Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: oqUdadfOi02viMf3m2ydZ++gDrP+uUcJrdDnDwjjra8=
Subject key identifier: D5:6C:07:65:A5:C8:D3:EC:FD:03:FB:3F:3A:B2:B7:5B:83:10:F0:51
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019EC1B664E4E1D2F042810D614ECDA36C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 13E5
Signing time: Sat 13 Jun 2026 16:00:16 +0000
Manifest this update: Sat 13 Jun 2026 16:00:16 +0000
Manifest next update: Sun 14 Jun 2026 16:00:16 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: EhMAekl1yZ7WQdJ3uZ7GYXgFG4FEI9pOq/U0QnrzD+Q=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:64:e4:e1:d2:f0:42:81:0d:61:4e:cd:a3:6c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jun 13 16:00:16 2026 GMT
Not After : Jun 14 16:00:16 2026 GMT
Subject: CN=d56c0765a5c8d3ecfd03fb3f3ab2b75b8310f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b3:ce:4b:4d:9d:a5:9b:9d:be:ce:7e:f9:f0:
f8:e4:df:4a:26:dc:9f:04:c3:8f:c3:82:27:2e:83:
1d:98:99:e4:81:5a:3c:f7:30:66:11:9a:57:e8:78:
56:ba:86:89:3a:15:95:bb:44:af:3f:da:d4:21:16:
c1:03:f8:25:91:94:a8:7c:0d:f5:10:96:d1:a6:4a:
f5:ef:fc:ae:d8:1b:0f:d9:b3:78:4b:1f:65:32:a6:
76:b2:fe:30:15:c9:7e:f0:ce:e2:3c:f0:63:11:c6:
18:e0:f4:d4:c3:79:36:54:13:c8:03:50:a3:72:b9:
c5:25:bf:70:24:f8:7c:c6:0e:c1:99:02:97:d2:9d:
38:a9:8a:22:1c:4e:ec:50:16:90:77:c1:65:e7:eb:
cc:88:1c:6d:8b:c1:7a:d7:13:a9:58:b9:d4:2b:ad:
51:84:6f:3e:b9:98:3c:b4:1b:45:a6:c6:21:a7:03:
8a:97:88:cc:b9:1d:90:73:12:7a:f8:84:10:a4:1d:
85:04:3e:b1:63:54:75:7e:37:31:83:03:eb:13:d5:
35:b3:2e:c6:2c:eb:2a:c5:37:f3:20:88:fd:f7:5a:
55:3b:b0:b5:71:4e:bc:81:9c:b5:a4:a9:32:2c:a0:
b3:bd:58:d1:e4:79:64:30:83:f0:84:ae:ee:88:15:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:07:65:A5:C8:D3:EC:FD:03:FB:3F:3A:B2:B7:5B:83:10:F0:51
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:bd:60:39:14:e3:f4:fe:0c:5f:d9:c5:d2:59:85:2a:1f:
f8:af:8e:ae:3d:e2:4e:26:3a:1a:35:42:52:3c:13:6b:e2:99:
83:93:29:21:97:9e:fa:03:cc:05:13:8b:2a:2e:95:15:08:fc:
1e:64:3f:e5:fd:68:e5:5f:c5:3d:26:62:b7:d6:bb:03:0e:2d:
ed:b5:1d:5e:a2:72:e8:b8:8c:7c:74:66:a9:fa:5c:29:75:41:
5c:81:8c:8d:73:7d:72:8b:5b:f3:a3:27:58:24:78:9e:2f:fe:
bc:95:51:6e:48:18:3b:a5:61:c9:e9:bf:51:12:d1:e1:12:b7:
9e:27:c2:8a:86:77:ee:40:c5:3a:50:d1:63:ad:8b:09:e3:1c:
fd:38:3c:4e:30:ea:0c:d8:6f:94:dd:33:ac:52:eb:60:20:c1:
30:29:40:38:01:8d:84:04:fe:f0:cd:74:95:28:bf:8b:00:9a:
ca:78:64:11:75:80:85:2e:9a:84:55:03:49:36:a0:1e:5f:df:
e5:65:4c:96:71:86:e2:4e:18:bb:18:92:02:3f:ad:5d:bb:24:
03:a0:45:4a:16:1e:fa:8f:68:bb:a9:5f:22:da:fa:27:41:71:
05:f4:94:94:b9:b1:26:cc:42:ef:e1:3f:04:f5:8a:c5:68:fc:
15:c7:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:34:38 2026 by rpki-client