Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json)
Hash identifier: /vquQwGUyY3Km1RPVSMBE7CersZCL3pNv2lFAgf/n78=
Subject key identifier: E1:09:45:C3:71:39:7C:31:C3:E5:19:02:68:A8:E6:7B:50:80:FF:11
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 019E1C7DDC37E9323FB9187E2F2CD87C3BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
Manifest number: 1241
Signing time: Tue 12 May 2026 14:01:10 +0000
Manifest this update: Tue 12 May 2026 14:01:10 +0000
Manifest next update: Wed 13 May 2026 14:01:10 +0000
Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: R3LK9NzztnIhxCLWgHqHVPDzze7IVPB1uHEU+eVAPws=)
2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:dc:37:e9:32:3f:b9:18:7e:2f:2c:d8:7c:3b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: May 12 14:01:10 2026 GMT
Not After : May 13 14:01:10 2026 GMT
Subject: CN=e10945c371397c31c3e5190268a8e67b5080ff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:90:66:c6:01:19:57:bb:0c:b4:75:41:65:
65:38:0f:0b:9b:a8:69:31:f2:6b:ef:61:23:dc:bc:
c1:71:65:c5:d2:97:75:50:74:a8:6a:f7:ce:7e:4d:
12:c5:dd:a6:57:5f:24:c5:5b:51:1e:69:97:c1:d5:
d1:f5:df:7d:f3:69:98:04:de:64:36:c2:a9:b3:a8:
a1:f3:e1:52:ce:19:18:93:38:79:20:4b:37:9c:cc:
bf:e8:d0:1d:ad:e0:72:d4:84:2e:e4:72:f2:21:2b:
9c:49:b5:9c:d5:b0:ed:91:24:4f:43:f4:97:34:5d:
8d:8e:96:d6:50:24:06:1c:ab:73:33:a0:f1:6c:46:
28:78:0d:51:e8:fc:56:42:7f:2c:df:4f:e5:92:b7:
be:67:7b:0a:40:c3:fb:b8:46:ad:ec:3f:3e:83:6c:
12:f9:12:99:55:de:55:88:88:00:08:a0:8a:0e:e5:
21:37:d2:e7:6f:fb:c2:b7:a8:b2:4d:1d:89:1e:43:
04:0c:ab:2e:15:47:88:41:a7:b7:18:7d:53:9f:ad:
83:7d:fb:f0:9b:5c:a3:41:41:45:79:d2:df:f3:e9:
86:fa:89:be:f6:90:eb:ed:df:18:43:82:33:f8:77:
6c:dc:10:cb:80:99:e5:5d:90:18:b6:f2:86:80:d3:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:09:45:C3:71:39:7C:31:C3:E5:19:02:68:A8:E6:7B:50:80:FF:11
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:91:97:95:3e:4d:56:df:1f:4a:57:7e:7e:a6:e7:84:84:
27:31:4e:78:cb:5f:a5:1b:02:50:55:f4:b8:79:17:3d:33:5b:
f7:1a:a3:b1:a4:9f:cf:5a:14:dc:53:b1:4a:0c:7e:af:08:51:
63:2e:9d:de:60:f8:dd:ab:2c:d5:54:43:e5:5a:14:08:84:33:
d1:2d:08:85:80:c6:9f:36:8e:f5:7b:06:4b:69:bb:a6:e2:f6:
d8:73:e6:60:6b:40:d6:97:8b:1c:fd:cb:7f:5e:df:3f:a7:00:
6b:85:a2:d6:1d:14:50:56:d7:84:bc:56:bc:4b:be:9c:1c:5c:
cc:fb:62:4f:32:72:7b:ad:c7:ea:a5:c8:6c:a7:00:61:d2:15:
8d:b3:59:55:b8:e5:bb:47:2f:84:6f:72:41:15:a4:4e:14:a7:
4e:ff:92:6b:cd:98:56:ba:5d:66:d2:24:6b:62:d4:40:55:3d:
4f:c0:30:3e:c2:d3:eb:a7:18:71:d8:1f:a2:9c:10:82:fb:3b:
a7:7d:37:7e:ba:ae:65:3a:6f:93:66:35:d2:d1:40:52:7b:73:
49:56:ad:10:9a:5d:78:b0:b9:93:c6:b2:3a:1a:79:24:83:cd:
9f:2b:4b:b0:00:71:24:bb:10:dc:26:53:e4:dc:c5:7f:8f:7b:
17:ce:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:17 2026 by rpki-client