79:9e:8f:43:41:45:83:98:c8:b1:76:ff:03:f5:ac:
54:34:d4:2c:c1:d7:b7:17:7c:c8:86:15:ef:40:53:
45:04:e4:8d:b7:fb:24:da:88:e5:a0:54:65:bc:55:
32:9b:32:03:16:32:be:5c:8a:f2:79:cf:7a:d2:ac:
59:c9:3a:86:6c:e0:22:cb:01:5c:e2:45:14:78:04:
cc:df:e3:df:b2:14:a1:65:60:81:12:fd:b1:03:01:
e8:44:65:b4:15:06:87:1f:53:b2:30:db:e8:40:cc:
87:ac:d7:43:1e:24:6f:7e:c8:38:6d:f0:fb:99:19:
9e:c2:cb:69:c0:ea:a0:bc:b2:60:2a:df:93:7e:df:
0d:6e:96:38:d1:0f:6d:8f:e4:36:87:0e:5a:68:5d:
b9:0e:b4:3b:e6:7f:11:55:e4:3d:34:37:23:77:5e:
cb:d6:ef:b3:66:5f:67:dc:e3:9d:62:3f:5a:2d:2d:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:56:08:33:5D:0E:DB:96:95:44:9A:8B:79:22:3F:79:37:44:A1:BC
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:39:01:df:29:c5:75:bb:70:33:be:c5:7f:fd:ac:79:d8:
9b:7b:1e:d9:7f:a3:7a:90:85:d7:03:a2:57:ec:f4:6a:6b:06:
42:a0:a9:c0:a1:ff:a1:1d:f9:9c:ca:22:40:e3:b6:15:93:46:
e1:69:ac:6d:59:d9:41:b5:e3:44:bb:6f:94:b0:09:fc:c2:7a:
52:e8:29:08:4a:ac:5c:ab:57:6e:77:28:83:e0:28:2d:14:cc:
5e:dc:31:50:30:1a:cd:72:6d:c9:85:5a:06:a4:0a:8a:8f:34:
12:b3:90:8e:71:41:8d:a4:cf:b0:0b:75:42:ed:d7:b6:ea:3e:
e0:a3:5e:a0:1b:68:0f:1d:9f:59:9f:4e:9e:6c:22:73:eb:85:
b2:56:62:09:92:c7:f5:d6:e0:7f:4f:af:47:bb:f2:3d:a9:50:
a6:6a:d5:f3:36:52:82:fe:26:a8:91:ac:20:d3:de:fa:b7:bd:
b7:f5:ee:00:7a:c6:9d:a7:a7:a3:11:c8:75:bf:12:7d:63:23:
28:17:48:bc:2c:20:da:f1:60:b9:7d:ab:b2:c9:34:d9:c5:9f:
b4:5d:73:43:78:87:7d:0d:d5:af:a9:94:7c:e1:cb:78:e7:6b:
14:b0:d5:cb:11:00:34:86:bd:45:b4:18:f9:53:f1:5d:e5:14:
fb:49:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 10:47:50 2026 by rpki-client