Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: aRwX+cWPPwA+UB8u47v4JnBBzvrv58gWbWRcQjd1xco=
Subject key identifier: 9A:69:2E:29:1B:D7:E5:C6:74:51:13:04:C4:CD:3F:9E:06:14:F9:D2
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019FA9E30A2806655A6A17A61C7EA3E0DF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 16D0
Signing time: Tue 28 Jul 2026 18:00:56 +0000
Manifest this update: Tue 28 Jul 2026 18:00:56 +0000
Manifest next update: Wed 29 Jul 2026 18:00:56 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: P14t9icTk0OEeCuZgNKat2s8eVLccmOIxMHfTj17vNI=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:0a:28:06:65:5a:6a:17:a6:1c:7e:a3:e0:df:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jul 28 18:00:56 2026 GMT
Not After : Jul 29 18:00:56 2026 GMT
Subject: CN=9a692e291bd7e5c674511304c4cd3f9e0614f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:82:f3:9e:b0:8d:9f:a8:15:f6:af:dc:54:
f6:2b:d5:89:1a:d8:b3:0e:bf:29:58:c7:4f:11:bb:
bb:a6:50:c6:81:b2:cb:58:4c:2c:d6:4c:3f:ae:dd:
b3:85:5a:c1:b1:41:63:0d:d1:86:0f:1f:34:50:50:
42:18:2c:8c:c9:a4:63:80:00:fd:bc:eb:0e:5a:7a:
cd:f8:23:ec:3a:ba:35:24:9a:79:dc:9f:97:5d:02:
15:fe:02:be:93:fb:10:89:74:30:2d:cc:d4:2c:d9:
31:3b:db:c0:df:da:24:b3:ce:49:4b:ae:cb:57:2b:
eb:5b:18:31:6a:ed:d1:ad:57:f3:58:c0:c4:8b:b9:
d3:07:b4:34:be:a7:88:fc:4f:e4:77:90:cb:e4:23:
d1:3f:4e:40:43:3c:d2:d0:fc:73:58:30:ec:30:83:
a9:67:17:23:c1:b8:54:41:28:52:e2:a1:07:64:6c:
dd:18:0e:fd:25:fe:67:c6:a8:96:b6:a9:db:6f:60:
d3:39:bb:40:a5:82:98:c2:e5:43:f0:d8:be:e0:86:
44:a4:99:2e:63:77:fa:34:10:85:96:3e:0f:04:5c:
bd:5a:2a:13:4d:d2:1b:5a:bf:b0:4d:bd:fd:42:87:
42:70:20:1f:28:69:34:d4:a2:35:af:d0:a5:bd:c1:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:2E:29:1B:D7:E5:C6:74:51:13:04:C4:CD:3F:9E:06:14:F9:D2
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:98:27:ae:8a:2d:5f:a1:1e:d3:ca:15:97:5a:90:03:46:
6e:f4:38:a4:67:71:fa:6a:ad:7a:47:e1:ff:67:2b:01:db:d6:
85:b6:ec:01:87:e3:a4:2f:8e:27:0e:b8:6b:4c:1d:9a:31:6f:
e3:0f:94:ae:22:34:31:68:d7:82:0d:40:b4:21:68:8a:51:99:
89:77:2d:b7:15:cb:05:ea:4a:96:23:47:d2:ea:3d:af:f4:54:
a2:60:59:d1:cd:2e:0b:e1:86:de:ed:7c:4b:2a:cd:05:25:d3:
4a:88:a8:b3:6e:1b:2c:ab:c4:8b:3c:30:a5:98:fb:ed:10:ea:
80:a2:52:37:90:ad:0b:3a:ab:70:d9:6c:91:b6:f3:b9:1d:57:
d4:fd:ee:07:d4:6d:49:a4:ff:db:42:d6:bc:c6:3c:c5:9d:ff:
54:9e:d8:30:88:65:4e:14:6a:b0:e1:ed:4a:2b:10:df:a1:a9:
f4:3c:e1:81:d6:aa:ff:53:98:9e:0c:7e:14:aa:7a:a6:90:22:
00:4f:fd:18:ce:95:c0:55:13:cf:4b:67:bd:9b:2c:a7:54:90:
cc:85:f7:3b:5c:e5:e5:0e:62:5b:c0:96:e7:74:98:71:b6:3b:
1d:d3:1c:d0:88:a1:9c:d0:6f:fd:31:32:3b:bf:5f:3a:22:2c:
ae:bc:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:41:26 2026 by rpki-client