Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: 7T5EeC5Jexs5NYz29lowojOwhB4ovrIUwTPtStPr9g4=
Subject key identifier: 4E:C5:04:64:2C:B0:57:A2:6E:56:DB:9D:4C:1A:42:1B:D9:22:34:FC
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 019DCE6286E7DA15B8B68D35A95EEF5B78C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 186F
Signing time: Mon 27 Apr 2026 10:00:56 +0000
Manifest this update: Mon 27 Apr 2026 10:00:56 +0000
Manifest next update: Tue 28 Apr 2026 10:00:56 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: Y+Hd6jSOMNxk30aq3hFApL/nCw2wEsvAioCQH8Sz7nk=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:86:e7:da:15:b8:b6:8d:35:a9:5e:ef:5b:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Apr 27 10:00:56 2026 GMT
Not After : Apr 28 10:00:56 2026 GMT
Subject: CN=4ec504642cb057a26e56db9d4c1a421bd92234fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:43:fc:a5:62:e6:1d:33:7e:5b:a2:ae:47:
08:38:c0:02:d2:cf:fc:76:87:85:7d:26:16:69:46:
cf:f1:99:da:72:d8:28:5e:11:3d:96:c5:59:59:39:
70:09:d1:e6:85:17:ac:18:5c:f5:b6:08:38:ab:6c:
a3:fa:71:83:9f:97:df:20:19:d8:13:ce:e0:14:31:
46:3e:f7:88:05:f4:bd:8f:95:a6:ee:d0:10:07:ec:
4c:76:7f:8b:d0:b9:6d:0d:4e:d0:0a:7f:4f:64:b9:
f0:39:5f:ec:6a:46:bd:44:c7:e8:d9:6f:60:19:a8:
d6:f2:d1:df:d2:4d:52:fa:98:52:7e:7d:a7:aa:72:
80:ff:48:7b:da:c0:56:23:ae:6c:5d:e8:a1:03:c7:
29:a6:9d:d0:33:cf:64:ca:f1:ee:12:36:a6:42:72:
30:a8:f6:87:64:f5:5e:f8:80:ae:0d:8c:4e:3e:5f:
cf:ec:db:ff:ca:20:5c:91:ce:14:90:ed:81:70:cf:
a7:cf:7c:17:32:4b:46:67:2e:f1:44:37:97:69:19:
86:5c:29:06:c3:2e:d3:9a:1c:08:b5:3d:8e:38:9c:
82:5f:99:48:9d:7f:09:ef:97:22:80:d4:b9:0d:1f:
cb:45:81:72:a3:49:6c:f3:41:29:a0:00:09:51:6d:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:04:64:2C:B0:57:A2:6E:56:DB:9D:4C:1A:42:1B:D9:22:34:FC
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4f:57:b3:4e:72:97:dc:15:16:4d:74:98:62:08:ee:31:9e:
c5:ed:32:41:92:f1:87:65:5c:b6:c7:26:d6:da:c0:7a:5b:03:
e4:b3:c8:82:3a:53:6c:a8:53:cb:b6:b7:7f:7d:8e:c5:bf:a7:
41:56:06:e4:56:f8:06:80:e0:67:8c:51:c1:5a:84:be:6c:27:
10:2a:97:b5:64:59:8e:d4:ea:c2:01:73:58:ab:96:55:9d:d2:
6d:61:87:04:91:f9:c8:e3:25:cf:7e:35:53:26:65:21:5b:76:
c3:75:02:82:5b:a1:1a:11:e3:c0:a9:17:c3:5f:98:42:84:30:
c2:e1:ce:07:ec:13:f8:c5:76:32:64:61:5e:32:0b:46:5b:43:
07:5e:cb:45:01:7a:1b:64:75:e3:61:90:c9:8d:33:ca:01:95:
ba:61:0c:2e:06:ec:04:8f:ad:ce:99:51:bf:3f:b2:ab:46:07:
b2:94:89:f1:c0:93:68:0b:d4:1c:ed:b2:b5:ff:c0:e5:1f:da:
26:7e:16:e2:99:1a:c0:26:9b:f9:69:fb:8e:bc:9e:6c:e4:8a:
13:b1:52:4a:7b:b0:ac:fc:5f:7d:e1:f8:43:23:55:cc:f3:49:
33:2d:9e:b4:c6:e6:29:11:e0:b8:59:d6:e8:6e:4b:36:33:e4:
ba:6e:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:27:32 2026 by rpki-client