Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: J04ZNI/Qsnz8ACqilKN/+AgkjYorbZS+IVRBeQH+5rg=
Subject key identifier: 23:14:44:9A:20:C7:6F:6E:4B:43:34:CE:5F:6A:60:74:A2:01:89:FF
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 019F8F10758D3EC4F7F69791EB1DCC454B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 13:00:48 +0000
Manifest this update: Thu 23 Jul 2026 13:00:48 +0000
Manifest next update: Fri 24 Jul 2026 13:00:48 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: KSakBuRDpn6m3NhDLDCDZ3uTA9VgKJfIMyUZ4okJaxY=)
2: bKFR-ExETl9kc_NczqQy1RxK9rs.roa (hash: plcIB/DfvBpq4QLItxVjsjUSKb2BA3Zq8rL1ma4T6FY=)
3: pRSgM7v51dj4_nnKyTIe5vKbqck.roa (hash: zoPAj53DpixsBYDFs95Rz1APyotRYxKBCaNS8cQmVuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:75:8d:3e:c4:f7:f6:97:91:eb:1d:cc:45:4b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Jul 23 13:00:48 2026 GMT
Not After : Jul 24 13:00:48 2026 GMT
Subject: CN=2314449a20c76f6e4b4334ce5f6a6074a20189ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:70:2c:88:26:67:cc:c2:20:ca:b4:62:db:
ff:2d:da:8c:4f:4b:6d:8a:6a:0f:9a:1d:fc:ae:c9:
08:7c:9a:a3:8f:16:bd:be:75:cd:47:dd:72:17:78:
cf:b2:b1:fb:ce:a4:8b:b2:b1:5b:34:47:f8:c0:a5:
c7:7d:c3:39:1e:96:35:de:04:bd:b3:7d:32:7c:62:
a5:0c:90:ed:8c:f0:c4:2d:27:4c:2a:e9:b4:01:b6:
cb:85:04:c5:d4:4f:d0:be:f1:62:e3:14:ce:bb:cb:
40:8d:23:96:fb:03:28:c5:d3:b3:51:9c:bc:9e:c2:
d9:7b:d4:56:f7:d0:6a:57:40:05:0e:a4:19:7b:33:
61:d9:ed:ed:d8:65:bf:f9:21:a1:92:49:88:91:25:
4c:11:84:97:e9:f3:cc:c0:d5:54:89:f6:ce:d0:ad:
37:e6:9f:32:30:f9:2d:5d:af:05:d7:1c:69:54:e7:
e5:fa:7b:7a:3e:13:8b:6f:64:a1:9e:c7:de:3f:34:
70:4d:22:d9:09:fc:5f:41:9a:09:57:5f:31:7b:07:
15:05:4a:7b:5c:9d:dd:12:c0:9f:5c:b4:46:92:84:
f3:ce:c2:49:8e:2a:2c:3e:a6:1f:c3:ce:17:ad:bc:
74:b9:2b:6b:fb:3e:15:13:df:41:21:4b:16:82:5e:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:14:44:9A:20:C7:6F:6E:4B:43:34:CE:5F:6A:60:74:A2:01:89:FF
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7a:b3:50:ce:b4:64:d8:89:d6:cc:46:a5:d0:39:d8:3b:2d:
53:aa:96:f8:b9:59:fa:08:0d:a0:b9:7e:90:14:ff:60:f3:d7:
c5:01:34:d7:29:74:82:5e:9e:08:0f:89:a9:60:07:e6:bd:f2:
49:42:6b:dd:72:59:ae:bb:cc:ca:0a:31:58:75:cc:6b:ea:a9:
05:b5:4c:69:0a:f8:e9:2a:78:25:2d:ff:d0:d2:fa:c4:2a:78:
a4:38:ac:de:c1:d4:9c:31:53:46:74:97:18:ed:d0:91:55:0c:
07:a5:30:8b:dd:75:18:a2:ce:5e:38:2d:f3:06:09:b3:29:b0:
83:68:ec:ee:19:1b:47:ad:04:7e:28:8b:db:ec:db:79:31:b7:
ac:c9:33:65:7e:17:d1:01:88:d0:f9:d7:0a:9f:f2:82:ee:ca:
fb:c3:e5:cb:4c:34:65:ae:b1:03:8f:d6:3e:d0:45:dd:13:66:
a1:2a:ce:45:e4:ad:a7:c5:4a:86:d7:7d:09:20:ec:78:b2:f8:
7e:aa:30:8c:ef:79:3c:dc:d6:d0:8a:d0:60:21:f2:14:b7:2c:
f2:a8:9c:27:f1:d8:45:11:c8:4b:d7:74:3b:2e:b0:6b:6d:01:
ff:c7:73:30:d7:d7:b9:01:dc:31:2b:0f:55:32:2a:9b:51:8c:
ee:44:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:31 2026 by rpki-client