Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
File: AemEvojKuDCuuB0O2HaPQzE11Zo.mft (raw, json)
Hash identifier: UjZNWzGF/RJoQg/N+MBjJvar/MIdWsnPoEfyjYR/yX8=
Subject key identifier: F5:2B:EA:A2:7B:DD:57:C4:65:B3:FD:F3:10:FF:0B:97:5A:D0:9D:02
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 019FA89A69BC32E9457C6DEF30C5EBA8295E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:59 +0000
Manifest this update: Tue 28 Jul 2026 12:01:59 +0000
Manifest next update: Wed 29 Jul 2026 12:01:59 +0000
Files and hashes: 1: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (hash: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=)
2: AemEvojKuDCuuB0O2HaPQzE11Zo.crl (hash: IsLV1bQgqeF+81DvJJQlkj5SrSBi1yMamzBT+ih40Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:69:bc:32:e9:45:7c:6d:ef:30:c5:eb:a8:29:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Jul 28 12:01:59 2026 GMT
Not After : Jul 29 12:01:59 2026 GMT
Subject: CN=f52beaa27bdd57c465b3fdf310ff0b975ad09d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:ba:cb:cf:0d:2a:75:45:d1:9d:e4:98:6c:
56:06:40:9e:67:c9:bf:a9:40:93:e6:f5:38:42:4b:
e1:bd:aa:0b:f8:5c:d5:a4:91:19:31:3c:60:36:37:
76:c1:9c:bf:50:1f:0d:47:d5:43:fc:81:6d:bb:c2:
f5:92:e0:5e:e6:49:91:81:fe:3c:a2:1a:88:1e:99:
54:57:63:a2:a0:b4:e5:bd:73:83:ef:88:36:96:d3:
27:80:aa:42:a6:93:62:64:c5:33:bd:33:6f:f0:ec:
68:30:49:4f:a0:c2:fd:5c:a7:2b:67:37:18:95:e7:
9e:b2:b8:50:9a:30:dc:6c:43:04:8d:ee:f7:cc:e7:
01:59:7e:a7:5a:99:58:d0:f8:21:c9:c0:e2:a5:f8:
9d:15:69:9b:ba:31:8a:2f:89:15:8a:db:05:48:27:
3c:39:80:73:0b:17:e2:08:09:57:59:9f:1a:34:64:
6e:16:53:07:ec:76:95:aa:a7:dd:d4:df:c2:7c:f6:
46:de:a1:f8:b6:2f:19:7e:1a:56:c2:7a:b8:31:d0:
bb:28:4e:c1:0d:5d:e5:80:27:3f:36:66:07:16:5b:
0d:22:53:b9:5b:94:bc:99:1f:57:f2:4a:dc:f5:d8:
a1:e4:5d:26:89:83:62:b9:a4:b5:b2:b3:6d:3a:c6:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:EA:A2:7B:DD:57:C4:65:B3:FD:F3:10:FF:0B:97:5A:D0:9D:02
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:09:85:94:42:e9:a9:6b:f9:a2:4c:00:33:b9:7b:8e:10:
5f:64:5a:ff:6e:cf:32:85:f4:e1:98:f2:01:6f:9b:32:53:82:
ab:b7:05:32:fa:41:df:0b:fa:1b:54:76:f3:2e:71:3a:91:e8:
94:4c:69:81:c3:a3:55:b9:8b:41:69:91:00:2f:aa:98:68:23:
8e:b7:11:a3:1f:93:07:8c:f0:48:2c:98:2d:1f:28:be:da:b2:
5d:99:76:4d:b1:29:18:1e:e3:90:1e:48:d0:94:96:2c:5b:6f:
29:6d:31:62:ab:17:7b:24:fe:8a:21:14:b7:d3:89:ca:4a:d6:
8f:c8:64:95:0f:5e:58:97:53:1c:14:d6:24:40:d3:11:60:31:
fa:82:c8:d9:be:96:59:60:e1:d6:e7:97:ca:a0:0f:5f:d8:4c:
5a:fe:e2:c2:c0:38:0b:69:e2:f1:43:52:bf:01:86:e4:ea:8e:
66:fb:7f:0c:a3:03:12:65:13:5d:6d:c9:2d:99:1e:6f:2b:2b:
21:71:44:71:8b:67:d5:21:6a:2c:b6:46:d9:40:69:dc:e0:9b:
90:2e:da:84:f7:d5:a0:77:0a:e6:51:5e:fb:0d:b8:f7:d6:20:
cf:99:26:b3:6f:bf:f7:84:11:4b:b9:fe:6d:e8:07:92:ef:cc:
d1:28:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:09 2026 by rpki-client