Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
File: aaKML4THXo0DiGlDVRUt0rcx8kk.mft (raw, json)
Hash identifier: bSYWKSIZHkoVDqmGcHTND3tfbD698Ty39hiZRLynTfc=
Subject key identifier: 2C:CE:7C:D4:74:82:59:72:77:82:87:35:0F:22:81:EB:63:F6:7A:41
Authority key identifier: 69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
Certificate issuer: /CN=69a28c2f84c75e8d0388694355152dd2b731f249
Certificate serial: 019EC111F77DA893175E9C757C6F3EBA0938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 13:00:40 +0000
Manifest this update: Sat 13 Jun 2026 13:00:40 +0000
Manifest next update: Sun 14 Jun 2026 13:00:40 +0000
Files and hashes: 1: MB0uTApSO8m5vg_bm9trr3XpjgU.roa (hash: 2eNykuyF9+3yCGYPE8lH28bjQtkNd0f4qvsTFx03Ijs=)
2: aaKML4THXo0DiGlDVRUt0rcx8kk.crl (hash: /IpezengiEUW1/NfF06x7OxHMOmhmJl2fDSFOh9iZVE=)
3: xg2vmPZnFpWKOjIR5eQ7FMGT8aE.roa (hash: hPOQooNWczBMB25D+ekEfhNU7YNSFMQ+pTU+YyTaGew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:f7:7d:a8:93:17:5e:9c:75:7c:6f:3e:ba:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a28c2f84c75e8d0388694355152dd2b731f249
Validity
Not Before: Jun 13 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=2cce7cd474825972778287350f2281eb63f67a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:58:0a:79:b1:41:2b:9f:67:cd:ab:2e:3f:79:
00:2f:a0:40:e0:d8:63:72:02:a4:e5:f6:e2:77:41:
50:ec:ee:f1:a2:7d:96:c7:f0:f6:aa:92:52:e4:71:
b8:1b:46:53:68:80:35:7c:ba:41:ad:dc:8b:2c:a7:
94:c8:fe:48:c2:19:36:ed:12:72:22:0d:d5:8c:d9:
c8:47:09:a5:2e:cd:9d:f6:c9:0c:d9:12:53:fa:bd:
b2:e1:6a:5f:29:60:20:e2:9d:d6:52:73:78:11:2b:
48:7b:27:ab:13:b0:d3:05:99:cf:da:18:d2:3f:c4:
81:df:3c:4c:5b:a6:84:2c:d1:0d:36:91:a3:25:ac:
85:d3:57:e7:61:e0:23:af:73:2d:eb:87:16:fa:e7:
02:fe:69:5c:95:a1:1a:d2:1f:83:25:ee:29:ce:00:
b2:c6:6d:95:9e:b8:93:e6:a9:40:79:ac:76:0c:0b:
f3:08:c9:23:a7:ca:c7:1b:b1:fc:3b:61:d9:5d:ee:
63:6b:95:85:1e:98:9f:29:c0:00:7c:a9:76:eb:ac:
ca:ff:6d:c0:f5:a8:c5:22:05:5b:07:69:8e:68:72:
89:5a:5c:77:cc:b8:05:63:d4:59:22:56:c6:c0:e2:
ea:3a:d4:66:07:a7:26:93:81:3b:8c:a2:13:6e:87:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CE:7C:D4:74:82:59:72:77:82:87:35:0F:22:81:EB:63:F6:7A:41
X509v3 Authority Key Identifier:
keyid:69:A2:8C:2F:84:C7:5E:8D:03:88:69:43:55:15:2D:D2:B7:31:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaKML4THXo0DiGlDVRUt0rcx8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/89ff47-0b7b-4309-a8af-2cbd55f9a8ee/1/aaKML4THXo0DiGlDVRUt0rcx8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:a0:26:29:ef:c5:96:7d:65:5c:3b:29:81:58:ac:3b:30:
47:1a:2d:81:8e:23:6c:04:08:3c:2b:75:b2:64:bd:09:a6:17:
44:8d:da:24:9f:64:e2:e3:6a:a0:31:5e:c0:f8:7c:84:e2:41:
c7:fc:a3:46:15:41:d9:bd:ca:86:1d:91:77:ba:73:d2:d6:09:
db:bf:90:c9:c2:d6:f4:83:6e:6a:8d:2f:9a:f4:e6:a5:6f:3e:
a5:98:e4:65:fa:33:85:f2:db:8d:7b:b0:ea:65:ab:18:56:90:
ea:62:a1:07:5c:c9:25:09:1b:6c:1d:9f:e4:3f:e5:69:d3:b5:
5d:97:05:17:e9:56:09:a2:fa:0f:30:e9:71:e5:73:5b:6d:07:
7f:14:72:f9:c6:67:05:9c:83:63:55:27:94:df:87:0e:d3:4b:
46:ee:2f:2f:c1:30:6b:3a:e0:26:77:fd:a5:6e:46:41:8f:6f:
7c:40:83:14:6f:e2:d1:16:8b:77:1e:22:82:88:0a:f3:ea:e8:
e7:9b:39:4f:17:66:22:45:8d:e7:7d:22:eb:73:f3:b7:d8:99:
fa:96:7a:7b:ce:87:b1:47:08:1d:5c:1a:74:f8:68:38:66:12:
06:73:cb:31:af:54:28:cf:ab:65:68:92:f4:5a:78:28:56:72:
fa:0b:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:48 2026 by rpki-client