Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
File: aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft (raw, json)
Hash identifier: 8VHgg+4tmvJXmjQD/TJQqJv0p3P5ct5hL5gqcZBF6hc=
Subject key identifier: 98:C1:5E:2E:D5:D3:FB:CE:B2:2C:38:1B:DA:B3:6A:BD:CA:FA:CF:33
Authority key identifier: 68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
Certificate issuer: /CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Certificate serial: 019E1DFDEDFAFFC32FEEFB1EA9B0FE5EC548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
Manifest number: 28
Signing time: Tue 12 May 2026 21:00:41 +0000
Manifest this update: Tue 12 May 2026 21:00:41 +0000
Manifest next update: Wed 13 May 2026 21:00:41 +0000
Files and hashes: 1: 48sdTzxbjKVEtAcZ5EVnyPIZks8.roa (hash: VPE6Lqgx3V0cWcsIbS8O2OQtygXox6wdekMUpfvZprc=)
2: aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl (hash: AZoDW/GBJrlM7Pbqj3fcSegBZofSrssn6ce5czcVNxw=)
3: pnv_wdpav11svFAgZJ0ikU2MOaQ.roa (hash: KkwudM8brPnGduLw6szEoKuNH3PPwzz/uTjBNtmKwGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:ed:fa:ff:c3:2f:ee:fb:1e:a9:b0:fe:5e:c5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68248a69aa3d36b8411eb9469ff62c6b51df19fd
Validity
Not Before: May 12 21:00:41 2026 GMT
Not After : May 13 21:00:41 2026 GMT
Subject: CN=98c15e2ed5d3fbceb22c381bdab36abdcafacf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:96:ab:a3:35:d7:2e:0f:91:7d:08:c0:74:
e3:2c:fd:3a:c6:4f:14:cd:3b:a0:06:75:0a:af:8c:
71:ae:b2:86:2b:56:38:68:87:6d:7b:5f:a4:53:55:
06:9e:7e:ff:e6:03:2e:1f:67:f2:41:c0:b9:fc:50:
a3:58:6c:0c:4e:5d:a5:40:b7:e6:7e:1c:64:d0:9c:
13:e9:7d:79:2a:b6:5c:61:30:88:f4:03:26:bb:e6:
51:7c:fc:45:72:d1:d1:06:17:3c:23:71:dd:f9:b5:
e8:fd:80:be:14:27:6e:15:90:d8:d5:ed:73:a1:27:
2d:70:4d:11:fb:c5:95:ed:f2:0e:e0:8b:2d:2e:95:
42:0e:d1:ed:44:e9:29:77:8a:99:ba:58:7e:e5:b7:
48:db:47:d8:40:24:51:0f:88:5b:ad:4b:df:0e:6e:
bd:a7:36:60:73:31:28:a3:53:52:cf:5b:8e:22:bf:
b0:04:23:55:52:a6:2b:41:61:2b:ab:ed:de:e0:bc:
74:99:90:bf:34:a5:3f:47:c8:ec:6f:76:33:28:a9:
e1:92:5e:f9:34:f1:af:49:e1:2d:44:fc:30:f4:0b:
cf:01:97:32:63:29:0b:56:59:04:9b:3c:c9:e8:7e:
6c:11:3f:90:e3:7b:d4:66:98:67:46:60:c7:96:e8:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:5E:2E:D5:D3:FB:CE:B2:2C:38:1B:DA:B3:6A:BD:CA:FA:CF:33
X509v3 Authority Key Identifier:
keyid:68:24:8A:69:AA:3D:36:B8:41:1E:B9:46:9F:F6:2C:6B:51:DF:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCSKaao9NrhBHrlGn_Ysa1HfGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5dc789-37e3-4595-94b0-911d9f46cb05/1/aCSKaao9NrhBHrlGn_Ysa1HfGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:35:03:2f:53:f8:ed:78:c6:9d:87:10:37:d2:84:8f:be:60:
5d:77:b3:2b:c2:b2:0f:24:0f:0f:e2:eb:98:f8:8d:92:26:44:
b4:00:6d:b8:cd:0f:aa:92:ff:d0:e7:44:ba:6e:6a:ae:67:bf:
6f:44:aa:c0:d5:7e:03:03:16:6f:7c:6a:9e:d6:0f:61:1f:20:
93:7c:89:a6:b7:50:0a:ad:04:1c:b0:ad:a8:4f:f4:b7:11:b7:
fc:df:64:1b:ba:b8:b0:4f:c5:b7:08:dc:48:ac:fa:a0:e6:f3:
f0:e3:2c:f8:6c:95:1d:aa:05:7c:4b:67:8a:1d:73:ce:fb:7f:
30:b5:a3:bd:07:16:5b:05:8a:b8:bc:a1:8e:df:f4:d1:90:b8:
9e:6f:e9:9b:b4:71:10:5b:f0:a5:a0:02:96:fb:eb:b0:f0:f8:
fc:27:19:9b:e7:66:ab:3d:21:4e:a2:f0:1d:c7:06:58:c7:d0:
d9:61:1d:bf:56:d8:9f:72:d7:5a:f2:32:5f:40:cf:22:7f:7b:
b5:1d:66:6b:1d:f3:8a:32:c7:af:0d:4c:89:6f:df:71:c9:8a:
3d:14:41:cd:4b:08:1f:47:b0:a2:08:f5:16:28:e4:09:39:7f:
e6:a1:37:14:c7:d5:4c:86:05:dd:eb:cc:7b:ca:8c:48:21:c2:
6d:61:22:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:58 2026 by rpki-client