Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
File: aYVKV6sNijySLI9qeaqP6KaiwJ4.mft (raw, json)
Hash identifier: ru/2hSU2YU1lgiiWJXVXlhsL8h+TDZPJ3JrkGte3Isw=
Subject key identifier: 66:B4:06:EB:7A:1D:A5:BA:76:95:E1:DB:14:68:1E:E1:25:8A:73:4F
Authority key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
Certificate issuer: /CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Certificate serial: 019ED50784CB3F65396D9E460422A6D27924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
Manifest number: 13C7
Signing time: Wed 17 Jun 2026 10:01:40 +0000
Manifest this update: Wed 17 Jun 2026 10:01:40 +0000
Manifest next update: Thu 18 Jun 2026 10:01:40 +0000
Files and hashes: 1: aYVKV6sNijySLI9qeaqP6KaiwJ4.crl (hash: ajgm2p9SU2nhOjTH5P0DYqi2HuQSioZPfmVyF4meb/A=)
2: udJoXx6SrWMuMK6jZ122dieN47A.roa (hash: XPA3Wkk2p2nbhHbQxZ80mWOEn3OR3Bs5szWaHz85HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:84:cb:3f:65:39:6d:9e:46:04:22:a6:d2:79:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e
Validity
Not Before: Jun 17 10:01:40 2026 GMT
Not After : Jun 18 10:01:40 2026 GMT
Subject: CN=66b406eb7a1da5ba7695e1db14681ee1258a734f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:dc:f0:00:f8:05:bb:ad:a2:31:53:ce:d1:
d8:51:b4:f3:44:76:85:28:bc:ee:23:4f:f6:76:81:
30:2c:a0:97:46:f3:1a:39:6c:dd:7c:c8:a7:7d:62:
be:56:6f:f2:0f:71:c6:60:18:4a:dd:19:5e:ae:80:
0e:de:39:11:72:14:18:f6:80:fc:03:de:22:39:3b:
90:a8:36:c1:2f:b6:9d:69:47:76:cf:c2:aa:5e:3a:
fa:05:ae:65:06:a8:eb:65:40:b0:f0:02:4d:8c:a5:
d8:08:af:c1:12:57:7f:e4:95:76:0f:c4:a0:4e:65:
c3:5c:13:e4:03:89:7f:b5:90:f2:02:73:23:52:37:
b2:5c:f0:54:b3:33:c2:43:6c:96:3d:65:ff:ab:04:
05:23:f3:38:3b:8b:76:aa:21:27:32:66:6e:b4:14:
1f:a9:5b:22:13:74:4a:be:62:a7:34:81:68:0e:3c:
11:47:1f:02:4a:ce:d2:f1:34:fa:88:ae:53:8e:30:
af:33:c6:6c:7b:fc:bf:74:d5:98:d8:1f:b3:fb:e3:
53:65:57:0c:38:75:ea:d2:e3:02:8e:0d:76:d5:57:
0b:61:a8:60:d2:f3:cc:e1:ad:b5:ba:24:b1:b2:3c:
1d:93:c4:b7:bf:f2:54:b0:a9:67:09:76:b9:21:e9:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B4:06:EB:7A:1D:A5:BA:76:95:E1:DB:14:68:1E:E1:25:8A:73:4F
X509v3 Authority Key Identifier:
keyid:69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c3:b1:53:07:f6:44:22:a2:8e:c6:d9:03:a5:aa:d0:ed:84:
e8:fd:86:5d:f4:b8:a4:8c:30:0b:3e:15:ad:36:75:ae:a3:8f:
d2:62:b6:fb:7e:70:b0:d4:18:a1:32:5d:11:2b:2d:37:12:54:
36:1d:0e:3c:76:45:42:79:72:1d:25:91:69:1a:c5:04:34:87:
b2:ec:9f:c5:0a:30:41:1a:60:00:9a:37:82:47:00:70:ee:ad:
81:51:1f:a3:60:95:61:15:65:25:e8:b0:13:66:4a:98:7d:4e:
35:d4:85:b5:14:30:6e:58:be:1a:7c:67:6d:d3:47:2e:25:ae:
c4:1c:c3:03:df:ca:54:05:58:7c:7c:33:b0:6d:9d:6e:03:3f:
de:1c:f5:63:10:68:3e:53:1d:30:db:0f:ad:85:33:77:f9:a5:
49:3a:6f:db:88:24:fc:18:f7:71:ad:93:71:cc:89:d9:e5:00:
31:e9:04:d0:a3:2e:9a:83:93:96:31:03:92:a2:ff:2d:c4:ac:
00:f6:75:0e:51:7f:aa:55:f5:20:34:39:29:1a:5e:b2:15:70:
2b:82:b0:de:51:55:c7:97:45:51:a2:99:16:b7:ab:cb:59:e4:
48:f1:66:3b:fd:d1:73:89:81:14:ad:f8:5b:19:5c:f3:34:f5:
70:26:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:43:16 2026 by rpki-client