Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: hbM6GnwP+fnpu8Le9rXOssWo6tfywEZhb5Dgt2TswIo=
Subject key identifier: BA:2A:4A:3A:63:3B:41:11:09:4E:C1:97:C2:77:54:21:4B:86:A2:17
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 019FA906D7F1DD8C84B2AF66AE0BB983CBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0CC4
Signing time: Tue 28 Jul 2026 14:00:25 +0000
Manifest this update: Tue 28 Jul 2026 14:00:25 +0000
Manifest next update: Wed 29 Jul 2026 14:00:25 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: 1OkIymzDjCNFIDYaOBT6PB/ZUl4y7oEt2LUCU8Jb6+0=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:d7:f1:dd:8c:84:b2:af:66:ae:0b:b9:83:cb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Jul 28 14:00:25 2026 GMT
Not After : Jul 29 14:00:25 2026 GMT
Subject: CN=ba2a4a3a633b4111094ec197c27754214b86a217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:17:bd:68:35:34:24:4e:91:bf:a8:f4:28:
f9:7a:cc:ea:01:f9:1a:17:21:17:35:46:e1:fa:3f:
77:45:c3:c7:f7:8b:d2:24:dd:98:a7:41:ed:69:c9:
f6:af:af:ee:9c:a9:4e:9f:40:43:a4:aa:04:52:31:
83:ab:40:71:8e:f2:50:f1:49:6d:f3:03:9e:76:e0:
44:24:76:e7:9f:37:0f:eb:68:02:04:df:bb:71:96:
87:ee:a8:4b:50:79:e2:50:0c:36:b0:f9:66:39:1b:
92:45:c8:a1:af:07:f2:96:6f:ec:b2:7b:d9:8b:35:
69:f4:f5:38:e9:74:a7:69:20:7f:ae:87:d0:52:6c:
26:50:3e:b9:e0:1b:8f:50:46:02:37:2a:87:68:a2:
6b:39:65:7b:2f:36:25:61:1f:03:83:6a:71:b1:3a:
73:58:5c:d0:bd:a2:4f:86:7f:c2:b0:b7:7d:18:33:
8c:a4:d1:b4:a1:3d:1e:d0:bd:a2:48:aa:a9:71:8a:
7c:08:a4:f4:f6:64:52:05:78:ed:32:64:b9:b4:db:
db:d9:42:80:a5:41:36:d0:be:6a:16:6d:12:de:24:
32:45:ac:1e:67:5e:63:78:05:50:4f:13:7e:b6:d7:
05:67:78:90:74:f5:14:5a:0c:b3:df:92:c2:e3:71:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:4A:3A:63:3B:41:11:09:4E:C1:97:C2:77:54:21:4B:86:A2:17
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:02:18:8c:06:fd:62:e7:b1:81:48:3a:e0:0a:de:87:28:00:
43:68:4f:f6:c8:25:30:30:4f:96:ef:f0:aa:35:21:0b:3a:5b:
46:6e:54:09:27:da:55:27:83:c8:f9:22:03:f2:84:bb:11:9a:
86:09:89:7f:66:30:15:40:b3:ab:24:ac:81:fc:92:25:bc:8a:
f7:87:39:b1:a8:27:1f:8f:d1:79:a1:93:28:1d:22:5d:0a:1a:
de:ee:5c:12:ea:25:c2:53:e2:56:b5:0f:9e:6f:bf:7f:5c:67:
1b:2f:08:5c:17:d3:1c:12:db:d1:01:6c:82:20:28:18:1b:2a:
be:5c:3d:58:bd:49:c8:1e:67:38:d9:b5:c2:32:ea:cd:ec:c6:
6e:4b:af:26:72:3c:ce:b1:e4:6f:8b:28:81:6f:24:ff:89:7a:
77:ac:c0:93:48:8c:6d:dd:97:99:db:43:bf:e5:df:5c:42:8f:
74:4a:69:9d:d9:5f:f8:69:bf:fd:1d:a0:6c:43:14:ef:46:84:
1f:75:5f:6d:b8:6a:e4:56:8c:88:d7:e9:53:0c:84:62:45:39:
80:1c:bc:ef:ff:05:87:ca:5e:4c:d4:1e:7f:dd:d6:82:83:91:
7e:fa:d1:c7:42:93:25:ee:9f:05:9d:be:51:58:83:2f:76:50:
61:bd:b4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:52:02 2026 by rpki-client