Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: i8L3GWwPBOXd2w2AAzEX4tfspe5DOw924LVmN7YUs5A=
Subject key identifier: D6:50:A4:ED:57:7B:D3:65:0B:FB:6C:A9:02:0C:F8:6D:E4:20:D1:19
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019FAB636556B3D4369C0E4B93687DD14B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 16ED
Signing time: Wed 29 Jul 2026 01:00:45 +0000
Manifest this update: Wed 29 Jul 2026 01:00:45 +0000
Manifest next update: Thu 30 Jul 2026 01:00:45 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: 9e+XJNWh/Twwi+mdlnk8fiT/zjtzu8IQRReOT5AnJok=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:65:56:b3:d4:36:9c:0e:4b:93:68:7d:d1:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jul 29 01:00:45 2026 GMT
Not After : Jul 30 01:00:45 2026 GMT
Subject: CN=d650a4ed577bd3650bfb6ca9020cf86de420d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:7a:1a:bc:94:bc:67:2f:bf:b8:da:ef:be:
fc:7b:6d:37:b2:c9:7b:10:37:20:ad:12:0f:24:41:
2b:1c:9f:2f:54:4f:2e:98:df:8a:ca:25:31:ab:cb:
46:30:76:f6:d1:80:cf:72:ae:4d:36:ea:73:e2:4e:
bf:a9:15:eb:ae:d8:2b:1e:2e:25:bd:c5:01:13:bb:
6c:a6:a4:d0:bc:7b:5b:96:df:1f:07:bf:7e:e4:34:
96:c3:34:2e:70:25:03:4f:01:9e:7d:19:f5:70:17:
aa:f3:53:43:1f:bc:2a:f6:28:5f:d6:8f:60:39:e6:
c5:c9:0e:b4:09:a0:c3:28:9a:8a:aa:29:68:46:d9:
16:e8:07:6b:a3:b9:a7:42:1f:1e:4a:2b:d5:bf:1c:
49:0d:4a:2b:d6:f2:7d:8c:a2:d7:8b:b5:76:02:32:
af:dc:da:22:bd:f2:4f:4f:bf:1c:98:83:36:af:d9:
d1:37:fe:80:0e:94:5f:d6:0c:be:6d:8c:a9:68:90:
6d:1d:c2:85:a3:71:2d:de:80:c7:61:e9:31:57:f9:
81:d4:25:d8:70:48:94:40:ab:c7:f2:f5:c1:20:48:
2b:7f:7f:1f:bf:51:d1:11:42:84:c5:5a:59:c3:3c:
eb:e3:83:ac:18:9b:b2:76:15:46:30:7e:0f:73:2d:
28:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:A4:ED:57:7B:D3:65:0B:FB:6C:A9:02:0C:F8:6D:E4:20:D1:19
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:29:be:39:2a:6e:d9:ab:b9:5e:bc:01:af:8a:16:6d:33:
71:25:eb:91:85:95:64:4b:ae:fa:21:d1:48:6d:1d:27:5b:ee:
98:df:c8:3d:16:dd:68:89:d6:08:5a:32:0c:9b:2f:ec:ec:76:
14:48:5a:b3:6a:f1:21:0b:d7:a0:59:b6:40:f8:25:04:bb:c7:
bd:3c:b3:f4:47:a8:ea:35:cb:07:41:37:6d:8f:8f:cd:89:71:
c1:07:82:21:7d:49:55:5c:59:9f:9f:3c:60:f8:c0:b5:6f:5a:
42:82:17:2e:d9:8c:64:a2:6b:db:72:35:a4:90:1d:53:11:cc:
e9:db:90:8a:a7:a0:47:52:74:35:95:bd:43:1f:01:1a:38:4d:
34:3a:4d:7d:d1:79:db:d9:d3:91:3b:f2:c7:ed:e0:e5:ce:53:
e4:42:07:c8:ab:b2:69:e1:a8:55:4a:f8:39:0f:23:f1:5c:94:
0c:4b:f4:d6:3e:59:12:50:3a:75:aa:2e:69:40:7c:16:d8:89:
bc:6f:d1:32:85:25:d8:69:32:e1:c3:ba:f1:df:76:b7:27:b9:
e7:89:4d:0e:d1:61:e7:90:8c:f5:a8:fc:a8:fa:69:25:47:25:
90:92:ce:8c:6a:04:fa:c6:13:14:d5:19:f3:9f:fc:6b:05:b9:
33:a3:88:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:47:18 2026 by rpki-client