Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: JJszK3DvSEAMAwzg3SQ5gT/JQzCRJFvIkbE4vV06nIA=
Subject key identifier: AA:0B:59:33:38:4B:B9:7C:4E:B5:72:DB:2A:33:55:F4:2E:2A:70:8E
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019E1DFE65D377368415193359E4644F7FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 126D
Signing time: Tue 12 May 2026 21:01:11 +0000
Manifest this update: Tue 12 May 2026 21:01:11 +0000
Manifest next update: Wed 13 May 2026 21:01:11 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: HHo4CZzz2Etx/r4BpKpsKgMfoBYPIOjeTx1t8/8b2R4=)
2: bOTyO1jGNXvTUzXi3EztaGmz3K4.roa (hash: 5vKYEUvZMHjV6NuMxD9j9IkwxVI/1099N+1KTRpjjYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:65:d3:77:36:84:15:19:33:59:e4:64:4f:7f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: May 12 21:01:11 2026 GMT
Not After : May 13 21:01:11 2026 GMT
Subject: CN=aa0b5933384bb97c4eb572db2a3355f42e2a708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a2:0a:e9:20:5a:24:7d:33:9e:e8:46:8d:7e:
7e:fa:2a:e4:15:af:e5:e2:13:a1:a5:13:61:92:3c:
cd:55:4e:ec:99:f1:8a:ba:3c:bd:76:f8:72:6f:1a:
c0:35:f8:27:0e:47:05:55:bd:52:d6:cc:41:8e:79:
8e:fe:14:b1:e1:a5:d4:2d:d1:26:9b:d2:00:c0:3b:
c4:27:8e:cb:7d:53:a6:e8:4f:eb:d1:ca:a8:00:ca:
32:83:a4:34:3e:f5:82:54:b8:be:0f:4b:26:c3:9b:
5c:4a:7c:a2:f8:3f:90:4f:c3:cc:43:1e:c7:fc:44:
8a:64:df:e8:00:a2:36:63:b0:70:04:96:09:7e:1c:
fa:7b:14:09:82:7c:9e:6a:46:89:08:ff:ca:0a:a5:
cf:19:2e:2b:8a:74:b4:9c:20:db:5e:fd:41:7c:6c:
bc:3c:3b:5c:2e:3a:fe:e3:83:c0:d6:a2:68:62:66:
3e:a8:10:38:d6:41:14:e1:71:69:43:32:19:8a:e6:
49:7b:16:71:a4:d4:81:f4:37:72:e7:74:71:a2:d6:
1a:97:7b:40:a2:ff:17:7c:ff:2e:c2:2a:a4:72:71:
83:d4:c8:71:3d:cc:06:40:b9:4b:96:83:c4:d9:b1:
ef:3d:66:35:49:e4:06:ba:e6:8e:6e:e9:d9:66:2f:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:59:33:38:4B:B9:7C:4E:B5:72:DB:2A:33:55:F4:2E:2A:70:8E
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:43:21:52:85:70:18:24:a6:be:f9:8a:aa:d0:1e:0a:df:7e:
f9:e9:86:c0:2b:8b:9b:71:ea:b1:e4:2d:7c:a3:4e:42:6b:3d:
a6:08:15:42:5b:39:dc:4b:7f:a1:e8:9b:35:cf:d3:aa:c5:94:
46:2e:1d:0b:93:94:f5:10:e2:5e:cb:13:b5:e1:90:ce:79:c4:
0b:2f:9b:4b:15:3a:78:31:8d:44:83:38:c9:fb:95:8e:7e:65:
be:36:4e:4a:aa:ce:72:a9:84:88:4c:79:9d:06:5c:bf:27:ba:
26:03:9d:77:da:70:1c:da:1b:16:2f:4d:6a:6f:9e:92:4d:99:
b9:74:66:43:07:0e:6b:53:cb:ae:45:d5:72:61:15:ca:9d:6d:
3b:d0:3b:df:35:a4:8b:b2:60:4f:e5:dc:28:29:26:f4:9d:0d:
9d:e9:da:2e:34:9f:07:c0:bf:00:b2:26:a1:87:ef:4d:09:cc:
b4:37:e1:df:c4:32:08:6f:4c:52:45:f5:1b:af:a3:ab:b6:24:
83:69:f2:a0:6d:e1:67:f3:9d:52:1f:a2:3c:11:2e:49:74:9e:
ea:35:2f:13:3a:e7:23:65:a6:81:dd:bf:02:16:21:6b:70:59:
51:4a:42:cd:78:22:87:8b:d3:87:df:85:90:58:54:04:2a:98:
6b:4d:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:07 2026 by rpki-client