Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: gTetgkgm1rgqNMTvSJe36kDTE/KIWGGhfV6fZ35cFFc=
Subject key identifier: 3C:C9:1F:2B:97:99:85:D9:BE:57:E8:4C:EB:8A:D8:99:3D:6F:DA:7F
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 019FA9AC75A64345171C19DF451B058EC4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 10B9
Signing time: Tue 28 Jul 2026 17:01:19 +0000
Manifest this update: Tue 28 Jul 2026 17:01:19 +0000
Manifest next update: Wed 29 Jul 2026 17:01:19 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: BPo/hpywSkucpKHSwldTeHQZn5JUlZWM0G3NbH2PBAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:75:a6:43:45:17:1c:19:df:45:1b:05:8e:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Jul 28 17:01:19 2026 GMT
Not After : Jul 29 17:01:19 2026 GMT
Subject: CN=3cc91f2b979985d9be57e84ceb8ad8993d6fda7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:63:b5:89:fd:35:c9:17:a7:06:f6:b2:26:
77:ac:1b:8d:de:12:80:a3:af:d7:e0:0c:ab:e5:a2:
3d:ba:f7:f1:a5:4d:e0:62:12:eb:1f:f8:86:c6:84:
61:ba:a6:a0:e5:cc:4f:09:a1:6e:c8:ce:8c:64:19:
02:3b:41:c5:b3:42:01:3a:7a:40:be:8e:56:5f:3b:
dc:8e:c8:cd:6d:bf:d7:1e:98:03:67:d8:63:ee:14:
4f:4e:7f:1b:50:59:db:92:f8:f1:e6:dd:23:c6:32:
e8:17:26:60:5f:f2:e4:cf:2e:52:c4:f7:d8:7e:d8:
61:c0:62:11:f7:25:c9:31:26:2e:2c:8d:40:fc:cc:
e7:09:1c:ea:c3:d6:47:b3:30:59:c5:d4:dd:2a:7d:
29:06:32:d7:c8:70:e0:d0:e4:11:34:c3:0f:b2:e5:
29:87:00:20:66:b4:f1:5a:24:35:b2:28:b9:1f:03:
aa:90:91:5b:83:97:fa:a8:4b:3a:2e:3c:28:a3:8d:
e5:cd:3f:c6:de:09:aa:2d:86:41:04:62:2e:3f:21:
a8:4c:c0:71:95:68:2f:35:d7:44:7c:3d:6a:4e:40:
c9:55:5e:27:94:db:ca:68:55:78:1e:4a:25:2e:f2:
70:42:f9:8d:df:c2:52:5c:99:04:c9:89:22:17:64:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:1F:2B:97:99:85:D9:BE:57:E8:4C:EB:8A:D8:99:3D:6F:DA:7F
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:9e:96:d2:ed:39:f6:8a:71:42:2e:a0:ec:55:05:2f:14:
41:28:67:ea:a6:b5:cb:10:46:88:aa:cc:d4:14:ac:15:2c:57:
1b:04:fc:f4:39:7c:3d:d8:9f:5f:25:f0:5c:62:1e:f2:6e:b0:
30:81:f2:18:a0:df:a6:b2:5b:69:4d:07:5c:e3:69:c0:05:78:
1d:30:d3:cc:02:d0:ad:91:63:d5:1b:a7:bb:58:86:a8:d0:2e:
44:26:e7:76:14:eb:fb:55:8a:ca:04:66:a3:a5:c7:79:a4:a4:
17:67:8e:a8:9a:77:e3:79:74:98:14:2c:d4:39:c7:e5:1f:a9:
5c:01:0e:03:51:b8:89:fa:38:4b:1c:34:e5:71:59:ad:d7:3f:
0b:dd:84:ce:46:e1:a1:07:ba:18:7b:58:ef:73:17:26:f5:a4:
03:19:d6:d4:8e:0e:be:01:f2:e3:52:16:f1:c4:30:2e:c8:da:
2c:10:3e:eb:05:32:44:f4:35:83:47:f2:ef:cd:c7:23:94:67:
85:69:77:e0:40:62:e7:63:35:bf:9b:af:f5:8a:df:88:cf:36:
f7:0b:ad:e5:60:6b:79:4f:07:9a:21:ef:10:cb:c0:e5:51:80:
8f:7b:79:86:f6:81:3d:0b:da:c7:7b:ca:54:e1:3c:c7:24:8a:
53:34:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:52 2026 by rpki-client