Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: i/7dSUXtZp3WE5HidLl5PZmVZusF5xulrico/4vULgQ=
Subject key identifier: 4F:37:8E:CB:83:97:DA:4C:CC:1A:67:35:53:F9:17:98:7D:BE:B0:D0
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019E307237E2FC68D38B16F6AF2805FB29A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0C01
Signing time: Sat 16 May 2026 11:00:52 +0000
Manifest this update: Sat 16 May 2026 11:00:52 +0000
Manifest next update: Sun 17 May 2026 11:00:52 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: It5/uq2fAJ6tCFuQPsh6b4uydXq3lyQ3t6TUJF9PnWo=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:37:e2:fc:68:d3:8b:16:f6:af:28:05:fb:29:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: May 16 11:00:52 2026 GMT
Not After : May 17 11:00:52 2026 GMT
Subject: CN=4f378ecb8397da4ccc1a673553f917987dbeb0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:af:8e:c9:40:37:53:23:61:2c:83:3b:09:
e0:18:0a:bf:db:33:0f:82:59:c1:63:f3:36:e4:65:
7a:7c:6c:5a:96:80:0b:d1:e8:f5:db:f2:96:19:6d:
50:0e:cc:f5:13:f6:28:18:e4:b5:6f:14:c0:92:4c:
23:2e:66:6c:b0:4c:0f:7b:cd:35:7c:84:23:3e:e7:
e1:7b:d6:d3:dd:79:41:e2:d7:9d:cf:f8:39:55:f0:
3c:b3:fa:22:8b:7f:51:d9:1a:35:97:f2:4e:fe:0a:
31:51:53:fe:af:f1:11:b7:c0:b4:5e:8e:1c:46:d0:
f8:e0:04:5f:06:fe:48:46:1b:11:92:13:fc:51:80:
1f:fb:97:15:e7:ca:3f:3a:ce:a1:40:4e:49:34:c4:
af:e4:a7:ec:bb:bc:18:2d:ca:3e:f1:49:d3:cb:98:
8b:92:aa:1a:58:f8:24:bd:d0:69:9b:17:32:4c:2a:
6a:63:b8:26:d0:22:bb:53:5f:e7:a0:5d:9d:fc:34:
9c:2c:83:01:c6:eb:9d:68:ba:f7:41:f9:b1:d8:7f:
93:54:a7:e0:e9:2c:4e:71:97:cb:88:bc:0c:4e:cb:
17:d0:72:1f:d6:89:58:7f:0d:22:16:a4:2c:37:f2:
bf:7d:76:d4:7f:e9:b2:11:ab:92:dd:6d:0a:a5:96:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:8E:CB:83:97:DA:4C:CC:1A:67:35:53:F9:17:98:7D:BE:B0:D0
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5c:c1:b9:41:e3:0d:da:7d:65:18:16:4e:ea:7b:79:65:17:
c7:ec:2c:11:74:17:a9:25:7b:ad:7a:2a:56:0d:c1:e0:8d:70:
54:e6:26:9a:43:57:25:2d:b0:a5:8d:60:d9:c9:a6:19:e6:a8:
30:06:ed:85:81:24:58:4e:6f:8d:58:03:6b:95:f6:13:1f:09:
40:c5:5c:be:e1:4e:32:86:ac:cc:84:30:c1:55:12:35:4d:76:
20:9f:4d:cd:64:cd:b4:84:52:1d:49:e1:5f:3a:e8:d0:e0:74:
a7:e5:6e:db:00:1f:6e:dd:07:e7:1f:ae:28:9f:dd:67:32:83:
b3:9d:b5:84:ef:04:b2:ff:61:8c:64:23:2c:8b:01:6c:a3:a9:
56:7a:0a:df:ae:18:f2:a4:67:e5:86:2d:57:2f:99:e9:24:49:
10:7f:2c:5e:f9:c5:90:e0:db:2d:f4:23:e7:c9:05:fb:19:ed:
1b:6d:ae:2a:01:6b:b7:63:3b:26:17:04:13:c5:b3:d6:6c:95:
76:58:bb:62:81:8e:be:4a:0d:c1:12:b8:ae:e0:60:03:af:d3:
4d:da:6f:de:7f:4b:64:38:41:d7:47:c1:ca:a5:f5:7d:44:c4:
25:e6:70:69:11:73:ff:e2:a9:29:86:d6:f1:66:3c:a1:02:4a:
b6:f4:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:31 2026 by rpki-client