
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: Fy0p2gK5UYqZQdhw9OtkQFcN84tmLqK1men0HOTsKU0=
Subject key identifier: E0:5E:0B:24:89:17:DC:E1:B5:81:49:80:88:8F:B9:D9:D1:60:9D:78
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019F8F474014FD34313F7872A9F2C97BC2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 1301
Signing time: Thu 23 Jul 2026 14:00:39 +0000
Manifest this update: Thu 23 Jul 2026 14:00:39 +0000
Manifest next update: Fri 24 Jul 2026 14:00:39 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: zfMzYJ2aXJXUyFcsXYiHPAayvaw+8Mx353UmunjqBVE=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:40:14:fd:34:31:3f:78:72:a9:f2:c9:7b:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jul 23 14:00:39 2026 GMT
Not After : Jul 24 14:00:39 2026 GMT
Subject: CN=e05e0b248917dce1b5814980888fb9d9d1609d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:0e:be:8a:81:25:88:65:a4:45:6b:ee:6c:
cf:55:78:38:a1:f1:d8:b8:91:79:37:1e:5d:4b:2f:
92:51:8f:2f:e4:ab:4f:38:d6:79:0e:48:30:99:45:
bf:b1:c9:5b:ff:ce:28:9c:2c:63:a1:b4:0d:63:6e:
f6:5c:28:a9:9a:8f:93:17:6e:e1:15:1a:d2:3f:df:
0d:53:89:24:0f:00:2b:16:48:db:91:71:b9:2a:2e:
89:3c:67:13:6a:f5:9a:d8:26:f2:12:67:b4:07:cf:
e8:19:f0:66:40:5f:b9:19:e9:ac:39:7c:c9:65:2e:
25:a0:70:18:9c:c5:0d:dc:bd:63:9b:18:19:fd:3c:
cc:c6:b1:50:c7:a9:1a:f4:63:f4:03:47:6c:63:a1:
48:56:db:04:45:bb:e0:14:ad:98:37:a4:9b:10:1c:
48:89:0d:08:1b:72:59:fe:93:78:bf:85:71:f3:e7:
b5:dc:ad:3f:9a:26:aa:48:1b:40:54:05:a3:82:57:
05:dd:71:ba:b8:9f:a8:cb:8b:78:c4:1d:7e:a6:4b:
5d:4f:38:b9:44:4e:49:d7:fb:74:e6:13:67:b0:c3:
01:a1:93:d5:65:43:8a:2c:a8:a3:f6:69:61:b2:c9:
62:63:60:4f:0f:75:a6:09:8e:0e:d3:da:6a:7b:b9:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:0B:24:89:17:DC:E1:B5:81:49:80:88:8F:B9:D9:D1:60:9D:78
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:33:3c:ce:f0:8e:3a:b3:c8:44:75:fb:d8:fa:51:1b:2b:58:
59:6e:f0:1e:da:05:ce:d4:ce:74:3c:fa:8d:57:34:f7:67:df:
de:a7:56:57:70:b2:04:fc:0b:80:c6:2f:a5:37:7a:d9:59:a9:
e1:b9:df:ee:f0:9f:4d:6a:a5:4d:70:7e:6f:34:9d:4a:65:4f:
03:a4:fd:62:45:6d:cc:ee:4a:81:d3:17:a1:ac:74:35:3f:5a:
69:cc:0e:84:fb:11:67:75:b9:cb:12:22:e3:55:0e:7c:d9:b6:
3b:7f:14:12:c7:5e:b0:f3:20:42:72:16:a2:14:c7:11:0a:0f:
8d:e8:a0:12:34:42:51:2d:61:4d:0e:5c:b8:6d:7b:27:b3:34:
0f:48:c4:45:5f:6e:43:47:fb:05:79:39:28:32:ad:52:54:51:
16:9b:39:57:7c:f4:2d:72:b3:9c:7f:bc:af:be:3b:b1:fe:f1:
30:18:c8:e9:1e:19:29:64:df:73:a5:ad:7f:c9:6f:57:6b:03:
2c:70:c8:57:c3:75:0f:45:42:b1:61:60:1f:54:9d:94:21:2d:
5a:40:22:91:7e:80:57:00:47:0c:40:43:6c:1f:c7:b6:69:31:
1c:df:43:6e:27:b5:70:94:76:a2:d1:74:f8:8f:ac:41:50:76:
66:68:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:09 2026 by rpki-client