Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier: 6i8THALTSJGn1OCUGGU85WZW9ySTZsMnWBCQ9qUIvo4=
Subject key identifier: D1:20:20:7E:7D:33:9C:98:AD:40:30:8A:0F:B2:2B:C5:DA:7A:E9:AE
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer: /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial: 019F9EF103F956CA7215D949C4263410F8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 15:00:22 +0000
Manifest this update: Sun 26 Jul 2026 15:00:22 +0000
Manifest next update: Mon 27 Jul 2026 15:00:22 +0000
Files and hashes: 1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: x/WpXcv+JK5GERtKvwZJFuJpIDC7p6RdWko6JG4hMGk=)
2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:03:f9:56:ca:72:15:d9:49:c4:26:34:10:f8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
Validity
Not Before: Jul 26 15:00:22 2026 GMT
Not After : Jul 27 15:00:22 2026 GMT
Subject: CN=d120207e7d339c98ad40308a0fb22bc5da7ae9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:33:6a:89:4d:1b:e0:9f:c7:c9:84:78:4a:
0f:b0:da:fb:37:6d:07:be:c6:6e:7d:b7:b1:39:94:
f7:0f:f4:30:97:44:78:8c:2c:7a:d6:6b:b1:7a:4a:
ab:34:24:f8:f2:59:64:f7:f8:de:c6:7b:2e:20:ad:
ca:ff:16:fd:58:82:a7:00:7b:16:30:0b:b4:76:4d:
51:9c:45:fb:7f:8e:9d:2a:17:8a:7b:39:15:ad:4a:
7d:6b:26:95:4f:75:6d:c9:54:2f:b9:31:54:4d:d0:
a5:b0:50:21:71:8c:ad:3d:c2:f3:77:a4:25:41:37:
23:41:c2:71:6c:1c:ce:a8:5e:c2:c9:13:18:5a:26:
ae:d5:eb:08:58:74:a2:4d:6f:21:da:4e:16:a7:4f:
ff:d7:10:0a:0c:97:15:d6:a5:2a:8e:c8:09:0b:6a:
8e:00:29:d7:61:f2:3f:4b:7a:ab:8d:7b:6a:03:59:
fa:76:eb:bb:16:95:d6:41:3b:23:43:0a:a3:bc:fc:
27:9b:3f:bc:79:82:a9:a9:11:9f:91:46:84:5c:a9:
fc:69:d7:ad:a3:79:e9:42:2a:f6:45:6c:84:98:a1:
97:fb:09:89:95:64:f0:f2:5c:c6:b1:b1:b6:ce:25:
3b:e0:f6:51:fd:86:2a:a4:a5:9e:f0:9e:a8:23:c0:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:20:20:7E:7D:33:9C:98:AD:40:30:8A:0F:B2:2B:C5:DA:7A:E9:AE
X509v3 Authority Key Identifier:
keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:cd:6d:8f:49:22:e8:b5:ce:c3:de:c9:29:55:6e:2b:52:85:
56:a5:3d:6a:6d:d6:f0:8b:0f:b9:66:0b:5d:7f:37:b4:e7:4f:
30:dc:60:1e:88:83:87:20:e9:e3:8e:97:78:c4:a4:02:ee:e3:
27:74:eb:05:ca:4e:75:33:12:94:33:13:aa:12:cd:84:8e:8f:
0a:06:46:3a:49:a6:f1:fd:0a:8e:e6:35:fe:14:19:d2:cb:6b:
c2:4b:40:e3:3a:2d:f9:1e:2b:bd:92:de:f3:7e:69:8e:69:b7:
53:39:32:c4:0c:ca:3a:ba:e0:9b:d6:73:af:e3:1a:48:a8:53:
d3:69:9a:aa:06:85:93:b2:70:b4:5c:dc:94:00:13:fa:1e:9e:
a3:38:c0:f7:af:4e:08:26:7c:8f:24:53:0f:18:b1:f4:2c:f6:
ea:51:de:ec:55:bc:b2:4a:ac:4b:d1:26:f4:34:57:85:e5:4a:
7d:37:be:8b:bf:79:19:1f:cc:e2:f0:7a:b2:9e:db:62:ab:4f:
82:9c:9b:a8:10:91:61:13:c4:c3:3b:e1:03:32:04:d2:73:c5:
fb:a0:b2:52:67:d8:79:1c:3f:a3:08:66:03:bd:f3:30:80:c5:
fc:99:c0:ac:17:9c:8f:68:94:56:50:a0:9c:e8:a5:33:cb:7c:
74:fa:ec:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:37:23 2026 by rpki-client