
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
File: AIVd2JclbobaPL5plOlM4ulpryY.mft (raw, json)
Hash identifier: lTnM5CR0OOHVaMiNL/CSjxnCIcHeHD/lQrNQyJ3FlqQ=
Subject key identifier: 23:1C:8A:0C:41:95:98:8E:D5:AA:5A:B7:5A:87:3B:4C:26:4F:2D:D1
Authority key identifier: 00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
Certificate issuer: /CN=00855dd897256e86da3cbe6994e94ce2e969af26
Certificate serial: 019EBEED3C6CA3D6D3E8CF6CC4B6D906ACFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 03:01:18 +0000
Manifest this update: Sat 13 Jun 2026 03:01:18 +0000
Manifest next update: Sun 14 Jun 2026 03:01:18 +0000
Files and hashes: 1: AIVd2JclbobaPL5plOlM4ulpryY.crl (hash: 4qZv/+dG5ckZk1C7Xl2IwObJZ90SzrwuWvjQBKN3nQw=)
2: _ERGoNtkfCnC57fEn319xuy5MH0.roa (hash: Wq3TColJj1+ZOwaQJ2+Hu8QnMsklYvCOvDExQBnwEXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:3c:6c:a3:d6:d3:e8:cf:6c:c4:b6:d9:06:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00855dd897256e86da3cbe6994e94ce2e969af26
Validity
Not Before: Jun 13 03:01:18 2026 GMT
Not After : Jun 14 03:01:18 2026 GMT
Subject: CN=231c8a0c4195988ed5aa5ab75a873b4c264f2dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:de:ab:99:79:e7:7c:24:ec:d7:7a:49:ab:19:
a8:c7:47:b0:36:96:78:c0:09:29:5e:75:81:1c:6d:
ee:4c:11:4d:1b:09:5c:50:24:ab:8f:d7:52:86:ac:
89:0b:df:d0:07:c2:54:c1:20:1e:18:c5:ce:8e:2b:
85:88:74:98:a8:82:14:10:6a:31:05:3c:6b:83:1f:
c3:8e:cc:ba:e9:80:92:6f:ee:fd:42:3a:6f:31:4b:
75:14:d8:0c:e6:62:86:2e:e1:14:67:a2:b5:98:4c:
09:41:20:e6:d5:23:02:b0:2d:81:cd:a3:d3:bf:b3:
93:2c:63:e3:ad:e5:0e:64:e7:8c:7f:57:a8:ea:b4:
da:9e:e0:b6:da:ca:a1:22:67:a2:ff:a3:57:0b:16:
68:bb:86:f5:31:5d:49:a3:f4:f7:7b:59:5f:bd:98:
0e:b3:78:c3:ed:25:18:86:29:fc:2f:69:0a:9c:d4:
49:66:e9:72:bb:64:8b:9e:a8:a5:9f:e3:21:5b:3a:
66:4c:d9:c0:06:e4:21:ef:e7:89:c2:54:71:d4:49:
f1:37:7c:28:e5:68:f0:c3:95:bd:a4:cb:55:a2:fe:
6d:e5:fe:73:55:90:ae:3a:66:93:7d:fd:e9:9c:83:
51:c6:d3:1d:4a:d9:90:e0:94:d1:fe:74:bc:cd:48:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1C:8A:0C:41:95:98:8E:D5:AA:5A:B7:5A:87:3B:4C:26:4F:2D:D1
X509v3 Authority Key Identifier:
keyid:00:85:5D:D8:97:25:6E:86:DA:3C:BE:69:94:E9:4C:E2:E9:69:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIVd2JclbobaPL5plOlM4ulpryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9fc395-98bc-4aed-939e-886f66bb6ee8/1/AIVd2JclbobaPL5plOlM4ulpryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:0b:74:21:a8:d6:f0:d2:f1:4e:63:c9:92:4f:c8:5c:af:
77:27:f0:de:a9:91:53:ab:0a:ac:0f:95:3f:e0:7a:84:7b:75:
4d:76:39:ac:28:06:be:61:d9:c8:f0:73:4e:d5:24:e0:6a:26:
b6:84:3b:55:e9:8d:8d:32:00:ab:e0:dd:0f:bc:59:f8:ad:74:
7d:ed:70:60:a8:b9:24:66:5b:0d:1c:e0:e5:22:d8:8e:78:c8:
41:bc:20:47:ca:0e:4c:f1:a4:69:56:ee:bb:95:82:c6:65:e2:
79:2d:24:92:b6:ba:33:47:74:61:11:4a:b7:41:3f:53:25:2b:
82:4b:4a:02:dd:26:b3:aa:44:b8:cc:84:36:46:db:04:b0:6e:
48:6f:2c:15:60:60:61:af:cd:3b:4a:a0:ce:8c:13:cc:27:e0:
07:37:6f:eb:1e:26:5f:2c:4c:51:2d:0a:bb:1f:26:4a:fb:09:
7b:46:d6:b5:53:69:14:49:33:fb:97:66:e2:83:ac:b5:14:6e:
0d:8c:1d:c7:a2:42:fe:65:56:fe:71:77:3c:97:c6:51:5e:73:
a8:83:1b:05:d6:c3:f2:80:35:ef:fb:a6:f3:cb:a4:0d:33:78:
80:df:a6:81:36:cb:74:28:bf:ba:34:a4:a2:be:17:5e:1b:68:
08:23:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:41 2026 by rpki-client