Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: Q42e+eXp6kPV1wiKjeQN18yD5s50BKtReHlsPQVKHwI=
Subject key identifier: A2:01:68:A2:3B:DD:BD:FE:78:BE:CF:FC:5B:5A:66:09:AE:28:F9:4E
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 01A0C17ABB5048FD6710D0AF511F17BBDD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 177D
Signing time: Mon 21 Sep 2026 01:00:40 +0000
Manifest this update: Mon 21 Sep 2026 01:00:40 +0000
Manifest next update: Tue 22 Sep 2026 01:00:40 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: OtE07S6abhj96/0A7Y3I1Eq0KBVGVns3iFYfjqoa7OI=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:bb:50:48:fd:67:10:d0:af:51:1f:17:bb:dd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Sep 21 01:00:40 2026 GMT
Not After : Sep 22 01:00:40 2026 GMT
Subject: CN=a20168a23bddbdfe78becffc5b5a6609ae28f94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:57:10:18:6c:a2:bb:3d:69:d3:68:c4:5d:
28:d4:29:53:75:da:cc:54:cb:38:cd:a8:ee:6a:99:
2d:b9:bf:a1:e7:62:84:11:ac:db:bf:0c:01:25:4b:
53:cb:19:9c:91:6f:8b:31:89:3b:57:62:3d:89:75:
a3:15:f8:6a:80:e0:b8:af:26:16:c9:9f:b6:c8:ee:
a9:a5:98:f1:f4:64:eb:cd:8b:dc:c8:89:c2:54:e9:
08:2f:ea:c8:15:7d:f8:97:b0:10:d2:2f:6a:37:5b:
4f:ac:ea:c2:63:7f:00:a8:5e:e8:c7:ce:6c:a6:23:
3a:29:fc:52:21:28:e5:bb:03:3d:00:d7:1d:0d:fc:
13:c5:12:1f:45:97:d1:b8:dc:b0:ed:4e:7a:72:47:
c0:8a:38:99:c0:b1:1f:8f:97:8d:cb:2d:88:fb:80:
bf:6c:9e:0a:e7:c4:0c:7f:0e:85:ff:63:5b:54:d0:
3e:9c:50:79:dc:ac:c5:6c:00:17:a3:5b:e1:22:6e:
38:a0:69:e2:04:fb:d1:51:5e:e7:0d:8f:b3:6f:27:
46:2f:0a:e6:96:31:64:d9:3c:7f:eb:ff:16:65:06:
bc:84:f7:d2:f6:64:45:90:95:b9:df:db:29:9a:02:
7e:31:41:88:bd:e0:a4:d2:e3:fa:6d:75:36:9a:a7:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:68:A2:3B:DD:BD:FE:78:BE:CF:FC:5B:5A:66:09:AE:28:F9:4E
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:43:38:80:a1:eb:10:cf:d0:9d:a0:7e:af:70:05:30:72:6c:
16:a5:ae:7c:c0:79:e8:1e:ad:37:6a:1b:a1:ea:14:c2:3f:15:
4d:e2:d5:50:fe:af:48:7e:07:61:d2:5a:c8:d2:a6:83:e9:df:
4a:2a:8d:1e:8a:b1:71:30:01:0d:75:75:eb:f2:ad:bb:f3:b9:
c5:6d:81:9b:f9:77:2f:4f:20:ce:cd:a7:e3:d1:57:a8:6b:e1:
2d:97:e4:99:c8:b7:ca:da:25:53:99:25:1e:e6:0f:7a:a6:ed:
3b:c4:3d:e1:fb:c6:26:eb:b5:30:02:d9:a0:2e:b3:46:9a:cc:
46:0e:42:84:94:18:fa:6b:5a:41:b4:57:bb:28:7b:2a:72:4b:
98:81:3a:59:e7:b6:ef:3e:69:40:50:7a:d3:b2:ba:6e:95:75:
4f:05:38:d3:d9:75:e0:65:f3:ba:71:b4:58:9d:ac:4c:8b:bc:
11:12:d8:40:b2:1b:1a:dc:df:5b:0e:85:44:9d:f3:90:e2:05:
d8:7c:92:57:03:b3:d4:2a:16:82:c6:f8:c4:63:90:3e:ad:7f:
6c:bb:88:17:ca:19:5a:b8:5a:02:a6:e4:a0:cf:56:db:f7:2a:
91:d0:21:62:da:5d:e6:14:00:89:1a:a4:83:41:e6:f2:ce:6b:
aa:ce:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:56:36 2026 by rpki-client