Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
File: aIEP_k-SA6EAZ31lGTtEJniaz1w.mft (raw, json)
Hash identifier: LkxppCSI0sgWC5iOSR+9fkLD0+L86PxtEA7fxRWyBas=
Subject key identifier: 06:37:43:59:57:56:C1:37:4D:52:A7:14:5D:6D:79:BC:67:EC:5E:45
Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c
Certificate serial: 019E20FF2D20536623E0BBEF076DB8C2A379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
Manifest number: 0D19
Signing time: Wed 13 May 2026 11:00:54 +0000
Manifest this update: Wed 13 May 2026 11:00:54 +0000
Manifest next update: Thu 14 May 2026 11:00:54 +0000
Files and hashes: 1: 4kjooCn4utyvNqQOgFxK7-kKLu0.roa (hash: UOUVc0j6e6Ip7AZ/AsFrmNnJ9pEwnrKNZc+DelE5OzU=)
2: aIEP_k-SA6EAZ31lGTtEJniaz1w.crl (hash: u+x3QU0MJtO9uq2tj4gNFOjjo8CY8XKGt1ChKZC4x9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:2d:20:53:66:23:e0:bb:ef:07:6d:b8:c2:a3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c
Validity
Not Before: May 13 11:00:54 2026 GMT
Not After : May 14 11:00:54 2026 GMT
Subject: CN=063743595756c1374d52a7145d6d79bc67ec5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:33:35:e0:06:ad:4f:b9:de:c9:9c:66:07:6c:
a5:fc:f4:94:84:73:96:20:07:db:97:f6:9a:db:81:
5e:8b:9a:0a:5c:04:59:f7:fd:3c:af:fc:a2:4e:ad:
4d:f1:50:4b:a4:a0:2c:cb:9a:3d:cf:09:a6:c5:04:
78:bb:ba:d3:3a:f0:14:2a:8d:59:86:77:4b:71:fb:
98:8f:9f:57:23:fc:8c:1a:3d:4c:b8:7b:36:2a:83:
9e:aa:98:1e:1d:2e:f4:ab:01:ff:19:60:6e:ef:53:
f6:c5:8b:f0:c9:88:45:48:ee:09:cd:2f:b7:d6:ec:
6b:2f:5a:6c:e8:7c:c3:dd:b0:30:8d:31:b0:d5:6e:
5d:63:ca:f0:82:07:d2:63:22:35:b8:8d:01:ee:3a:
a8:f2:14:cc:e3:d4:a1:42:75:fd:54:33:17:fc:b3:
78:8e:9f:ab:81:e1:0e:76:a0:d1:07:ad:97:a1:f7:
55:21:12:3a:7b:ce:67:d1:0e:b7:22:d1:30:c9:ba:
12:4f:2a:7d:4c:56:fc:d4:7f:cb:55:51:af:65:d0:
57:03:07:ca:41:24:34:4e:e3:0f:1f:7e:56:53:5b:
6f:6b:1b:87:19:2c:4a:91:6c:18:db:7c:a6:cc:68:
98:be:73:6c:db:ba:95:60:8d:40:c1:fb:aa:35:2d:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:43:59:57:56:C1:37:4D:52:A7:14:5D:6D:79:BC:67:EC:5E:45
X509v3 Authority Key Identifier:
keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:a9:f5:65:aa:44:9a:8f:43:39:80:4c:8a:ef:3f:59:90:
7b:ab:04:24:2d:b7:b4:0c:c7:8a:83:ff:c7:dd:49:97:ed:cf:
cf:bf:66:62:aa:1a:7b:50:02:82:e6:cc:bd:c7:72:08:65:fb:
48:c8:83:da:c8:61:81:1c:6d:44:0f:90:10:8a:b6:8c:71:b6:
45:e5:e4:25:cc:27:dd:08:d5:30:ad:ab:b0:08:65:cc:98:a1:
a2:35:e4:6f:cb:6f:cd:2e:d2:06:eb:e1:0a:a1:bf:d5:05:c0:
fe:fc:2b:4b:78:cb:94:24:5c:46:7d:8a:c0:f8:97:9d:05:e7:
eb:7d:1c:1f:02:b5:20:57:90:45:da:e7:51:b0:ab:2c:08:01:
b9:65:ae:db:2c:77:fb:8f:fa:dd:d3:8f:c1:d3:b1:8f:de:6a:
76:80:4f:5b:90:77:19:f4:53:42:c2:c4:c7:f2:fe:6e:67:d9:
dd:75:11:94:8e:bb:85:9c:18:9b:f1:d8:17:96:3c:bf:3b:3f:
fd:b5:34:06:5d:d7:49:f9:88:e2:54:bc:a2:8d:8d:76:c4:4c:
c8:45:05:e8:ef:04:97:8a:ca:41:6d:89:fa:ba:9b:2f:a6:75:
29:56:45:61:ef:55:a2:1e:0f:35:6d:2f:cd:69:b9:52:bf:b1:
e5:8a:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:06 2026 by rpki-client