Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: rgrBrTHuXQucRv0z1qwUUQZRoAR/6YMcxPq4A8xvv7A=
Subject key identifier: 88:45:2F:62:13:C9:93:E0:0E:AA:D1:AA:66:80:5A:3D:9A:44:CC:E5
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 019F9580C780E5A960678644462C3E95BA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 16E3
Signing time: Fri 24 Jul 2026 19:01:12 +0000
Manifest this update: Fri 24 Jul 2026 19:01:12 +0000
Manifest next update: Sat 25 Jul 2026 19:01:12 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: aVIrwJKr9/aDPOvXegk3nu/nLckgNNXh9gVFfL10gas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:c7:80:e5:a9:60:67:86:44:46:2c:3e:95:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Jul 24 19:01:12 2026 GMT
Not After : Jul 25 19:01:12 2026 GMT
Subject: CN=88452f6213c993e00eaad1aa66805a3d9a44cce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:6b:72:f3:89:ac:9d:bb:8a:8e:98:d3:1c:
31:1a:35:68:c1:2c:2a:17:66:bc:b6:6d:23:9c:32:
c6:22:0f:bc:40:03:72:b0:3a:3f:70:0b:fd:29:f8:
92:da:1b:b9:db:1d:61:9b:02:e3:99:f9:29:33:95:
20:d3:c6:35:63:00:05:a9:52:b4:de:10:bb:7b:3a:
9f:5d:13:3e:77:fd:94:19:64:4a:cb:69:38:99:2f:
6f:8b:e8:a5:40:3b:e6:b9:79:e6:18:b6:97:2a:71:
9b:34:3a:54:b8:7e:82:9d:f8:b9:65:95:c5:f2:bc:
01:97:5e:29:ef:09:ff:ef:2d:ed:6c:20:44:4d:a0:
12:ec:7d:1b:c0:c4:32:01:fb:e5:00:e9:52:70:d3:
ab:7f:9d:fd:64:ab:f0:5a:5f:46:f5:73:22:b4:10:
88:aa:41:05:32:b4:76:c2:c9:ea:29:01:15:1a:ff:
5c:48:af:20:05:05:42:6c:13:de:5e:60:a1:e5:30:
84:b7:d5:f7:78:56:8d:01:87:9c:5f:0f:48:ee:32:
79:d7:85:e8:6c:07:0e:c2:1c:c6:86:32:42:67:c2:
34:a7:81:bf:33:f2:6c:aa:0f:ab:2f:a1:85:3b:2a:
dc:e9:94:b4:e9:c3:75:8f:08:0d:b5:f5:b3:26:ba:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:2F:62:13:C9:93:E0:0E:AA:D1:AA:66:80:5A:3D:9A:44:CC:E5
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:be:32:2a:34:e4:b3:58:62:7e:d1:2f:35:2f:fb:5b:82:
61:e6:08:8b:78:14:d7:0d:42:af:62:a2:7d:46:18:18:e7:0b:
23:74:c9:96:29:8a:0a:a3:63:13:48:6f:fd:b8:d0:ef:9e:f6:
45:e8:f9:64:53:44:2e:0a:08:23:d9:aa:b0:49:6a:9a:86:8f:
9c:0c:68:91:91:8f:69:fe:18:23:13:c9:09:ee:5b:24:67:91:
72:50:8d:6e:b6:1d:af:6a:bd:4e:84:b7:77:b9:1a:93:46:bb:
a7:82:a9:5a:b7:9e:5a:78:7c:a5:dc:db:69:b8:a6:e2:39:6e:
78:69:81:62:7e:d3:27:da:35:9a:5a:63:d5:ce:b6:c5:02:18:
34:2c:8d:bc:82:b3:70:9f:20:51:4f:00:e7:8c:0b:ba:0b:c2:
dd:86:8c:b5:24:54:10:f9:9f:2d:ef:13:e6:7e:30:41:47:f3:
83:51:10:ff:85:94:de:e7:fa:ee:a5:7f:87:fb:7d:71:69:62:
59:64:67:a1:81:2c:bd:7e:57:10:fd:7b:de:c1:62:04:41:95:
b4:bb:8f:e0:9f:7a:45:c5:93:d6:28:24:b6:00:f3:5a:d2:93:
85:a1:83:bf:c9:45:a4:f0:95:90:ac:0d:96:b2:41:eb:ec:67:
db:42:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:39:10 2026 by rpki-client