Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: /B3TMqnvlCEGOFvZ/sNi/r1+DrwUE0uTd8wN+00jbyQ=
Subject key identifier: BB:54:42:9B:34:1A:A7:3B:1C:4F:85:5F:33:B7:B0:F0:D9:32:03:80
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 019EC224DE679967EA3F6389A0C6BE21F4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 7D
Signing time: Sat 13 Jun 2026 18:00:56 +0000
Manifest this update: Sat 13 Jun 2026 18:00:56 +0000
Manifest next update: Sun 14 Jun 2026 18:00:56 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: AQQiHqxDHtpyrWp5gZGDQqJpQZDzvfS+piKOBucHcaA=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:de:67:99:67:ea:3f:63:89:a0:c6:be:21:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: Jun 13 18:00:56 2026 GMT
Not After : Jun 14 18:00:56 2026 GMT
Subject: CN=bb54429b341aa73b1c4f855f33b7b0f0d9320380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:18:32:8e:8d:c1:61:73:a4:90:ce:1a:9e:
fb:69:8b:31:af:f4:89:e1:93:97:37:7d:28:e4:e0:
1f:fe:dc:47:81:53:f6:92:cd:55:b1:e5:9e:cd:fa:
d2:12:37:28:d9:53:47:e3:51:ff:b1:95:ab:a6:19:
48:01:2c:8d:18:7a:78:c5:36:7f:a3:b6:6c:2f:74:
a9:c8:cf:52:69:ec:c3:ba:5d:eb:ab:21:ec:be:ce:
c0:5d:78:09:83:7e:1b:b8:c3:c2:f7:c5:ba:02:9d:
87:f4:f4:f6:43:00:6b:1a:7b:df:41:81:ad:19:35:
4b:92:32:8c:ce:9a:a0:b3:88:3b:0c:9c:25:38:c5:
6d:36:f1:73:98:b1:6f:69:f3:fd:13:f5:fc:e0:0d:
d7:b5:b5:af:4e:37:a3:11:dc:1d:da:3b:e4:a2:c3:
fb:09:04:82:3d:85:21:11:0a:d3:ba:85:1f:47:5d:
54:43:d3:65:07:0d:67:e6:e4:11:88:ad:c6:db:f1:
9a:36:78:ec:22:79:fd:ee:8e:ad:44:7c:21:9a:f5:
85:8e:f7:d2:2a:d6:36:fb:83:9b:8a:3d:aa:63:f0:
16:89:12:a4:dc:27:0b:5b:76:60:f2:59:65:63:61:
fc:62:35:94:f9:97:7f:2a:4d:c0:21:1a:37:7d:0a:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:54:42:9B:34:1A:A7:3B:1C:4F:85:5F:33:B7:B0:F0:D9:32:03:80
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:19:ab:0d:c9:72:f2:85:85:69:eb:b0:14:af:b8:fb:de:56:
88:06:79:31:58:07:47:4b:35:b7:88:b5:4e:79:9c:ac:27:1e:
d4:cd:71:90:dc:68:f5:18:f5:75:59:24:bd:52:47:5a:47:a1:
06:b6:9e:dd:5f:26:60:ad:1e:5d:73:20:83:3c:0d:ba:a3:0b:
98:31:ca:da:49:8e:63:02:b1:13:d4:af:8e:ee:54:cb:5c:f7:
7a:a6:7c:1a:86:af:11:94:ce:98:9f:98:81:88:98:35:44:22:
a3:5c:9f:1f:08:ef:1f:05:54:72:dc:7a:9b:7a:34:e5:3d:82:
10:ad:c5:4a:be:02:e3:55:a5:01:fa:8a:f5:2a:ab:1c:2f:0d:
52:f1:2f:07:c6:4b:eb:2d:cc:7d:3e:f6:1d:d4:3c:96:47:d0:
d7:10:4a:dd:8f:c5:62:b1:0f:19:80:d8:9c:a6:d6:73:e1:f3:
26:96:e1:84:4f:b5:a0:9c:8d:9f:f1:eb:e5:cc:0d:07:f1:d8:
db:98:76:d9:f0:5d:3d:79:a6:8e:60:38:eb:30:f6:15:60:ee:
e6:db:6b:53:51:7d:82:de:e5:a0:5c:71:58:9c:58:5d:3a:83:
a4:e6:41:de:c7:5e:6e:fd:19:63:ab:99:7f:1a:a8:4d:8d:e8:
fa:c3:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:47 2026 by rpki-client