Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: CcAIpZZL/jgaJaoQuT96GtVqcqpnUJ05wgiWNFY2yTY=
Subject key identifier: B1:4C:2E:BE:35:E4:25:C5:A5:7F:45:AF:9C:77:B5:EF:8F:37:23:56
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01A08F45619A47B6C850B9725B9F8C4C8EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 19DC
Signing time: Fri 11 Sep 2026 07:01:23 +0000
Manifest this update: Fri 11 Sep 2026 07:01:23 +0000
Manifest next update: Sat 12 Sep 2026 07:01:23 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: WoAVMvcG9EicJh7ZE50jeLSlw4jEXtUNrQsX9GynOTA=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:61:9a:47:b6:c8:50:b9:72:5b:9f:8c:4c:8e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Sep 11 07:01:23 2026 GMT
Not After : Sep 12 07:01:23 2026 GMT
Subject: CN=b14c2ebe35e425c5a57f45af9c77b5ef8f372356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:30:af:b0:d6:7c:08:be:9c:89:f9:35:f3:
96:51:5e:30:a6:91:47:9c:6f:91:ac:9d:94:a0:12:
a8:0f:d3:1d:25:14:ac:3b:39:05:60:a1:da:65:d8:
d0:c7:2a:5e:29:9d:e1:c4:7f:8f:c4:72:ba:d7:d5:
e7:7f:23:36:7f:c8:e1:1f:88:86:d7:28:3f:94:43:
bc:21:61:da:17:1c:60:dc:39:30:c2:f0:b6:26:0f:
81:52:3b:2d:03:df:c9:bc:b1:4d:bf:da:de:cc:39:
b1:79:ef:56:93:2c:e3:74:31:d3:b2:cf:36:f7:33:
05:22:8a:9c:a1:bf:2c:0b:5f:51:47:40:5c:1c:bd:
12:a4:ce:e8:55:7b:06:5f:3d:51:4b:d7:0d:89:17:
b2:83:3c:f6:e6:20:d6:eb:52:90:2e:66:c7:00:3f:
1d:ee:a6:5d:c9:48:1d:dc:01:b9:c9:e7:9a:24:4d:
41:1c:b6:3d:17:b0:18:47:56:1f:e8:9e:e0:b7:53:
e9:37:61:9d:cb:47:ea:e5:a9:aa:0b:2e:6f:b2:10:
da:b0:8d:76:ba:71:7d:f6:ba:96:2e:31:cf:a2:37:
5e:7b:19:f6:05:80:c5:e2:12:21:df:6e:d6:7a:ca:
22:8c:55:f0:5c:63:4a:bd:f3:23:a6:8c:33:32:60:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4C:2E:BE:35:E4:25:C5:A5:7F:45:AF:9C:77:B5:EF:8F:37:23:56
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:41:44:a7:8d:4f:fb:95:56:e5:4e:32:98:e9:94:25:26:5b:
d5:33:98:51:ce:05:ac:db:f0:12:83:85:82:3a:25:77:01:d5:
03:24:72:16:95:fb:7a:49:d3:2e:ce:ef:9e:ec:50:af:ff:55:
62:d5:68:f5:22:b0:60:a5:27:e1:2d:32:9d:9e:81:65:f7:8b:
e0:05:ee:97:00:1e:61:fb:3a:d9:2f:12:84:27:7c:a8:bd:f7:
ce:d4:87:fd:12:e8:54:8e:db:1e:09:6c:7e:f3:c0:5b:b1:82:
2c:9e:11:07:fb:6d:c5:9a:8f:f4:1b:22:6a:d7:1e:de:fd:3a:
a3:a2:29:72:f5:cb:50:6c:a5:ed:79:54:6d:00:32:49:4d:e4:
4f:dc:97:87:01:50:ca:b7:5c:d7:16:06:75:a8:10:2c:f0:a4:
d9:c3:45:e8:27:83:87:4a:60:ea:16:8d:ae:ba:e3:66:e1:37:
43:c8:eb:b5:60:29:ec:e9:7c:83:18:e0:ec:60:8d:54:0a:04:
8c:23:a2:d8:15:97:45:79:bb:7e:c8:65:30:89:f2:3a:ac:6c:
99:13:13:c9:63:25:f7:a5:76:34:99:71:7e:31:a4:3b:ea:74:
7b:87:59:02:fe:6d:75:82:e0:92:cd:30:ef:da:f0:10:1d:74:
93:c2:d6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:11 2026 by rpki-client