
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: wMK5eA1dnL24gJKjA7JQ/2Ph0PkqWKVOKjUPfXgIUkY=
Subject key identifier: 00:02:AD:00:ED:0D:9F:AB:12:5F:21:DD:80:DE:98:BC:C6:79:C3:9B
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019F92ED945A5BA5A0E0097413201FBB68C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0B26
Signing time: Fri 24 Jul 2026 07:01:11 +0000
Manifest this update: Fri 24 Jul 2026 07:01:11 +0000
Manifest next update: Sat 25 Jul 2026 07:01:11 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: bmcYLmYxackvDMJAU/Wmx6mNcDGEEPCR3M1gwFu81kg=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:94:5a:5b:a5:a0:e0:09:74:13:20:1f:bb:68:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Jul 24 07:01:11 2026 GMT
Not After : Jul 25 07:01:11 2026 GMT
Subject: CN=0002ad00ed0d9fab125f21dd80de98bcc679c39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:fd:7c:11:bb:93:f9:d6:58:02:cd:ea:85:
d4:bd:b2:44:7a:b2:55:9f:29:cb:53:57:82:c5:c7:
af:6d:9f:b1:40:82:4e:76:80:73:b7:52:07:78:ae:
66:ab:b3:f0:9d:52:f8:64:80:1e:76:ab:5f:71:b1:
0a:3b:e2:1c:19:f2:0c:d5:2f:77:76:d1:7d:24:15:
5a:b0:c9:46:8e:7a:b9:9f:56:e7:55:0a:25:f5:8c:
3e:36:b6:da:8b:3e:6f:bc:22:32:c1:38:d0:a9:06:
8c:06:e6:cc:15:2a:28:60:b5:0f:1e:11:43:fb:9f:
49:4b:75:21:b8:18:59:e2:30:9e:44:00:ed:a8:94:
d6:eb:31:c1:13:f9:9f:7f:81:a3:92:e8:4c:fd:94:
ca:82:df:5b:87:54:a4:8d:6c:e4:f1:eb:e8:83:bb:
9a:4c:7a:d4:98:06:a6:cb:98:03:41:0a:6c:4c:1a:
83:e5:3d:6f:80:79:d6:cb:70:b1:80:20:1e:29:0a:
68:01:89:e5:a8:ca:a2:2c:15:a3:98:a4:67:e6:e2:
82:73:87:e4:c1:28:02:be:56:5c:ee:f5:10:96:40:
a5:67:39:dc:d9:58:34:3e:31:14:14:d3:c4:5a:4f:
92:51:bf:36:10:50:d1:8b:85:87:83:74:92:2c:70:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:02:AD:00:ED:0D:9F:AB:12:5F:21:DD:80:DE:98:BC:C6:79:C3:9B
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4a:c5:4d:53:43:96:4e:ee:25:32:89:76:d3:74:6c:d1:8b:
99:8f:b5:45:db:54:ad:7a:c7:a7:27:91:6a:56:e3:94:d3:66:
cf:16:4c:0c:9b:41:8d:e9:5d:64:16:9d:fc:e6:60:a6:47:f3:
5b:b3:4b:e9:34:90:2a:15:81:3c:89:81:eb:1a:b8:17:89:e9:
66:d0:76:fb:fa:c2:8f:c8:79:1a:31:48:48:02:65:6d:cd:29:
03:13:1f:4c:38:2b:9f:fa:5b:ce:c6:30:d7:56:e7:3c:a5:70:
16:74:45:be:a4:6a:5c:aa:76:92:42:b4:5b:c8:0c:2d:87:86:
3e:b3:a9:da:37:2d:44:6c:f3:4f:c2:3a:4d:ac:26:d7:ca:3c:
0a:a4:c6:4a:64:19:5d:9a:c9:cc:b5:b2:d1:22:f9:fa:c9:36:
e5:18:3b:2f:f8:79:ef:00:f3:67:56:3a:62:f3:ae:04:39:d9:
43:cc:87:f4:88:88:c0:fa:83:52:a4:76:e4:40:c8:9b:65:55:
38:33:e6:3f:99:0e:86:d3:35:72:a4:cf:5c:12:99:49:fb:cc:
10:ce:3e:37:a2:d9:58:57:f1:7f:0d:c1:7f:45:89:93:2a:9c:
c2:61:90:e3:ca:2c:ab:cb:68:37:29:8e:58:97:03:64:cd:1f:
c0:ce:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:24 2026 by rpki-client