Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: /euEMlUu0U4Yel+OXg9Cshz23RpiMVxBIedlGTMEVZ4=
Subject key identifier: C2:2E:12:DB:57:FD:B9:6C:A4:81:7C:3F:5C:26:98:16:72:99:63:D5
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019FA7F416AC4D6688B958DD0EE967895AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 129E
Signing time: Tue 28 Jul 2026 09:00:19 +0000
Manifest this update: Tue 28 Jul 2026 09:00:19 +0000
Manifest next update: Wed 29 Jul 2026 09:00:19 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: IdkjeR+oIAP6PTqlKn4PPc1DDd4mQg3hzrwT+tvVlHQ=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:f4:16:ac:4d:66:88:b9:58:dd:0e:e9:67:89:5a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Jul 28 09:00:19 2026 GMT
Not After : Jul 29 09:00:19 2026 GMT
Subject: CN=c22e12db57fdb96ca4817c3f5c269816729963d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:53:1f:45:04:a6:b9:78:b5:67:3b:99:52:
44:4c:97:15:7a:bd:22:4c:c4:f8:dd:fb:e9:83:22:
af:d3:8d:7a:00:31:c6:04:31:af:02:6b:10:41:f7:
1b:a7:3d:13:29:10:95:1a:82:09:a5:1c:74:07:a4:
5f:f1:03:5e:96:1d:c3:25:13:7f:eb:56:54:a0:0a:
b6:2f:c4:58:9f:e7:88:67:bd:0b:b4:50:27:51:a2:
20:24:7a:42:42:19:36:3a:f1:79:15:96:07:d6:9d:
a0:eb:6e:ba:7a:f6:73:97:58:22:32:a4:ee:1b:bc:
08:68:29:e5:11:ca:0f:6a:5d:dd:c2:ca:87:b0:1a:
a0:2e:37:b8:50:fd:7c:14:5b:00:5e:f4:e8:4e:4c:
52:9d:78:cb:fd:6e:dc:d0:a3:a0:46:20:84:d7:13:
dc:52:50:2e:f2:d8:96:5d:a1:e7:80:c5:ba:19:92:
4f:33:4d:70:ea:e4:be:48:36:94:93:df:0e:97:d1:
ce:b6:d7:ee:34:b6:f9:40:4d:2b:3e:d1:cc:83:47:
9b:77:4d:bd:31:75:24:be:66:d7:8d:61:15:81:65:
36:e1:57:bd:ea:8d:a9:82:db:2b:00:48:43:29:8e:
f7:1f:1f:a6:62:7c:ac:47:aa:70:53:b7:24:05:37:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:12:DB:57:FD:B9:6C:A4:81:7C:3F:5C:26:98:16:72:99:63:D5
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:aa:5d:51:5d:55:bb:1c:be:d4:e2:68:25:b1:48:82:3b:d9:
2c:0d:bd:27:0f:f5:36:8b:8e:01:28:18:e5:42:10:d9:f0:a7:
b3:f1:39:01:81:22:c5:35:d8:dd:6a:1a:b1:a6:d4:d3:05:97:
7d:c3:12:a4:04:b7:64:b2:b6:65:df:19:b4:fc:18:44:ab:90:
e6:f3:da:57:b1:75:77:58:fa:79:3b:63:46:18:f8:16:01:4e:
e8:4a:e8:85:c3:de:6d:77:a8:9a:e0:83:f9:cb:c8:9e:66:8d:
65:7f:2f:49:05:ea:80:46:ca:b1:d5:74:6e:37:8b:79:c3:9d:
6e:64:56:37:5c:9e:9d:14:f2:3a:99:94:4d:c4:ad:1a:64:e1:
47:b2:1e:ff:07:df:87:fa:21:c6:a4:ba:dc:15:31:e7:31:b9:
69:b1:f5:ae:d3:b7:a6:92:e4:16:41:f1:62:44:05:08:35:93:
99:c9:e6:9c:25:22:ef:2c:4e:ad:cf:9f:7a:3a:f4:a7:4d:41:
f9:64:0a:62:84:02:c9:36:95:09:31:f8:0d:54:90:18:5b:84:
b5:2d:5a:77:fc:cc:d3:53:3f:16:7c:57:7f:37:50:f5:c5:93:
f3:bd:9a:95:b3:7f:86:10:43:ec:70:97:dc:e8:85:17:1c:36:
cd:5c:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:44 2026 by rpki-client