Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
File: AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft (raw, json)
Hash identifier: j2xDokH6xBZqqR5DJsmzih5A/pHVYKSbdqv0Xnlhq+U=
Subject key identifier: 88:E4:0A:19:C8:EB:4A:0F:32:88:0F:18:4C:0A:F4:BB:E8:FF:B6:DD
Authority key identifier: 01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
Certificate issuer: /CN=010600be698c1ab97863ce5915911265cb5a3c9f
Certificate serial: 019F916DB47CD6534906B76BB6E31FC8142F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:53 +0000
Manifest this update: Fri 24 Jul 2026 00:01:53 +0000
Manifest next update: Sat 25 Jul 2026 00:01:53 +0000
Files and hashes: 1: 7BjvQpy7047hVApDh8x9Qe4DOoo.roa (hash: kKvjJ/MF8w1jZR9VtACZyBX/W/6HjlaX9dgOqUUswo4=)
2: AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl (hash: recYyO14SE29QaV5Vna/9LGUgDYTlK8Mv+F59FkfIWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:b4:7c:d6:53:49:06:b7:6b:b6:e3:1f:c8:14:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010600be698c1ab97863ce5915911265cb5a3c9f
Validity
Not Before: Jul 24 00:01:53 2026 GMT
Not After : Jul 25 00:01:53 2026 GMT
Subject: CN=88e40a19c8eb4a0f32880f184c0af4bbe8ffb6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:73:b9:0f:76:18:2c:7f:0f:0c:5f:da:4a:29:
8f:58:8f:59:d9:1c:33:0f:71:18:15:e9:5e:8a:8c:
66:4a:0b:dd:8b:4c:cc:51:61:eb:dc:07:4a:3b:01:
20:37:31:a0:58:20:d2:d0:30:4f:6c:52:10:71:a9:
b7:5c:95:0e:94:99:e9:0b:8b:47:cb:3f:0b:4f:2d:
d4:83:24:46:55:11:ec:cd:20:73:85:9a:21:2b:47:
f6:98:1f:92:82:9d:ce:65:68:37:34:ac:ef:ea:53:
59:58:fc:f9:ae:73:b6:cf:c7:e0:42:28:99:d2:e0:
66:6f:82:27:26:ba:81:20:77:b8:28:68:4b:8c:69:
f7:35:3e:64:83:55:12:f0:76:ce:87:83:cf:a6:96:
bb:16:4a:08:36:e9:ba:f5:29:99:02:46:ec:5b:72:
63:11:4c:aa:b6:62:83:8d:b8:7d:f2:3a:66:af:49:
e0:d0:35:58:ec:f1:10:6e:fe:87:05:96:cf:f9:c9:
9e:76:e4:78:84:56:40:df:55:70:c0:76:29:fd:84:
28:e0:29:e4:07:f3:33:93:77:58:f0:56:12:98:79:
88:d6:72:27:62:64:06:e3:11:d0:96:a1:3c:21:45:
17:a8:8c:0e:d2:ac:fb:d0:47:10:82:e1:bf:3a:8b:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:0A:19:C8:EB:4A:0F:32:88:0F:18:4C:0A:F4:BB:E8:FF:B6:DD
X509v3 Authority Key Identifier:
keyid:01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a5:bf:06:38:5f:d6:43:c7:83:4f:ef:bf:94:bd:7c:a6:e7:
5a:34:b2:7c:8d:25:8e:1b:88:90:0e:d9:60:da:a1:cf:93:3b:
59:4f:b2:c6:d0:68:5d:c6:2b:f6:d1:35:4e:41:e1:13:88:d3:
4d:ca:34:4c:65:e5:10:59:d8:e0:a0:29:65:27:7a:be:e4:6b:
f9:47:f5:7e:33:21:8d:fc:99:34:91:c1:0e:12:7c:b3:ec:4d:
65:15:7b:ff:39:11:72:e2:f9:56:fd:eb:a1:d7:b7:83:d9:ab:
8a:cb:d5:d1:ef:34:3a:18:f9:0a:4d:e0:ad:67:fa:4f:f2:1f:
da:bc:84:d5:e6:50:ac:11:0a:07:59:bf:81:cc:7d:b8:91:62:
0e:c6:6d:2a:9a:25:aa:ec:74:b1:c1:9e:37:4e:62:1e:c8:36:
ba:f2:3a:96:aa:3c:e9:36:45:f5:b1:d2:8a:3f:e4:c6:13:b2:
68:27:c7:77:39:ce:c5:21:38:f4:b4:a5:ae:10:d0:1c:79:ee:
6d:45:5b:47:92:ec:ba:df:80:a8:5c:e3:60:ae:f2:ee:97:de:
4e:5c:d4:35:7c:f1:48:3e:d3:f9:e0:f4:3b:f8:89:22:e4:07:
f6:71:8e:14:d4:da:cf:c1:4a:ba:eb:17:b1:46:bb:9e:e4:54:
6b:19:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:46 2026 by rpki-client