Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: 3PH800J2JWi61lOaA/n+nXbbX1BMSt2bEjxiWPAENlc=
Subject key identifier: 43:CB:89:60:4E:6A:A9:0E:CB:15:B4:82:43:8A:8D:DC:65:45:40:8A
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019EC06D46834E6857259AFBB2456EE91594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 03C2
Signing time: Sat 13 Jun 2026 10:00:47 +0000
Manifest this update: Sat 13 Jun 2026 10:00:47 +0000
Manifest next update: Sun 14 Jun 2026 10:00:47 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: x4NQYwrLS5m1cz5sawnouklyupFa0SWQ7uKwgUMADEM=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:46:83:4e:68:57:25:9a:fb:b2:45:6e:e9:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Jun 13 10:00:47 2026 GMT
Not After : Jun 14 10:00:47 2026 GMT
Subject: CN=43cb89604e6aa90ecb15b482438a8ddc6545408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7e:56:99:8b:e9:01:87:d4:01:64:fd:a5:ed:
e0:c6:0f:29:1d:4d:86:5f:31:4d:22:c1:c5:f0:64:
9e:5a:69:2c:c0:a6:24:63:42:c2:57:c3:fe:18:24:
c8:26:54:c6:96:fa:f3:22:f2:72:9d:06:f2:b5:84:
a9:6e:9c:9f:1f:94:6c:2c:02:4a:68:5e:38:c6:48:
b5:c4:8f:d7:2b:24:02:db:ba:c2:61:7e:7a:c3:4f:
c3:38:12:0b:48:25:4a:3c:41:68:e5:1b:df:9e:a1:
e8:99:3f:90:ce:1c:8d:65:21:11:6b:2f:21:92:7b:
60:eb:52:70:15:37:47:d5:bb:6f:a7:66:f0:7c:c8:
26:9f:b2:fc:53:bb:ff:d9:18:bc:01:d4:87:34:bc:
4d:0d:8d:1b:46:d8:eb:e2:82:f1:88:01:e6:3f:32:
ea:e9:3e:3a:5d:a3:0b:4f:37:9a:25:e8:46:63:6a:
d6:b4:3c:ad:5a:6f:e9:0c:10:e9:d3:1e:ff:19:35:
5f:a9:aa:8a:21:ea:be:06:3f:4a:f7:18:76:21:0c:
a9:22:3d:b2:1f:a7:9d:8b:58:c3:75:9f:59:d0:b1:
6d:e7:1f:69:34:df:04:07:9c:a4:0e:39:90:35:f5:
d5:e0:10:9c:46:0f:bd:77:01:8a:95:80:1c:a5:97:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:89:60:4E:6A:A9:0E:CB:15:B4:82:43:8A:8D:DC:65:45:40:8A
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:24:02:8a:88:a9:8c:6b:dc:98:73:9b:e2:31:8b:66:67:
af:08:9f:be:bb:8b:66:d5:6e:dd:07:e9:26:cc:c3:1c:cd:a2:
c0:bf:6d:78:a2:e1:e6:71:62:7e:b6:cd:39:df:69:27:e4:15:
88:d2:7a:29:7a:67:70:1f:4e:70:ef:e1:2e:17:bf:69:e2:38:
c5:c9:d0:7d:88:34:fc:00:02:89:1e:fa:bd:c8:75:70:11:b4:
3b:8e:d6:67:f5:c6:46:5b:6d:df:24:86:05:6c:1a:9f:ce:47:
7f:17:b6:ff:5c:da:3f:b3:a6:00:7a:e7:90:0d:ca:d5:68:cf:
4d:ba:c9:fc:d4:7a:e9:03:b9:50:1c:88:34:c6:0f:bc:e7:93:
fe:76:7c:2c:b6:bd:ce:3c:df:37:60:64:b5:5c:e3:c1:0a:fc:
14:1f:bc:7a:90:8c:fc:5f:95:75:9b:4a:af:59:ee:b8:a4:67:
1a:d6:a5:d0:81:a7:8e:96:c4:05:19:0d:57:f4:26:a2:f7:92:
9e:44:a2:17:84:f4:76:7e:ae:b9:07:b6:7c:ea:c9:46:20:b7:
5a:a5:58:49:fb:14:be:59:3a:a7:22:c8:52:7a:a9:39:e8:af:
56:fb:3a:e9:bd:c2:1a:8d:55:73:b6:cb:e4:02:d3:5d:6b:fe:
c0:8c:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:27:44 2026 by rpki-client