Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
File: aJwdYcDzPDCwC1yoChXR0lVsB0M.mft (raw, json)
Hash identifier: TnaZ0Zo0Q6UpgfdbSRh8zzwUHwtiKOfB3Sry6aPD9HE=
Subject key identifier: 94:61:F4:0B:55:3B:AE:0C:F8:5F:D4:13:0E:FF:75:50:67:31:14:67
Authority key identifier: 68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
Certificate issuer: /CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Certificate serial: 019EC0A3FBE1741B24270547D8683D1F45DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
Manifest number: 0238
Signing time: Sat 13 Jun 2026 11:00:32 +0000
Manifest this update: Sat 13 Jun 2026 11:00:32 +0000
Manifest next update: Sun 14 Jun 2026 11:00:32 +0000
Files and hashes: 1: _TtZJ5msDlGsiXnHSOsz0-Eiy9I.roa (hash: c2TwS42atkIHb7NKIN/wGgnVceX4RG+uR7le8c7mQSI=)
2: aJwdYcDzPDCwC1yoChXR0lVsB0M.crl (hash: 4o1S2evuVDFPHCL6lBy3lKnUK600LYKvFXdFUVH7t8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:fb:e1:74:1b:24:27:05:47:d8:68:3d:1f:45:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689c1d61c0f33c30b00b5ca80a15d1d2556c0743
Validity
Not Before: Jun 13 11:00:32 2026 GMT
Not After : Jun 14 11:00:32 2026 GMT
Subject: CN=9461f40b553bae0cf85fd4130eff755067311467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:98:b3:82:e6:90:87:42:f4:67:14:58:8f:
9d:77:33:d7:b2:67:fa:93:a3:bf:82:f4:2f:ed:82:
6c:a1:ef:14:68:84:6e:34:d7:b5:46:05:a8:0b:74:
d8:c6:f2:d0:75:55:b9:ce:58:3c:28:94:3e:50:c0:
57:d6:ed:b0:79:d7:19:02:a5:ae:04:22:22:c4:ec:
84:2b:1b:0a:35:8b:a5:87:a7:4d:7c:8b:6f:58:24:
ab:fd:9a:b0:1f:3b:3c:23:76:c3:0a:69:b2:b8:86:
33:2b:23:46:bd:14:60:d0:66:16:ea:99:50:8a:54:
0f:b9:98:0a:6f:c8:38:cc:41:54:4d:89:f8:0c:76:
2f:f6:63:96:56:99:e6:eb:d4:75:80:e5:af:86:65:
55:d9:6d:4f:b5:d4:f7:2d:ab:15:76:11:a6:35:74:
b3:5a:f1:c7:cd:d3:6a:74:c7:e3:45:66:26:da:35:
1c:7e:25:59:63:cf:1b:f9:a4:fc:24:cc:60:a2:fb:
5a:1a:76:e6:f6:f6:7e:64:e0:22:c7:1b:fe:82:7f:
ad:a0:7a:b2:67:dc:73:44:cb:fa:0a:9e:ce:22:bd:
ba:21:10:7f:a3:36:59:4c:a1:5e:12:36:cb:f5:3c:
b5:0a:f8:aa:6a:3f:4c:7d:6f:c3:f1:f2:35:b1:a7:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:F4:0B:55:3B:AE:0C:F8:5F:D4:13:0E:FF:75:50:67:31:14:67
X509v3 Authority Key Identifier:
keyid:68:9C:1D:61:C0:F3:3C:30:B0:0B:5C:A8:0A:15:D1:D2:55:6C:07:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJwdYcDzPDCwC1yoChXR0lVsB0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6e272d-add1-41ec-954b-220bc43cd246/1/aJwdYcDzPDCwC1yoChXR0lVsB0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:6e:6a:8b:ca:08:10:1b:91:ba:b5:2e:fa:d9:f4:04:8a:
f4:66:5b:4e:4c:ef:72:75:97:27:6f:c3:ff:3e:32:e4:bf:f5:
9a:90:08:d0:b8:97:6b:b7:2c:d3:89:a6:35:cc:e9:24:12:13:
fb:b2:61:56:cd:59:9c:9c:74:1e:b5:dc:4e:24:90:f9:e0:ea:
93:36:fd:68:b6:d8:53:23:78:29:2e:09:6e:d6:fe:da:6c:e6:
bc:95:d8:95:a5:8d:bd:7a:90:67:ce:9b:c8:b1:4b:ee:0e:18:
cc:db:74:20:34:f0:cf:72:8d:45:8e:a7:64:7d:22:03:aa:88:
95:a0:c5:9f:63:95:16:61:17:82:9e:7d:89:de:66:9a:18:63:
4e:29:20:98:15:39:e2:d0:5a:1d:5d:dc:1a:53:da:fa:a3:2a:
79:ca:cb:e0:7a:44:a1:1d:b1:d5:5f:f0:36:9f:ff:0d:2a:df:
34:b0:36:95:fd:62:27:f7:63:89:b4:33:4a:98:fe:54:90:4a:
d2:36:87:b9:9b:0b:98:a0:d6:a8:b9:aa:d6:5d:c0:48:09:61:
76:a2:0c:f9:be:2c:0a:ec:18:a7:41:23:24:29:93:0c:12:e5:
5d:fe:85:c6:5c:9e:1e:32:4c:71:ff:91:61:8c:e7:26:d4:e0:
fc:5e:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:18 2026 by rpki-client