Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: UC1gccbXTyL1ll/dW6JL16hLjTcKRPQrkbMGOHeKN70=
Subject key identifier: 60:5B:59:72:28:C6:47:26:92:EF:89:0F:FC:E2:BE:C2:EF:1A:35:28
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 01A0CB229CB96845A7D545A2EDAC3877B80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1782
Signing time: Tue 22 Sep 2026 22:00:38 +0000
Manifest this update: Tue 22 Sep 2026 22:00:38 +0000
Manifest next update: Wed 23 Sep 2026 22:00:38 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: QaZ3b59HmUKYpudCcIVjPJH243StIkUixPVZ2boTR7U=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:9c:b9:68:45:a7:d5:45:a2:ed:ac:38:77:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Sep 22 22:00:38 2026 GMT
Not After : Sep 23 22:00:38 2026 GMT
Subject: CN=605b597228c6472692ef890ffce2bec2ef1a3528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:92:64:b1:99:a6:1f:60:45:80:80:15:db:
4f:9f:6b:69:e7:ba:96:01:61:d1:ff:d5:ba:c0:f9:
e4:40:e5:3e:61:46:c3:7e:16:f7:5d:be:b9:70:52:
35:dd:ac:0a:6d:92:0f:7e:7d:a8:6c:42:ef:fe:33:
ba:bb:02:f0:e6:b5:18:13:b6:d8:2f:68:ca:3c:38:
70:0b:9a:9b:63:61:e6:29:84:6f:a6:0c:bd:9d:36:
1d:19:4e:e2:3c:fa:51:18:89:50:bf:04:08:69:7d:
68:4d:ef:a6:06:9b:56:54:5f:a7:78:ed:3d:9f:0e:
08:03:52:1d:45:a1:16:2a:78:11:e0:69:63:e0:64:
7c:39:a5:06:b2:1b:6d:91:00:ac:ee:6c:2e:22:54:
9f:f6:24:94:56:fe:da:05:67:d2:06:10:39:9e:fe:
79:0f:c0:eb:fc:77:7d:01:c5:ea:ae:6b:ff:44:27:
4a:5e:cb:c8:6b:8f:fd:0d:dd:52:f1:4c:11:76:22:
03:81:b6:cc:03:8e:79:d3:18:cc:63:36:e4:21:ef:
1a:38:b3:e6:c2:ee:0c:c5:31:39:93:47:16:f4:31:
47:1b:7f:98:95:c3:d7:09:61:8a:45:9a:65:2e:00:
a0:0c:a3:7c:2c:3c:ea:97:ca:3a:63:26:11:8b:7a:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5B:59:72:28:C6:47:26:92:EF:89:0F:FC:E2:BE:C2:EF:1A:35:28
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9b:9e:c2:60:4b:6f:ba:73:92:79:47:8d:c5:38:8b:c0:5e:
77:4f:d3:20:5b:d3:20:7f:dc:26:e0:d7:9a:f9:56:bc:16:db:
d0:81:74:56:b5:13:ee:53:e4:70:0c:81:51:4b:4d:ae:60:0c:
3b:67:be:b2:63:12:b4:2e:07:00:1c:3e:47:67:7d:47:d5:7d:
d7:13:bd:41:e8:ff:a3:a9:ea:51:c8:49:51:2d:25:6a:e7:ba:
e8:bc:46:ca:b9:e5:f9:d6:d9:bf:18:8f:1f:6f:3e:c9:a6:2d:
01:5a:c5:c1:c9:77:24:91:1a:83:a9:ea:7f:d6:b0:d2:6c:f8:
f3:35:0e:4c:6c:66:28:7b:1b:72:93:07:d1:b1:12:b2:a5:07:
23:26:c6:ad:b1:cb:2a:ed:8b:14:51:3f:a9:c8:73:84:fa:94:
a5:c0:50:3a:e7:3c:1f:f4:88:ed:b4:45:0b:f9:33:6b:90:e8:
1d:eb:7a:d2:17:cc:37:be:f4:d6:6e:ec:03:60:51:12:61:03:
8c:fc:ae:56:8b:ef:4f:2e:6e:6f:d6:12:fc:3e:14:05:27:02:
92:26:a7:24:f4:c2:a7:0f:d8:56:d6:d5:1d:1f:29:d9:e6:ba:
e0:c4:44:83:30:a1:8c:23:10:ed:21:b6:8a:90:01:5e:9d:df:
d0:29:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:20:55 2026 by rpki-client