Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: NHdtUpYpw5aLRhcDjEpycBnTQ0M28k2ywkhukPEBYf8=
Subject key identifier: 6B:05:4C:C1:E0:96:C2:14:2E:2C:2E:56:1D:14:A5:C1:0B:C0:F2:E8
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019EC1B6EE491E8A251D9F19735A50F3C0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1674
Signing time: Sat 13 Jun 2026 16:00:51 +0000
Manifest this update: Sat 13 Jun 2026 16:00:51 +0000
Manifest next update: Sun 14 Jun 2026 16:00:51 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: mcJnEfFNBCHj8Dv4UxdGu3dgdygpX06/iKE+qVPgKX4=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:ee:49:1e:8a:25:1d:9f:19:73:5a:50:f3:c0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jun 13 16:00:51 2026 GMT
Not After : Jun 14 16:00:51 2026 GMT
Subject: CN=6b054cc1e096c2142e2c2e561d14a5c10bc0f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:b4:c7:8f:c0:22:d6:ce:da:07:50:38:55:
0f:e5:be:f3:44:9d:f8:80:cf:d7:fe:fb:b8:36:37:
02:7c:1c:c9:19:f7:54:e0:cc:43:90:dc:3f:c8:c1:
76:65:cf:0c:a7:23:d4:b5:e8:91:2d:8d:d3:a5:01:
46:91:74:fc:6c:38:f2:c4:34:81:bd:8f:9d:4e:d3:
e4:cf:0a:70:e3:73:8f:74:bb:e6:11:08:c1:bf:62:
29:a8:95:77:2b:02:9d:87:d6:89:44:6c:43:da:7a:
4f:3b:66:6f:9a:58:2c:d5:f4:fd:65:d0:ac:ce:a1:
4d:93:5f:bf:9e:f0:c2:36:09:2d:e0:e1:00:bf:a2:
ce:b1:85:83:cb:29:8a:51:66:02:cb:06:a9:0f:fe:
fa:ee:61:77:99:96:b8:ca:56:3d:5a:a4:23:f9:04:
f7:de:76:f2:54:77:86:36:13:dd:58:f9:24:47:d8:
95:42:16:fa:f2:d6:83:b7:47:ba:17:c3:c0:ae:bb:
66:58:b2:fb:fe:00:01:7f:d7:42:f0:90:64:9b:67:
e0:91:a9:19:6c:0e:05:aa:09:c9:26:61:09:ac:8d:
2a:5c:9c:c6:46:15:62:81:c4:a3:03:b4:08:d2:6d:
02:b8:6d:5d:b1:19:fd:9e:49:6b:7a:c1:9f:4b:aa:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:4C:C1:E0:96:C2:14:2E:2C:2E:56:1D:14:A5:C1:0B:C0:F2:E8
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:0b:9a:9f:0e:78:e9:4c:66:52:04:91:30:ba:fc:7a:b4:
83:00:78:3c:8b:7d:31:2a:a6:83:e7:60:e2:ae:c8:43:dc:6e:
f0:a3:81:72:c6:53:fe:6d:00:fd:c4:68:6c:be:ae:03:cc:ed:
62:d8:3e:a4:73:a0:7f:eb:0a:1a:5a:af:eb:a5:06:b2:30:03:
d5:b5:c5:e7:f9:35:c8:79:8c:6f:f3:02:a8:09:f3:ab:56:10:
32:81:ac:58:04:8f:75:85:30:24:cf:40:f5:15:0f:5b:c3:f9:
0d:e4:85:93:af:91:03:22:3a:dc:f5:e6:b3:3a:ff:de:47:9c:
ad:32:1b:bd:80:f2:67:c1:76:ee:0b:46:d7:29:39:a7:36:10:
f3:78:b7:72:f2:bb:d1:71:ab:70:42:0b:8d:e9:5f:f0:bd:c4:
8e:42:d4:41:5b:3f:9d:6a:bc:64:0f:43:b6:ad:c3:da:8b:e7:
8a:05:ad:75:74:d3:2e:4f:d9:aa:bf:15:e7:06:bd:9e:b7:90:
36:e2:71:65:54:d7:a1:d6:e9:40:f5:35:fa:66:05:53:64:b5:
c2:e4:4c:29:5e:fa:d0:c5:96:4d:78:19:1d:bd:de:17:f2:db:
ec:34:3c:5d:7b:7f:16:64:96:3e:6c:26:67:cb:5d:59:4b:1a:
2e:18:52:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:45 2026 by rpki-client