Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
File: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft (raw, json)
Hash identifier: EoGC6MeahQGMNG1XPMtTEfdWeUwchALSs7iSu39OI88=
Subject key identifier: 8F:E2:E9:94:AA:1A:BE:AC:85:C8:E5:A2:31:2E:CB:1E:17:6E:AC:76
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 019E1EA2FFEA02F779A51A6C5A767C1C8CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
Manifest number: 0E7C
Signing time: Wed 13 May 2026 00:00:59 +0000
Manifest this update: Wed 13 May 2026 00:00:59 +0000
Manifest next update: Thu 14 May 2026 00:00:59 +0000
Files and hashes: 1: AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl (hash: 6okaROpfFHBP+zoJ2syCOlNdxhyH30Y2sdsc+tnCPhg=)
2: VXiNyOdsOXCFTgyfrrZA_8BMZR0.roa (hash: pELMx1f1M83UZRqJfnbVYj9OTRiewgnk4FieswJJgw4=)
3: W3zOKFUi2t_SPUT2DlTDsdU_z2w.roa (hash: /WnpIr6aQ2Hx4ti+HlYDPocD/mQ4NxnOIR2iit9Xgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:ff:ea:02:f7:79:a5:1a:6c:5a:76:7c:1c:8c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: May 13 00:00:59 2026 GMT
Not After : May 14 00:00:59 2026 GMT
Subject: CN=8fe2e994aa1abeac85c8e5a2312ecb1e176eac76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:cd:95:e4:89:c6:7d:61:c6:12:a4:95:cd:
cc:98:22:0b:80:ee:b7:43:59:21:6c:cb:ae:ea:03:
d0:b8:24:85:bc:93:dc:3c:ad:c4:d3:48:69:f6:07:
76:24:91:67:e9:cc:2b:f6:14:b2:c9:12:c3:96:2e:
21:5f:ca:08:eb:4b:87:81:1d:3c:bf:6e:f5:70:ea:
0d:76:5a:e0:56:ca:92:18:89:f8:fa:55:20:c5:60:
0f:62:6a:df:7c:50:d7:10:ce:85:c6:54:17:a1:af:
a4:23:42:26:a6:4a:f2:d6:61:cd:36:21:4b:62:6a:
b0:4e:68:c0:4d:c3:49:0c:ad:fb:d6:56:fe:3f:9b:
5a:10:d6:95:79:1c:e9:4e:f2:d0:1b:fd:00:0a:e0:
27:f4:4e:72:5e:cc:fe:f5:4f:98:f4:9d:d8:c6:52:
65:42:56:5b:9c:fb:99:13:82:f7:2a:b9:0b:34:d3:
b4:73:57:d3:05:b7:20:af:70:7e:00:95:d9:00:28:
43:ba:04:48:a8:2a:f2:07:4a:46:89:6c:3f:65:c9:
d3:17:31:a2:b0:81:c1:42:fc:a5:5b:ba:a0:5e:b5:
c3:0c:54:c6:8e:18:3a:e8:9a:f5:37:4c:52:5f:58:
45:64:49:bb:51:02:a3:8c:b8:9e:62:32:1c:b0:24:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:E9:94:AA:1A:BE:AC:85:C8:E5:A2:31:2E:CB:1E:17:6E:AC:76
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:a3:2f:e4:6b:7c:2f:c8:96:9f:be:64:29:76:c9:c6:97:
1a:32:80:35:bd:5d:8c:ed:62:91:31:8a:0a:fa:83:61:46:86:
70:5d:f5:33:2e:be:2a:ff:3b:ee:91:cc:c0:47:10:d8:18:0f:
a5:ca:33:8f:26:6a:f5:d3:d6:28:2e:4b:28:ce:4f:c2:40:32:
48:f9:6b:9b:e6:0c:dc:b1:ce:43:de:da:7c:c9:64:9e:90:5c:
b1:e7:9e:5c:42:6e:2d:57:ca:7f:e8:d3:a2:72:8a:29:93:7f:
18:9d:4f:9c:bc:80:af:3c:20:99:95:c0:da:e3:fa:1c:34:52:
bf:3c:a6:e4:19:2c:ea:dc:aa:90:e1:1c:54:97:4a:a9:ac:42:
08:f1:8e:6c:ef:63:72:f5:77:df:1e:00:54:e6:92:13:6a:5b:
4e:ce:91:90:e4:bb:6b:dc:a9:a3:99:29:59:11:47:45:a8:4c:
61:98:7c:54:a9:30:8b:33:70:8b:68:4f:cc:14:22:95:d1:cb:
66:7b:ce:90:97:e1:75:5e:c1:f8:f7:55:06:9f:96:5a:bc:54:
c1:45:74:df:31:66:eb:0e:60:e4:9b:95:a8:17:c4:a2:85:bf:
8d:0e:c4:46:fb:3a:ae:4c:e3:44:e6:15:7b:99:2d:e9:86:01:
55:53:be:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:58 2026 by rpki-client