Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
File: AemEvojKuDCuuB0O2HaPQzE11Zo.mft (raw, json)
Hash identifier: c8t0K4h5FskFntEnYnfcTt62p2ziqyhy8NgNlG3gerc=
Subject key identifier: B4:01:78:EA:6F:FB:CA:FB:A5:A5:79:DA:F7:D4:6C:2D:AC:4C:E8:B6
Authority key identifier: 01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
Certificate issuer: /CN=01e984be88cab830aeb81d0ed8768f433135d59a
Certificate serial: 01A1CB1FE085DBB230DC10A276E9321AF44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
Manifest number: 0167
Signing time: Wed 11 Nov 2026 15:00:26 +0000
Manifest this update: Wed 11 Nov 2026 15:00:26 +0000
Manifest next update: Thu 12 Nov 2026 15:00:26 +0000
Files and hashes: 1: 5XvtfWgYGxUU8qLnW3Bwfdl6JUs.roa (hash: bPYIhcD0X+Vz1PaqsgpfgFmUc9hFnv4ButsAKQzi5o0=)
2: AemEvojKuDCuuB0O2HaPQzE11Zo.crl (hash: vO0SRgQ7Cjg0Ix8FjDDWyVYXQ4TzN5JwWHCaRUUbIes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:1f:e0:85:db:b2:30:dc:10:a2:76:e9:32:1a:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e984be88cab830aeb81d0ed8768f433135d59a
Validity
Not Before: Nov 11 15:00:26 2026 GMT
Not After : Nov 12 15:00:26 2026 GMT
Subject: CN=b40178ea6ffbcafba5a579daf7d46c2dac4ce8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:ad:6b:af:28:5f:1c:cd:86:18:5f:af:77:
26:9b:f0:02:7b:01:50:bb:9e:c6:17:90:44:34:39:
69:3e:5d:ff:b3:07:c6:9e:24:dc:be:ca:a7:d5:3f:
fb:e3:6d:ae:0d:09:6a:c9:58:94:e0:e0:47:a1:1d:
be:90:d0:79:33:98:c4:da:fe:1a:90:19:a2:8b:82:
c8:26:95:5c:bd:64:bc:e4:7d:cb:49:3c:1f:64:d9:
76:14:8b:d3:20:1b:cd:6e:7a:74:78:df:b6:07:ea:
90:58:8f:cf:16:19:66:0d:5f:bb:37:84:33:10:3d:
70:e3:a8:83:06:2d:c1:27:2d:22:7f:1e:fd:d8:53:
29:37:98:9d:04:0e:fd:cf:b3:71:dc:7c:79:d3:de:
03:80:8a:d6:38:a8:3c:62:b6:96:77:5e:64:af:4a:
28:62:98:9b:d3:c6:0d:36:01:ec:24:c4:e2:83:59:
8d:41:b9:89:62:ed:0d:4e:57:f6:20:be:5d:c5:5a:
52:01:a0:d6:02:d0:22:0a:1b:ab:b3:60:f7:e4:97:
29:e9:0d:25:81:1a:ac:90:01:09:84:d5:37:20:98:
23:78:30:6e:d0:4e:fd:5c:98:db:d9:40:9c:c8:0b:
94:90:bb:dc:55:62:3b:1a:b1:d7:5a:60:db:46:ec:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:01:78:EA:6F:FB:CA:FB:A5:A5:79:DA:F7:D4:6C:2D:AC:4C:E8:B6
X509v3 Authority Key Identifier:
keyid:01:E9:84:BE:88:CA:B8:30:AE:B8:1D:0E:D8:76:8F:43:31:35:D5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AemEvojKuDCuuB0O2HaPQzE11Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/AemEvojKuDCuuB0O2HaPQzE11Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:00:f3:91:d9:52:22:7c:b6:73:aa:c2:10:d0:a7:b7:28:ba:
3c:af:d0:9a:1c:57:02:91:b6:93:32:a7:65:03:ce:76:69:2e:
09:45:03:24:2b:ea:b2:ef:a7:fb:f6:1d:cc:a0:74:3e:e9:39:
2a:87:87:78:73:c2:b4:ef:d0:cd:64:88:c1:7e:05:64:56:3c:
cb:12:a5:aa:77:53:23:e7:f4:da:25:11:08:96:ec:e0:b1:9a:
ce:cb:79:d6:e5:95:2d:4b:5b:5a:7c:69:44:1b:31:19:6d:48:
f0:d5:7b:a0:18:b1:bf:6b:4b:52:ed:b5:80:5e:62:c5:cd:22:
dd:ab:19:10:df:4c:4e:d5:02:0e:db:cb:49:d6:2a:c4:b2:6d:
68:60:fa:e7:0a:eb:21:d1:23:3f:08:2f:48:08:ac:bf:bc:79:
d3:21:17:47:d7:d6:f8:8b:5d:05:e7:ac:05:cb:ea:25:e7:3d:
a7:ec:4c:e6:f4:34:2f:fa:ab:e9:57:c5:87:fa:53:8c:5e:08:
6b:6c:11:2b:93:6c:d8:a3:66:52:c4:7d:98:40:f6:77:16:c0:
c2:54:82:6a:44:51:2e:26:66:18:a8:0b:72:4f:ea:d1:4b:bf:
20:3e:63:95:ce:b7:c1:87:75:b8:3d:4e:ab:7e:12:92:70:a7:
81:25:96:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:47:31 2026 by rpki-client