
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File: aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier: Ebyg0Y1riSL5PuqHludvjlAXyPE+ihmaKH6Pv7LWLAI=
Subject key identifier: DC:1D:61:EA:73:BF:38:84:1E:F6:C1:35:06:08:32:9E:EC:8B:9A:E0
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 019FAD88B8914D64BC40438B82CB7B51FB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number: 0E87
Signing time: Wed 29 Jul 2026 11:00:46 +0000
Manifest this update: Wed 29 Jul 2026 11:00:46 +0000
Manifest next update: Thu 30 Jul 2026 11:00:46 +0000
Files and hashes: 1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: syk25NtV0SgPC08zQhgsfyxIm3UlI1WvMxAw66jya88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:b8:91:4d:64:bc:40:43:8b:82:cb:7b:51:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Jul 29 11:00:46 2026 GMT
Not After : Jul 30 11:00:46 2026 GMT
Subject: CN=dc1d61ea73bf38841ef6c1350608329eec8b9ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:5b:10:1c:cb:2e:d2:2b:0b:22:54:e4:5c:
ea:ed:47:c9:4b:9e:ff:16:4f:19:5a:79:6d:32:e9:
f2:2b:52:ff:80:c6:e5:ec:25:c0:0e:e6:dd:3f:5f:
a4:35:08:58:b9:98:d6:e8:e2:0b:44:91:de:87:4a:
d3:d9:23:da:b4:4d:14:f1:f5:af:93:ec:dd:b9:c1:
e9:f6:bc:52:e8:35:9d:c8:91:7b:99:2b:12:e7:3e:
06:a4:75:5a:01:6b:a5:57:80:88:28:9c:8b:49:70:
70:47:42:33:ad:e0:7c:0b:32:89:49:c8:d2:4e:b7:
c6:41:c4:92:ba:af:59:b6:b1:65:58:b6:f9:95:c6:
03:46:c5:d8:0d:8d:a7:9f:5c:63:d3:b2:df:62:4f:
61:f9:f4:e8:48:a1:49:64:00:58:ee:9a:fb:25:4c:
94:10:c2:32:4d:ce:c9:e6:54:42:e9:e8:db:9b:39:
94:f9:eb:89:b0:fa:ff:ba:ba:83:43:f2:b4:e3:1f:
28:9c:f3:c6:4c:ed:c1:e1:c9:bf:70:8d:ba:86:d5:
7f:90:5f:59:a4:64:c1:7a:f7:93:98:ca:ac:a4:e8:
49:9e:5c:69:81:3e:5e:56:ca:89:4f:43:5c:56:a1:
e5:3b:fa:c1:3f:35:88:c0:c3:d1:35:ef:fb:a8:d4:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:61:EA:73:BF:38:84:1E:F6:C1:35:06:08:32:9E:EC:8B:9A:E0
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:43:b2:a4:00:5c:ae:62:a3:51:de:7d:78:4d:ea:c1:60:3a:
e1:3f:0e:25:33:24:00:3e:7e:a2:61:01:8e:e8:1e:09:fc:2b:
e6:93:64:14:10:0a:6e:9f:6a:90:c7:3e:14:49:a8:a7:8e:2a:
f2:99:67:53:e5:dc:2c:d3:98:c7:fd:7c:d9:46:ef:0e:a3:a9:
3e:f0:76:17:d4:19:66:05:69:b2:31:c2:55:ae:89:44:b1:28:
c3:2d:ed:52:49:10:de:30:3f:73:a4:14:54:7a:18:7b:a0:20:
f1:19:28:41:4b:67:89:ae:24:aa:0b:9e:31:03:de:16:13:3d:
36:f2:c5:71:0d:ab:79:a1:4a:75:62:8c:1b:54:45:a3:59:a2:
8e:5e:2e:51:28:67:42:9f:e2:f4:28:e8:a8:ab:2c:0a:33:88:
6c:c9:b7:c2:d6:04:0a:9a:a5:56:85:df:39:cf:76:81:a0:3e:
ac:79:8d:a3:90:30:fe:ed:c8:ef:d0:af:2a:4c:02:25:d6:dd:
d0:28:25:dd:c2:67:b9:97:d6:1a:16:89:62:65:f9:10:3e:3e:
df:0b:5b:58:60:09:ec:30:21:40:f9:51:2b:a6:25:30:4c:7a:
48:41:60:c8:c9:62:c7:80:8a:40:34:e1:f1:7a:34:23:17:14:
c6:2e:8b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:04 2026 by rpki-client