Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: uHaD4knMYYeR50OYUsJ65vm+Bn+FgNwXXTyeiyDuVfg=
Subject key identifier: 85:59:2E:8A:FA:B7:A7:1C:C1:EE:50:14:39:86:92:65:6F:90:EE:DA
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019EC25CB364DE5A34323DC4E45741DE9B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0AB9
Signing time: Sat 13 Jun 2026 19:01:55 +0000
Manifest this update: Sat 13 Jun 2026 19:01:55 +0000
Manifest next update: Sun 14 Jun 2026 19:01:55 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: w8PUwfSS4w8R8gyMatcZEBep8ZqP9ruHbgpH1dQ9K/E=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:b3:64:de:5a:34:32:3d:c4:e4:57:41:de:9b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jun 13 19:01:55 2026 GMT
Not After : Jun 14 19:01:55 2026 GMT
Subject: CN=85592e8afab7a71cc1ee5014398692656f90eeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:ba:22:0f:ab:0d:7a:81:d6:86:42:98:33:
90:58:01:1a:1a:49:a2:1d:e3:7b:17:7b:e7:b4:85:
69:ee:25:93:9b:7e:5a:68:54:e9:46:b3:96:ae:9c:
b4:e6:28:b9:38:e3:3c:65:81:c3:7f:d0:7e:e5:14:
dd:c6:c6:19:b5:a9:cd:03:72:3f:ab:d4:f2:08:28:
56:67:e5:75:b1:48:e5:30:3c:56:d3:9a:6e:d3:18:
6b:11:cb:60:30:cd:13:3f:10:94:65:ae:00:43:ec:
51:1a:7c:5b:83:08:20:3b:f1:66:2e:f9:f5:13:e9:
26:94:7a:69:f7:4f:68:26:81:6d:dd:b1:f4:b4:bc:
2c:78:35:6f:d9:ea:61:82:96:96:29:b9:61:c3:13:
8a:13:ce:d0:d8:0c:0b:a5:e9:e7:cb:30:14:ea:bb:
a6:bd:3d:38:3a:af:3b:ac:e0:41:7a:59:49:46:e1:
27:b1:6e:2a:f8:cb:ff:45:25:3d:0a:bd:a5:33:7e:
b3:93:9e:ba:ef:80:9d:6d:83:93:ac:ae:7c:a9:01:
50:d5:82:41:5f:54:bb:66:c8:c0:31:53:49:3f:e5:
52:60:6d:39:56:b6:3c:2f:e5:6d:7d:04:b1:a2:2c:
76:1b:1d:6b:4e:af:39:0c:3d:85:80:a1:f8:9b:ee:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:2E:8A:FA:B7:A7:1C:C1:EE:50:14:39:86:92:65:6F:90:EE:DA
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:77:35:46:a6:70:56:b6:73:74:2c:6f:79:39:44:20:d4:
9f:73:99:82:bf:b0:31:72:cc:ad:bc:76:63:24:a3:6c:a3:79:
2c:ea:14:0a:85:8d:27:0e:51:6e:47:e0:a7:e7:2c:79:73:aa:
7f:96:e4:df:c0:e2:44:d3:e8:92:1c:92:9f:c6:79:9b:18:4a:
15:2e:63:eb:b7:67:d1:8e:bc:69:fa:55:9d:77:c3:42:41:a0:
3d:4f:d4:19:1a:76:4f:a5:ce:ef:4f:69:ad:63:dc:76:1e:4c:
ca:52:a2:08:f5:9a:47:03:33:6b:2e:68:28:41:c8:62:15:5d:
16:3c:d1:5e:f0:d0:c6:c5:cf:6f:c0:e6:23:ab:25:83:e0:b4:
b9:63:72:45:ee:09:80:60:b4:27:ed:07:30:f5:85:14:62:0d:
78:77:03:8e:3a:cf:eb:0e:87:57:a3:4c:7e:a0:a0:bf:11:99:
13:0e:f3:2e:4b:c9:bf:26:d5:c5:e3:fc:38:09:99:ef:13:72:
4f:90:75:9f:13:ac:b4:22:32:6d:be:88:93:7c:7d:5a:51:d0:
9f:4a:0b:b6:ea:75:5a:ea:0f:8b:75:d5:1a:30:5e:4b:db:75:
7f:31:05:01:8c:d9:37:89:4f:92:cf:a0:e0:86:59:11:82:63:
1e:55:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:23 2026 by rpki-client