Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
File: aCMaUAoKgQjcekNYsQArH9vweZU.mft (raw, json)
Hash identifier: HilpaYw9Uh+C559MlGwpxk8/WlW/XGMSx9vsacxhlnA=
Subject key identifier: BD:F9:69:55:CD:98:E6:8E:94:90:19:6C:8D:DC:FB:52:E2:11:39:00
Authority key identifier: 68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
Certificate issuer: /CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Certificate serial: 019F9436FE62136CF765F3ADB30B03F8292F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 13:00:59 +0000
Manifest this update: Fri 24 Jul 2026 13:00:59 +0000
Manifest next update: Sat 25 Jul 2026 13:00:59 +0000
Files and hashes: 1: aCMaUAoKgQjcekNYsQArH9vweZU.crl (hash: e1r0ZHZCpTLCvUfjDHxD5SRUUkDGPRty7PTm7UnRdYs=)
2: hnuU_eck5x_jb8etQeMJYN7agCw.roa (hash: WjEdC6KQw2C4VlNncqPImg4Zkitm7oOt+PVE/RuPsE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:fe:62:13:6c:f7:65:f3:ad:b3:0b:03:f8:29:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68231a500a0a8108dc7a4358b1002b1fdbf07995
Validity
Not Before: Jul 24 13:00:59 2026 GMT
Not After : Jul 25 13:00:59 2026 GMT
Subject: CN=bdf96955cd98e68e9490196c8ddcfb52e2113900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:01:44:8f:c8:e3:59:a7:90:ee:29:a3:17:
68:d5:dc:d0:b6:dd:42:9a:88:f1:93:4a:6f:70:38:
b6:9a:d4:bb:df:a5:1b:ab:30:eb:da:6e:20:bb:b9:
3f:22:ad:4c:c8:0e:b0:06:8f:5c:bc:9d:fe:80:ab:
37:10:65:d8:ef:d7:5f:bc:c7:49:d7:6e:3d:5d:28:
17:20:46:61:3b:8d:3d:27:d8:38:43:19:6c:76:92:
6e:b7:cf:1e:89:37:e0:24:be:8f:42:63:22:14:4a:
b5:26:d0:9e:25:5f:34:49:ee:3d:21:13:3c:a8:4d:
fd:0e:8e:45:7d:b1:13:4d:39:2d:00:29:33:05:77:
7a:db:12:d0:72:c5:5b:e7:1e:55:74:4c:e0:53:fb:
8e:b5:04:13:6b:93:57:3c:d0:93:9f:a0:25:e4:70:
4c:1b:74:b4:23:c4:83:21:47:a7:f6:24:66:41:95:
8e:5f:a3:be:83:63:8f:c3:84:02:8e:ff:5c:73:c6:
b9:e8:fe:d0:f8:b2:f7:91:f9:8c:ce:54:92:8f:56:
d4:19:81:26:6c:3d:01:a0:a9:d4:3b:20:87:f5:24:
5c:48:b7:4b:5d:37:cf:d6:64:c0:cd:86:79:41:4c:
d5:5b:52:62:a5:af:12:4c:82:ba:40:d0:b3:bb:4c:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:69:55:CD:98:E6:8E:94:90:19:6C:8D:DC:FB:52:E2:11:39:00
X509v3 Authority Key Identifier:
keyid:68:23:1A:50:0A:0A:81:08:DC:7A:43:58:B1:00:2B:1F:DB:F0:79:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCMaUAoKgQjcekNYsQArH9vweZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/00b085-9966-4275-a52b-7f23b34686c2/1/aCMaUAoKgQjcekNYsQArH9vweZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:47:b7:d1:0a:85:8b:fc:8d:29:0f:60:03:ad:9d:da:ed:c8:
7f:4c:30:5e:1c:dc:43:61:41:94:e2:e8:15:e8:fa:10:c6:ba:
65:0a:17:67:af:28:2d:43:69:82:9c:d3:ab:ab:d8:b3:9d:ac:
09:b3:8f:32:18:16:d5:fb:98:b8:2a:c2:b9:0d:fa:7a:0f:1f:
f9:e2:cd:54:71:80:d9:42:fa:ab:3f:a5:93:f0:63:e5:07:60:
a2:32:cd:88:62:00:d1:0e:c2:d9:90:74:9e:6b:34:fc:a9:97:
67:58:29:b1:95:5f:f3:1a:9e:32:de:94:b9:bf:35:20:a0:e9:
46:c1:ed:14:02:eb:b4:ac:42:c8:db:53:fc:33:6e:3b:76:4e:
b6:f6:a5:da:0b:a3:4f:e5:2f:cb:1c:69:86:c4:f3:67:69:44:
35:29:5e:31:cf:f7:a0:c1:82:19:df:57:e1:d1:f6:b8:3a:47:
26:31:bf:b7:03:dc:7e:a9:e5:c7:b7:36:b1:38:39:a2:38:4e:
c7:15:74:79:0b:21:0c:7a:e7:aa:a6:f6:36:dd:6f:d5:10:14:
f7:c1:a2:7f:ce:80:80:67:64:a7:02:20:b4:57:5d:45:d4:2e:
b4:3d:f4:1e:c3:88:87:4c:27:1a:03:fe:28:83:8c:d6:9d:41:
e6:38:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:59 2026 by rpki-client