Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: HEFB2V1ALIJmV9AoX8HxOkphwg+WWZ4nCOmKDtSrjKU=
Subject key identifier: C3:6E:C9:24:CE:9C:6D:29:E3:07:75:D0:B2:57:45:B6:3F:9A:39:7E
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019F90C780D3907F4F2DDE237F687E116633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 1292
Signing time: Thu 23 Jul 2026 21:00:21 +0000
Manifest this update: Thu 23 Jul 2026 21:00:21 +0000
Manifest next update: Fri 24 Jul 2026 21:00:21 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: QeVksW3TgBCVKv64ZeyQ/gQRpuefG8TjG52eg2tAT/Q=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:80:d3:90:7f:4f:2d:de:23:7f:68:7e:11:66:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Jul 23 21:00:21 2026 GMT
Not After : Jul 24 21:00:21 2026 GMT
Subject: CN=c36ec924ce9c6d29e30775d0b25745b63f9a397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:55:c0:08:87:d9:df:92:39:ec:21:56:b1:
a3:7b:b6:a8:13:2d:3c:41:e2:08:08:94:07:24:f5:
b4:60:51:d1:68:be:50:f5:92:cb:87:d6:03:a7:b8:
90:24:a2:ed:6c:a1:3f:de:3b:52:b5:1e:1a:52:15:
09:24:fd:61:a8:42:f5:9b:0f:d6:f8:8f:66:d1:94:
3f:61:99:cd:1d:87:a9:dd:c4:a9:24:d6:4f:51:e5:
80:0a:e9:e5:f4:35:1e:de:42:6a:d9:93:4d:ce:d4:
57:ea:87:c4:5a:65:ab:b9:9d:0b:2f:55:bf:b1:2b:
95:9f:87:89:24:97:1c:83:24:54:47:38:68:df:d7:
85:24:ac:f9:c9:c5:70:2c:51:24:04:4d:15:18:09:
93:bf:74:63:4e:11:27:0a:0f:21:fd:ad:95:1e:b4:
b7:15:b4:4d:9d:87:b9:5f:18:18:7f:c3:8a:d6:2d:
b3:49:57:e4:be:c3:12:12:54:d6:ab:41:cf:81:36:
f1:d1:87:96:04:b2:5e:a5:2b:a8:9b:ce:c1:78:19:
fe:88:99:d9:35:fe:89:80:6d:56:3b:c3:b0:15:96:
f1:1b:b2:23:d8:fa:da:22:e6:f7:14:9f:de:76:2b:
08:92:8d:2a:59:c0:af:33:39:c8:2b:16:13:5a:bb:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6E:C9:24:CE:9C:6D:29:E3:07:75:D0:B2:57:45:B6:3F:9A:39:7E
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:0e:b6:34:8d:03:4f:1a:7b:36:f6:18:3b:bb:24:be:4e:
b9:9e:91:b4:fd:bb:cf:bc:20:41:c6:ec:84:70:6b:db:62:70:
11:4b:b8:8a:b0:fb:e4:69:8d:2c:f2:34:ab:d5:6a:27:e2:0d:
6e:cd:68:e3:96:36:c1:01:b9:c5:3c:03:ab:26:d2:4f:6c:cf:
62:93:e2:ad:45:78:cd:33:bc:a6:8e:83:bf:e4:6e:c3:51:d3:
ed:da:fd:7f:86:41:87:49:0b:4f:d0:4b:3f:24:7b:d9:9a:d7:
52:56:16:8d:6a:b7:1c:fc:9c:f5:82:ee:2c:0b:9f:b5:9f:9d:
4a:f6:99:0c:6b:9f:5a:46:a6:f2:8d:af:59:56:1b:64:10:76:
e5:be:78:ac:1b:70:02:aa:28:8d:9b:07:43:f5:81:32:e3:3b:
60:23:cc:f9:93:0a:7f:be:82:ee:0a:81:01:08:26:26:cc:33:
98:2f:c1:95:fe:11:c1:02:5a:0d:81:80:4b:b6:56:38:d5:cd:
bc:58:12:f1:70:4b:68:3c:86:03:d3:20:d0:77:11:e5:ba:00:
67:c7:4c:b5:84:35:1f:cc:9b:78:fb:11:02:10:c3:48:b0:6b:
4d:05:8a:c1:03:66:bf:e1:51:84:87:a3:95:fb:55:7c:be:bd:
0a:99:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:45 2026 by rpki-client