Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
File: aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json)
Hash identifier: mp1AFH0QlGkfnbXkEPTHHPNTy0OCjIjoClHu+Lb5+bQ=
Subject key identifier: CF:E6:20:E2:1A:93:13:C1:7E:00:CA:C5:41:F6:C8:70:E7:47:83:9B
Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
Certificate issuer: /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Certificate serial: 019F8F476E3DD7268E860B3C58CA3CD81DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
Manifest number: 0203
Signing time: Thu 23 Jul 2026 14:00:50 +0000
Manifest this update: Thu 23 Jul 2026 14:00:50 +0000
Manifest next update: Fri 24 Jul 2026 14:00:50 +0000
Files and hashes: 1: T4UuZXBeaCSXXhb6vNH7Vy75_hg.asa (hash: hJkbS7Ns7tr/dUI7yRHtcG/eXbm7a0GJDdxjVlyXMNM=)
2: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: g9/Jet34/Jij63Nghne6tKnxllXLvIxELwMyIfATads=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:6e:3d:d7:26:8e:86:0b:3c:58:ca:3c:d8:1d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b
Validity
Not Before: Jul 23 14:00:50 2026 GMT
Not After : Jul 24 14:00:50 2026 GMT
Subject: CN=cfe620e21a9313c17e00cac541f6c870e747839b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6d:67:9a:30:ae:37:50:58:b1:e1:da:64:d7:
71:16:f8:b5:59:42:db:9c:b3:fb:5f:ed:e8:0d:aa:
0f:09:bc:ae:f9:59:66:75:4d:e9:e1:65:30:c5:ea:
32:70:0b:a3:d5:14:35:c7:25:d3:38:f9:39:97:68:
82:10:9d:c8:01:11:39:22:d2:1e:84:80:ef:0a:17:
b2:7a:19:ad:c7:0f:c2:a1:68:07:29:84:6e:6f:72:
85:f9:65:71:6d:a5:6d:7f:26:b9:d6:83:4d:7a:4d:
72:dc:7c:08:61:6c:8b:96:b3:93:0b:7f:f0:6a:9a:
3d:17:c2:85:61:56:f0:30:50:7e:46:c1:98:8e:bd:
a2:b2:dc:0f:32:65:94:ee:77:6c:33:80:8b:f2:76:
dc:f2:52:06:04:5f:70:6e:69:49:13:72:e5:cf:3c:
fd:5b:64:5f:0d:e8:f3:26:56:b1:44:e7:36:2e:ff:
42:b9:52:66:a1:2b:5a:01:66:9e:7c:79:c5:00:2e:
80:e5:a0:91:b3:53:2f:aa:f3:bc:b7:58:f4:4d:de:
4e:ed:ed:d9:92:43:7e:32:a3:55:8b:3a:71:47:53:
dc:f5:3a:2c:24:73:76:3a:2e:9e:1f:3a:06:9a:85:
e7:13:d9:e7:b8:84:bc:1b:73:96:1f:a1:a3:c3:b0:
7c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:20:E2:1A:93:13:C1:7E:00:CA:C5:41:F6:C8:70:E7:47:83:9B
X509v3 Authority Key Identifier:
keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9b:45:1e:f4:b4:47:79:07:60:ac:a2:9d:15:4e:22:7b:23:
bc:71:ed:7c:b7:1e:01:2f:e8:98:08:3c:19:91:02:1e:b6:ed:
cb:f7:c3:6c:dd:74:d5:c4:24:44:03:dd:09:94:df:d8:a2:83:
96:d2:83:a8:f7:32:17:4e:ae:2d:d9:90:9f:86:4d:44:3c:89:
9d:a8:39:b2:82:75:4f:3c:0c:ea:5e:22:95:99:9e:43:79:d0:
7a:34:24:1d:cd:35:59:e1:1b:93:4a:18:9b:32:ec:a4:fc:cb:
ab:b0:7f:b5:c8:4a:28:55:3c:31:02:0d:34:0d:10:37:08:ec:
3d:13:eb:4e:e0:b4:65:15:49:0d:fa:e6:8c:c3:41:74:67:8c:
76:b3:2c:08:9f:b4:2d:1b:f1:71:2a:b5:b1:9c:f1:ed:ed:eb:
e2:ad:d9:7c:f6:23:84:35:91:d1:52:61:ef:a3:df:14:52:1a:
e8:24:27:89:ca:83:28:55:8a:d8:5e:5a:8d:a3:55:95:5e:6f:
a7:de:2c:23:4f:e2:42:54:c2:86:bc:d9:14:60:60:f1:a1:ba:
bd:b0:41:63:a3:09:58:25:9f:5f:59:70:af:0a:8a:a8:ee:04:
4c:8d:de:53:c9:39:06:54:26:ea:3a:a3:2f:28:15:f8:9e:34:
79:62:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:37 2026 by rpki-client