Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: pRzg3y8nhYl8meq8PItYERpH6x3HYdPsi8wQsUyzdXA=
Subject key identifier: 5B:26:3D:3E:90:B1:A8:36:AC:74:B6:2D:E1:38:E3:48:BD:09:FC:43
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 01A13F022BDCA26F27B85C9D6A2393E93117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 1011
Signing time: Thu 15 Oct 2026 10:01:09 +0000
Manifest this update: Thu 15 Oct 2026 10:01:09 +0000
Manifest next update: Fri 16 Oct 2026 10:01:09 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: lq1m6deuODXeh5AGTR7Dx416/j2XI8EbwvqAhkiQlAo=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:2b:dc:a2:6f:27:b8:5c:9d:6a:23:93:e9:31:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Oct 15 10:01:09 2026 GMT
Not After : Oct 16 10:01:09 2026 GMT
Subject: CN=5b263d3e90b1a836ac74b62de138e348bd09fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:33:67:34:d9:20:86:26:db:f5:5e:95:d2:
4a:4c:02:6c:40:6b:85:0e:4c:10:86:f4:83:fa:ea:
06:eb:f3:07:db:45:f3:82:3d:35:56:69:52:b0:15:
0b:cd:07:bb:c6:5d:cd:c0:ac:8a:86:e2:46:fb:65:
30:d3:93:e2:1e:82:29:af:33:c8:fe:29:fb:ae:11:
88:01:48:f8:59:f5:25:8b:01:43:c3:d6:39:4b:1d:
7f:1b:53:3d:57:78:68:c2:67:bc:fc:28:17:97:22:
7b:cb:72:fb:97:9a:3b:93:cc:2e:67:5f:f9:bd:86:
aa:80:93:47:c0:10:23:0a:cb:66:ad:69:bb:b7:9b:
a7:43:b8:11:50:cd:38:f6:c7:1d:83:35:f2:18:b6:
02:f3:b4:71:1a:83:52:a5:f3:57:c1:18:a9:7d:ec:
29:4e:a3:51:8b:15:ae:dd:e4:d1:f6:21:f6:9f:37:
87:89:cf:fa:9a:99:05:98:86:1d:6a:98:44:8f:0a:
08:78:25:1b:86:e7:58:43:e4:1f:c4:21:9f:e7:c7:
76:40:0a:71:88:91:fd:cb:77:5d:55:76:f7:55:dd:
3d:9e:e2:cd:32:ea:08:ef:8a:02:3f:47:7d:e7:1a:
b1:2d:81:22:89:06:e3:13:03:06:53:2b:96:c4:ce:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:26:3D:3E:90:B1:A8:36:AC:74:B6:2D:E1:38:E3:48:BD:09:FC:43
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a6:69:59:b9:e0:64:9a:1a:26:51:56:b2:33:48:c9:f3:ba:
38:2f:f8:e4:db:45:bd:2c:4d:8f:2a:ed:ac:03:4b:d8:fe:97:
b3:b6:33:5c:65:cb:7d:5f:a9:0a:60:5b:48:b5:d7:6d:76:d8:
d1:c7:ec:b8:b7:aa:cd:b6:fd:17:dd:ec:35:74:1a:04:64:74:
6d:ce:58:46:56:2e:41:24:ed:6e:8e:92:84:ba:b0:71:a9:8a:
4c:b5:48:dd:4c:d4:9d:49:e2:a0:ed:36:32:d3:92:93:2b:9b:
0f:6b:f4:59:c6:a3:57:d0:82:96:53:8e:c3:44:ea:a9:88:f6:
ec:e3:f0:43:82:0c:96:03:a9:60:ba:0a:77:dd:2c:48:17:08:
a4:18:79:55:39:3f:51:45:50:6f:d0:e8:6f:10:e5:3c:02:9d:
71:9a:11:24:46:8e:67:f6:a2:90:83:d3:92:4c:09:47:5f:e5:
66:c0:4c:74:28:75:67:55:26:09:b4:40:6b:6e:5f:a0:90:ba:
53:d1:25:37:82:b3:77:e3:42:3b:4e:2e:29:82:7b:b8:79:48:
a7:85:87:cc:3b:fd:68:c3:55:fe:c8:3e:f3:79:cc:b3:9d:7f:
da:c7:be:95:7b:a0:4b:eb:42:31:34:b9:29:df:ea:01:6f:46:
76:ab:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:38 2026 by rpki-client