Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
File: aYhRnekYGF-24euv0eCDXKoRMuQ.mft (raw, json)
Hash identifier: DOCtPsl/nBBG8Lb6lajs3b0Ecsb9eDA4g74A4LINeD4=
Subject key identifier: 0C:B5:24:B9:66:06:CB:E4:72:8A:CE:76:35:59:42:EA:40:F6:C4:D8
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 019E20919E0D157D690C282F03E59A4F1041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
Manifest number: 13D0
Signing time: Wed 13 May 2026 09:01:14 +0000
Manifest this update: Wed 13 May 2026 09:01:14 +0000
Manifest next update: Thu 14 May 2026 09:01:14 +0000
Files and hashes: 1: Rj654wxOc7CYmhdeFWwzAPTGmcY.roa (hash: bE/60tP6y/3xEx8we1t/vv11WKgWD0rrGL4Yu6/Wkw8=)
2: UNFdj_dmEx775tbeS-AdmcBAiAE.roa (hash: GIoAJC41bvDl3yvA5gqVhCuJLL8h9+anwpxNy9MCtyo=)
3: aYhRnekYGF-24euv0eCDXKoRMuQ.crl (hash: rKv1J6z8bf6aESlKnuxB5idOlb0Do6rbvPyfsYra9hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:9e:0d:15:7d:69:0c:28:2f:03:e5:9a:4f:10:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: May 13 09:01:14 2026 GMT
Not After : May 14 09:01:14 2026 GMT
Subject: CN=0cb524b96606cbe4728ace76355942ea40f6c4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:ce:f8:b4:7e:b8:81:2f:7b:f8:86:c5:b4:
93:f7:aa:97:af:0c:fd:f4:8f:b5:ce:6c:c7:2e:ce:
27:fe:fb:b8:b4:43:6f:3d:cc:be:33:23:c1:02:b2:
02:41:e0:29:69:4f:9c:96:15:27:94:53:75:a5:c3:
2a:83:0e:05:9c:f2:fb:70:31:02:fb:d9:ea:d3:b8:
3f:87:6b:1f:f4:27:c9:51:9d:6e:94:a6:ae:0c:37:
47:8a:2b:ef:94:09:fb:e1:90:6b:88:97:73:c3:24:
b6:7a:c7:c2:33:f3:27:69:27:93:9d:c2:39:bf:54:
9f:50:55:1d:cb:30:91:8a:e3:fb:32:e5:f9:c5:b6:
99:2d:ff:e7:aa:7d:ee:15:b0:9a:26:46:3a:af:40:
6b:e1:f8:3b:66:f2:69:a6:f0:67:a0:e0:71:bf:1c:
56:0c:a2:86:a0:16:5c:ca:9e:f4:ed:46:86:da:8a:
20:e4:38:82:77:77:cd:06:73:6e:86:8b:58:de:1b:
31:d8:62:ef:8b:56:8f:e9:06:41:85:f3:f1:85:36:
a2:f8:fd:d8:fb:fc:01:1f:bb:47:db:d6:45:a8:aa:
44:b2:18:ee:97:34:39:3b:78:27:5a:be:3d:75:12:
d5:b4:e1:6d:bb:59:b8:b4:d5:c6:5f:8c:5f:58:3b:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B5:24:B9:66:06:CB:E4:72:8A:CE:76:35:59:42:EA:40:F6:C4:D8
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:61:9c:ce:b8:ca:d6:c1:6c:7b:e3:28:ca:b9:83:b6:95:aa:
9d:ea:90:01:17:f6:e9:d2:1e:ac:55:c7:40:db:05:f3:d8:c2:
b0:c4:49:b6:b0:bd:a3:77:68:91:6d:e0:05:54:53:41:5d:63:
77:8d:e6:50:ce:7d:3f:86:c1:82:fd:f0:98:4e:3f:38:3d:b0:
69:00:34:f4:4d:02:29:a2:79:18:2b:5e:60:4b:ee:cc:97:65:
e4:28:35:3d:38:bd:9d:32:f1:ea:d3:1c:6e:1e:ba:69:da:36:
c5:36:6d:28:2a:da:c6:43:e7:83:99:91:f4:bb:5b:17:10:a0:
a0:16:26:13:6b:32:35:1a:6b:ef:7c:17:9a:af:8f:50:01:52:
4a:1c:21:d0:e4:34:db:e4:76:c4:be:78:1b:24:a1:61:3e:e3:
05:1f:e3:83:47:4e:a1:7d:c2:05:f6:ca:df:bc:bb:7f:7a:c0:
f2:8b:08:c3:3e:14:bc:c6:ac:81:ba:4b:de:90:96:7f:96:df:
48:fd:0b:4c:94:45:b3:85:05:49:44:7d:59:f9:98:2c:30:f2:
9c:24:af:ca:1c:a7:5e:16:a2:fd:aa:07:49:0a:10:a6:5f:04:
b1:86:be:98:01:4e:93:13:a5:67:34:2f:0a:6b:09:37:74:3a:
c5:02:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:18 2026 by rpki-client