Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
File: AAeDpQgRvpLvroR8u1AXBoRHS8w.mft (raw, json)
Hash identifier: PiOHgz1WXHHhFbvKgWh32f8N1UQAoaQiAHa/Zh4L6iw=
Subject key identifier: B9:B0:77:25:3B:B2:01:93:E5:5B:DC:4A:E9:00:CD:C8:E3:A8:1E:62
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 019FAA87DB006038753AB6F758D4B1186A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:57 +0000
Manifest this update: Tue 28 Jul 2026 21:00:57 +0000
Manifest next update: Wed 29 Jul 2026 21:00:57 +0000
Files and hashes: 1: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (hash: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=)
2: AAeDpQgRvpLvroR8u1AXBoRHS8w.crl (hash: DNC4y0ytnJfjfqnddXvgwwLbsbKAcoD2/vcL0kAUnjU=)
3: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (hash: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:db:00:60:38:75:3a:b6:f7:58:d4:b1:18:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Jul 28 21:00:57 2026 GMT
Not After : Jul 29 21:00:57 2026 GMT
Subject: CN=b9b077253bb20193e55bdc4ae900cdc8e3a81e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:77:a9:d9:e9:c2:92:fc:43:37:aa:40:b1:
3c:2f:6e:6f:af:9e:bc:ce:6d:38:88:b8:10:1d:7d:
3d:59:5e:69:91:9e:c8:d0:3a:ea:a9:7f:af:62:b3:
49:13:d7:d2:8f:3e:08:7d:89:c5:96:ba:19:2b:98:
7a:01:38:42:3d:02:eb:bd:30:42:6d:91:0b:63:6c:
fb:95:a6:bc:b8:30:43:98:c3:f5:08:b2:16:3f:10:
55:e7:99:04:a7:90:0a:93:a8:08:be:83:b8:e5:6d:
8d:e8:61:ed:92:7b:0d:10:a3:e2:b2:cd:e1:e8:dd:
e4:d6:7d:7c:22:e1:9c:56:3a:6f:94:02:0f:a1:76:
63:f7:65:0f:33:8e:a8:ad:e9:04:d1:83:d3:ef:c5:
66:5d:55:aa:16:0c:3d:09:4e:e2:95:1f:ce:75:ed:
a2:97:01:57:9a:c8:15:7a:c0:f8:e9:00:87:66:4b:
14:8b:ba:c0:36:39:a9:af:15:e2:69:55:3c:8f:f8:
76:54:19:d0:d1:c8:61:60:cb:3b:cd:c7:6b:0f:46:
8c:ac:ea:eb:bc:5d:a1:b7:02:bf:95:c5:27:09:2a:
9f:98:db:d3:4d:e7:22:44:9d:92:2c:ad:8f:09:d1:
e2:2a:a2:a3:dc:f9:7c:e9:5a:03:5e:24:f1:25:d7:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:77:25:3B:B2:01:93:E5:5B:DC:4A:E9:00:CD:C8:E3:A8:1E:62
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:19:02:36:43:58:5a:b2:3a:1d:81:7d:ab:a5:ac:9e:92:ac:
45:c3:62:1b:22:78:2e:ce:ab:aa:3c:7d:2f:7c:fb:aa:0c:62:
74:01:ef:71:77:df:da:da:a6:55:37:80:94:96:3f:71:5e:7b:
97:3f:42:6b:53:6d:32:65:50:f0:e5:61:14:47:6f:a8:3f:95:
fd:ed:8b:4b:1a:b4:d0:3a:70:4e:e6:39:c5:98:1c:3c:21:6d:
b6:8f:4c:54:e5:24:0f:93:17:36:69:cc:5a:3d:53:44:40:eb:
c1:09:1e:46:ed:c4:36:61:32:3e:07:a7:1e:e9:b8:f8:70:01:
dc:ce:1c:9c:1e:04:b1:02:3f:50:bb:dc:8c:d9:37:83:c8:a3:
39:df:85:5e:6e:46:22:6e:2b:58:4c:bc:3b:ca:b7:3a:8e:6f:
c1:0d:39:38:87:06:23:3c:93:20:eb:6c:2d:c3:26:51:b3:7a:
2b:c9:4c:0b:ca:03:7c:83:92:8b:ac:f7:b6:4d:f6:f5:0b:60:
6d:f4:1c:23:40:5a:21:7f:62:f4:1a:32:b5:6c:59:46:52:af:
9c:8c:b1:b8:35:6c:83:04:4c:bf:83:04:3d:cf:14:34:4b:95:
91:da:f9:55:1d:88:2e:d1:30:22:7f:9b:90:3c:2b:d7:de:10:
28:2e:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:36 2026 by rpki-client