Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: OIY6q8dwZ4oRExBxWLvmobU7d+B+wWudrH7YKkpF8N4=
Subject key identifier: 0B:5A:EC:8B:83:D9:E8:E9:68:AD:A9:33:CA:01:93:DD:71:5D:65:6A
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019E1DC799E03D382116C63247E988DAB352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:01:20 +0000
Manifest this update: Tue 12 May 2026 20:01:20 +0000
Manifest next update: Wed 13 May 2026 20:01:20 +0000
Files and hashes: 1: EtyzFTJUk60CuwO9op_msoT-ijU.roa (hash: qTqnVAwfXMqu8jcaBFML2gNAVjY9DCbbxk0aZHmK97E=)
2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: q5zw99ncBI4qHEYuHgzsWKVvfTz54U7BxhVRfgEN0xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:99:e0:3d:38:21:16:c6:32:47:e9:88:da:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: May 12 20:01:20 2026 GMT
Not After : May 13 20:01:20 2026 GMT
Subject: CN=0b5aec8b83d9e8e968ada933ca0193dd715d656a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:ce:ce:a3:d2:55:fb:7e:cf:bb:34:92:a8:
b7:2a:c7:8f:e0:ea:95:a3:f0:74:57:88:26:85:ce:
2f:58:93:79:6c:67:03:7f:bb:22:cb:5d:08:d0:fb:
10:51:46:7e:c7:27:3f:6e:3c:18:e5:7b:c5:d1:3a:
c8:59:41:0c:ff:5d:b7:01:a0:42:88:3c:95:af:d1:
b2:b4:fc:9a:30:3f:f3:7a:b8:4c:3f:98:6b:97:d5:
0e:29:8c:ce:0d:20:69:36:47:ed:55:15:5c:82:81:
44:b7:77:05:4d:35:e1:b1:6c:a2:6c:f2:b8:76:8d:
b9:b5:3d:3a:1a:aa:80:85:a0:11:48:d9:7a:d3:c6:
3f:6f:ff:82:af:6d:e0:7c:a5:a0:97:89:a1:3f:d7:
33:c7:d7:38:9c:c5:40:26:9f:cf:25:17:b0:71:e6:
00:83:df:47:bf:75:81:8c:d0:d5:81:d2:72:2a:00:
8f:fe:86:c0:90:3f:38:fc:d8:f8:8e:ee:68:13:9a:
7e:2f:0e:de:1c:01:c1:9f:94:6c:11:b4:5b:6f:03:
d9:25:32:35:b8:f3:65:61:b1:b6:52:44:46:13:3c:
a3:a2:58:86:d8:f2:27:ee:81:47:8e:7b:55:b0:d8:
69:f6:6d:c6:3f:c2:bd:96:50:6a:64:f0:2b:a6:78:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:EC:8B:83:D9:E8:E9:68:AD:A9:33:CA:01:93:DD:71:5D:65:6A
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:01:48:07:f6:63:59:ad:99:e5:2c:9d:84:2f:d5:7d:c6:
d5:b9:d7:cd:73:3d:6c:aa:91:b9:de:d1:bb:04:bb:ec:88:f3:
73:21:92:4a:99:f6:c9:02:25:95:28:b8:8e:3e:66:7d:27:48:
1c:b0:85:92:eb:6e:b6:a2:4e:8d:d2:5b:fc:cd:e8:84:ef:b3:
fb:41:bb:59:aa:e5:47:66:d4:c5:8b:ed:bc:54:38:31:d7:7c:
94:7a:5b:f5:ef:ab:c3:41:fb:0c:5d:f1:e7:30:71:30:b8:5b:
e8:a8:c4:d2:02:6b:bd:a4:89:db:04:01:93:75:db:ff:6c:af:
5a:8e:1e:af:3f:3d:6d:bc:32:54:05:da:3c:41:bb:d6:e5:75:
26:a4:cb:4d:a1:52:31:0f:ce:f5:3d:3b:86:b5:2a:94:5e:ca:
6b:a5:e8:5c:21:b3:50:e3:5e:81:36:9b:da:11:3e:23:1f:6b:
56:98:4e:7a:35:19:d7:be:f4:de:86:89:17:a2:b9:67:ff:24:
c8:42:59:a0:7e:a6:f2:e5:8e:50:e9:4d:3d:c9:60:44:8a:b5:
cc:ab:a0:4a:a5:ca:df:4d:14:18:ee:d8:6d:78:6c:23:c6:af:
89:e2:99:d2:f0:46:6e:7e:e7:40:94:c2:9a:57:57:71:57:0f:
81:25:0d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:06:04 2026 by rpki-client