Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft (raw, json)
Hash identifier: TwQFE2xP3VS6ik6jTPnltROtPW6Jz2nyG2T0NPspt5k=
Subject key identifier: FF:AD:F6:A5:CA:12:FC:82:EA:F2:A0:CE:D6:C0:17:76:48:B8:99:6D
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019EC111F30E45564A75E35E2BB5FB054913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
Manifest number: 05AE
Signing time: Sat 13 Jun 2026 13:00:39 +0000
Manifest this update: Sat 13 Jun 2026 13:00:39 +0000
Manifest next update: Sun 14 Jun 2026 13:00:39 +0000
Files and hashes: 1: KlLhZE4r7jQs2tah9cefbTTBHYU.roa (hash: woFwHVzKyIlIZhYvOX1GMLLWWWbcJn2gfytBqr6W8nI=)
2: UuJYJB8qqQVCGi-vt_wHrI42MfU.roa (hash: jzA4jxCzEMlyx7GLDIuObiY90eTPpxuRqUa3CtlcCok=)
3: aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl (hash: Kc+4GQjH8bGOpKQes1BzJ1JImWlmK2EWcxN7BdKjAKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:f3:0e:45:56:4a:75:e3:5e:2b:b5:fb:05:49:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jun 13 13:00:39 2026 GMT
Not After : Jun 14 13:00:39 2026 GMT
Subject: CN=ffadf6a5ca12fc82eaf2a0ced6c0177648b8996d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:d7:20:a1:f0:44:f0:74:2a:a2:12:0d:64:
c9:08:b5:a1:0c:1d:bc:50:f6:f0:fa:b5:f8:3e:53:
21:40:05:c6:8a:01:65:06:b4:f8:da:ba:65:48:ce:
2c:4b:5b:d6:4a:99:99:b4:a4:12:a4:32:92:e0:fa:
58:7c:ed:21:58:ce:bc:fe:f5:a3:f9:13:10:94:d0:
d3:e3:45:64:16:5a:86:16:41:da:09:e9:96:3c:3f:
17:4e:15:dd:10:6c:4c:25:3a:9c:47:ad:01:a5:d8:
3b:47:a0:b7:57:20:f0:7c:9b:d4:5b:be:9e:79:75:
38:bc:b6:a6:37:a7:8f:22:65:24:0a:78:bf:52:e2:
82:8f:0d:ba:e5:1e:f7:4a:59:6c:f9:0a:3e:b9:e0:
a4:cc:69:b4:9d:d3:51:a4:2b:51:28:21:61:01:07:
27:73:f9:7e:7a:96:e3:7d:e5:fd:50:55:a4:ba:63:
49:f4:47:5a:07:48:dd:d5:e8:d3:d1:79:cc:42:e1:
57:3d:f6:a7:e7:b6:ad:d3:6a:d0:fe:3e:ea:37:ce:
1a:7d:0d:81:9b:3a:e7:5b:1b:16:32:0f:b4:0a:69:
d6:15:3a:69:3b:99:04:3c:4c:35:d7:7e:be:fb:4c:
33:ad:dc:e0:f8:c2:d9:d0:74:41:a2:93:6b:56:99:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AD:F6:A5:CA:12:FC:82:EA:F2:A0:CE:D6:C0:17:76:48:B8:99:6D
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:68:1e:ee:b2:79:b8:17:7c:c9:45:de:23:aa:8e:1d:48:ae:
86:bd:aa:95:bf:e3:c7:8d:d6:c3:ce:3f:e4:be:83:e3:a3:06:
57:06:28:4b:07:ec:a3:c7:a0:c7:50:ee:66:eb:54:24:ff:49:
1a:68:8c:eb:79:75:99:ca:02:51:a1:76:32:53:6b:bf:b5:19:
ef:99:9c:50:37:21:21:2d:ac:fb:d4:8b:12:3b:5b:fd:ea:b7:
bf:5c:28:8c:18:43:12:53:26:f8:46:23:d2:f7:8f:00:3e:2f:
96:ef:89:cb:7d:c1:f3:4c:c2:c1:a9:1b:d4:63:79:a3:3d:39:
2c:d6:a4:19:50:d9:66:c7:79:4b:30:57:c2:35:73:42:64:69:
54:c3:cb:08:26:b9:19:fd:4c:b6:e4:61:1e:be:3c:24:38:3a:
53:04:f3:84:2b:e7:59:a5:33:d1:8a:c5:ef:c6:06:5e:38:16:
83:6b:83:b6:d5:e5:81:7a:ba:fd:61:23:ca:40:65:87:15:6c:
a2:3b:91:2c:5a:4b:d1:b4:d9:8b:b3:6f:d3:27:6e:33:80:9f:
0f:58:eb:df:cc:db:90:f8:7b:87:ed:ca:56:cb:52:71:24:4d:
1f:22:a2:61:50:c8:d8:38:f8:48:5d:34:fd:33:a9:37:67:4d:
7e:a8:b4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:49 2026 by rpki-client