Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: k8N0aIq6FQeOhjf2aSBIM+bYymtcfCJjtt2BItL4bes=
Subject key identifier: A5:D0:58:A0:2E:89:92:4C:36:86:E3:83:D4:AA:04:CA:02:28:DC:6C
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 019F8F1050831629A53B724EBE3EE6EE93F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0B9E
Signing time: Thu 23 Jul 2026 13:00:38 +0000
Manifest this update: Thu 23 Jul 2026 13:00:38 +0000
Manifest next update: Fri 24 Jul 2026 13:00:38 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: G20BXop8TWQFfM+JZ88OYQUtFX8bqiWkK1q4pn8hLis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:50:83:16:29:a5:3b:72:4e:be:3e:e6:ee:93:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Jul 23 13:00:38 2026 GMT
Not After : Jul 24 13:00:38 2026 GMT
Subject: CN=a5d058a02e89924c3686e383d4aa04ca0228dc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:15:f8:60:db:26:b6:de:a8:46:95:d4:22:
53:c7:44:93:3a:67:1b:18:cc:4b:3e:b2:53:ae:4f:
74:41:c4:58:c6:d1:74:7e:8e:b9:73:40:10:cc:bc:
1b:47:d7:5e:dc:72:98:9d:9a:a2:15:d1:9c:0a:ee:
2b:95:61:90:59:57:96:77:bc:7a:ff:2b:b2:a3:3b:
32:24:7a:23:3f:4e:9c:6d:61:de:2b:5e:89:fd:86:
cc:a7:31:71:7c:19:06:8c:46:26:40:e0:b7:60:8b:
89:be:d4:af:b5:d1:bc:8a:64:91:47:a8:9c:f9:84:
83:da:33:85:b9:83:7a:ba:f7:83:91:0d:a9:44:55:
5c:73:02:0e:20:9d:ab:35:73:6c:3d:a8:77:68:f3:
a9:26:17:2c:be:03:ea:85:d1:c8:e8:e6:26:48:08:
dd:78:fa:44:d6:29:64:73:c6:19:59:9e:c7:86:d1:
59:fb:a8:a2:01:d0:7a:e4:f2:8d:f8:7f:3d:95:8e:
b7:10:0e:3f:7b:6e:60:57:6b:81:f2:ce:ee:f8:07:
73:11:d3:43:26:20:60:4a:58:f5:c8:70:db:c5:d4:
38:26:bc:f2:b7:ae:cd:be:86:22:bb:b3:94:28:0d:
8c:b2:bb:74:56:40:c6:da:ef:5a:c2:92:1c:7c:0d:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D0:58:A0:2E:89:92:4C:36:86:E3:83:D4:AA:04:CA:02:28:DC:6C
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:d1:3d:05:64:33:0b:6d:60:60:29:eb:d2:6e:e3:6f:69:eb:
9f:fe:63:41:5e:04:26:be:d9:e3:83:10:f6:94:56:4f:0d:17:
76:05:03:66:b3:ba:ec:4e:42:cb:11:53:ba:27:e4:85:2b:8b:
20:7d:58:c3:76:1c:36:64:25:e3:99:ca:89:4b:4a:3f:ab:bb:
38:df:9a:62:ca:ae:4f:21:a4:66:ab:43:72:7d:b7:49:f4:ac:
50:15:e1:62:1a:5e:80:8c:f6:45:5b:2e:a8:5e:30:27:fb:82:
25:ab:6a:5f:1a:d7:0d:57:e2:e9:4a:88:11:ad:4a:d1:2d:86:
ab:33:d2:2f:e8:18:75:07:f8:ad:e1:7d:f6:a4:c4:4d:4c:fe:
9e:a9:68:9d:a1:c4:31:58:c6:3f:e8:d9:e2:33:f4:a3:a0:d1:
51:82:ea:6a:26:9c:e6:d8:87:da:7e:f9:a6:c2:c8:ad:b7:c0:
76:0a:80:78:4f:d8:f8:02:76:cd:7f:f1:6e:b1:2e:27:2d:b7:
7c:17:27:ae:59:a7:69:33:b0:ff:65:e1:94:1d:11:69:7a:3c:
9a:05:4c:b1:63:44:7d:34:12:f0:e6:e5:4d:c4:08:9b:d6:7e:
4a:c9:0d:b5:45:a7:1d:4d:05:a1:a1:b9:d4:85:00:bc:3e:71:
28:70:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:46 2026 by rpki-client