Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: H4nrGG3lxnEo9ZwuFmQulzRdW3P0bhkx5XopRMC1aq0=
Subject key identifier: F6:7A:95:03:5B:9D:3F:9A:43:90:81:75:9C:44:6B:2C:8D:7F:CD:4F
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 019FAAF5949E0D2E888BE7EE63084336B91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 1608
Signing time: Tue 28 Jul 2026 23:00:48 +0000
Manifest this update: Tue 28 Jul 2026 23:00:48 +0000
Manifest next update: Wed 29 Jul 2026 23:00:48 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: BaU8/dv/p15IOEGrVtogqOfkqkMb8D/S9IEbgY0RkoU=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:94:9e:0d:2e:88:8b:e7:ee:63:08:43:36:b9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Jul 28 23:00:48 2026 GMT
Not After : Jul 29 23:00:48 2026 GMT
Subject: CN=f67a95035b9d3f9a439081759c446b2c8d7fcd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:d3:6c:fa:1a:8d:8c:2d:b2:88:16:b5:a6:
11:ed:e8:61:9d:99:b0:e1:78:7c:fd:1e:69:6b:e3:
1a:97:4a:b6:24:a2:8d:43:97:7b:97:2e:6f:68:ef:
55:56:08:db:7b:7e:90:d0:ca:cd:90:96:87:d3:51:
20:96:bc:85:b0:f9:fb:94:7b:36:a7:06:d2:f6:7a:
c3:a0:eb:85:ce:15:85:cf:2e:57:30:7f:c4:4b:22:
bf:73:6e:57:d4:3a:df:aa:f9:cf:34:7a:17:cb:e0:
54:fc:1f:78:b2:1d:c0:aa:4f:ba:cc:69:0a:7f:fd:
89:27:4a:df:dd:56:b8:dd:88:f1:44:bd:6d:25:33:
20:67:08:48:23:a7:81:9a:2c:3d:76:6c:ce:c9:ea:
52:ef:7a:97:3a:00:89:85:01:7d:d6:d1:30:84:89:
7b:79:1e:52:e0:53:e6:ff:84:e4:77:2a:ff:e4:d5:
61:9a:84:0d:03:75:e2:c1:c8:c8:62:e7:03:9a:97:
62:55:0a:6c:2f:ec:dc:c9:ab:93:b5:90:16:1b:ac:
4b:5c:c5:0c:90:1a:b9:f5:3f:87:05:f6:34:ce:43:
7e:57:0f:19:83:a8:e4:4b:d0:05:81:56:8c:27:53:
fd:f7:f2:49:61:4c:d4:79:d9:87:8b:5d:ab:8b:10:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7A:95:03:5B:9D:3F:9A:43:90:81:75:9C:44:6B:2C:8D:7F:CD:4F
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:a8:ce:29:f4:52:aa:14:87:1e:92:69:8e:20:ce:f6:4d:
39:01:b4:c4:43:0a:ec:25:22:20:96:eb:a4:88:c7:5b:f0:74:
68:60:6e:fd:e4:cc:51:d7:23:89:06:ab:f7:70:aa:20:0d:1a:
74:01:6f:8a:d7:c4:e2:f5:d3:f7:03:19:8e:7f:32:67:6d:14:
40:91:e7:18:54:ab:db:cc:49:9a:50:d5:a1:d2:06:2a:a9:01:
18:93:d8:02:9d:e6:18:ea:18:46:a7:97:4e:db:4c:ce:40:ea:
8c:e0:33:be:f9:6c:19:0b:61:a1:bb:83:98:8e:86:79:69:02:
46:bf:7e:1e:24:88:e0:68:e3:f5:5a:1b:16:83:32:49:45:12:
a4:d0:c5:e4:f8:49:fc:dd:ac:94:eb:23:9d:16:2b:9f:dc:df:
6b:91:69:a1:7c:34:cd:23:7b:49:dc:fd:dd:8e:d5:17:eb:1d:
6a:1a:0e:2a:d7:ad:52:64:83:a4:0d:26:fb:d1:16:44:db:92:
49:a4:9b:58:f6:48:68:60:61:d0:29:17:4e:0d:e9:f2:9a:45:
69:ec:f8:f5:c2:a7:df:3c:04:6e:82:86:1f:5b:bf:cc:e5:9e:
87:cf:9e:f4:b7:a2:ae:3f:3e:4d:5f:98:7e:dd:86:c4:81:ef:
a6:7d:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:31:02 2026 by rpki-client