Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
File: aEVaOTm6y6pZGMft1UZOEbocjN0.mft (raw, json)
Hash identifier: 3eEzPB8j25bqVyru/GsBjVDfw+ihdJm6u/mXEbf/1dE=
Subject key identifier: EC:97:5A:00:E3:9E:64:A2:95:D7:FB:36:19:64:44:94:21:A7:84:67
Authority key identifier: 68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
Certificate issuer: /CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Certificate serial: 019F90FEE02A6BBCD3785C4D3F30CA0B6C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
Manifest number: 042E
Signing time: Thu 23 Jul 2026 22:00:50 +0000
Manifest this update: Thu 23 Jul 2026 22:00:50 +0000
Manifest next update: Fri 24 Jul 2026 22:00:50 +0000
Files and hashes: 1: _XeETx4mh6Plm0BK-RBuP2zSujs.roa (hash: xDOylPin64Mcz52VO00yVSOPCA3wH6/qSwl1hwhbWC4=)
2: aEVaOTm6y6pZGMft1UZOEbocjN0.crl (hash: 86NPOQsRdjpmcNkqP1E/OGswPbe5g4tlXXiGfWwXWYY=)
3: yEqniktZbtzkmkZc_KMxAGvhuuU.roa (hash: pfRE4hx//8zmgvIA0elXhM8ZhL1kk+eFoYZAKrtL3rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:e0:2a:6b:bc:d3:78:5c:4d:3f:30:ca:0b:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68455a3939bacbaa5918c7edd5464e11ba1c8cdd
Validity
Not Before: Jul 23 22:00:50 2026 GMT
Not After : Jul 24 22:00:50 2026 GMT
Subject: CN=ec975a00e39e64a295d7fb361964449421a78467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:d1:49:bd:c4:fb:f4:b6:1b:2d:f4:6d:1c:
38:54:05:93:53:de:58:ee:2e:5e:ac:5e:05:5d:e6:
2a:86:dc:3b:c0:43:64:9c:76:6d:39:e0:87:b5:dc:
b1:01:57:4d:5c:d9:32:83:e3:0e:83:d7:b7:98:89:
d3:a2:f2:e5:db:86:66:ca:ee:d9:a8:aa:67:65:4f:
ac:bb:16:3c:24:00:4a:35:97:d9:73:db:4d:77:9a:
01:91:a1:57:73:1b:4a:1e:91:f2:cf:d4:27:ac:4e:
a0:21:60:bf:39:98:50:e1:7d:b0:6b:fb:97:96:27:
f9:07:cc:94:3d:37:5e:9f:c5:37:df:d8:40:cd:4c:
49:7e:62:1b:e9:9f:03:2f:d9:c8:18:34:15:a0:04:
d1:78:60:ed:b5:68:72:b5:bf:54:10:ad:e0:43:88:
97:e3:2e:25:c3:0f:62:76:56:73:15:a9:cc:11:01:
91:25:39:9c:2e:79:96:b5:de:59:d4:56:92:d6:c9:
76:7a:b3:4a:da:81:10:bc:42:12:ac:9c:ba:9c:c6:
df:96:ba:af:b6:08:b0:74:49:e6:73:ec:01:4c:dd:
11:ca:8c:6a:53:d4:44:53:19:57:0b:bd:3d:f6:3d:
a2:2e:69:31:6b:0b:5a:c3:3b:7c:ae:cd:eb:84:2d:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:97:5A:00:E3:9E:64:A2:95:D7:FB:36:19:64:44:94:21:A7:84:67
X509v3 Authority Key Identifier:
keyid:68:45:5A:39:39:BA:CB:AA:59:18:C7:ED:D5:46:4E:11:BA:1C:8C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEVaOTm6y6pZGMft1UZOEbocjN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/390e80-3214-4ac5-bb50-a26cb6429486/1/aEVaOTm6y6pZGMft1UZOEbocjN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:5f:9f:f7:76:13:5c:69:00:77:8a:ac:36:05:98:bf:ef:ba:
ac:51:b9:cc:dc:fc:8e:e8:33:6d:0f:2e:69:fb:bf:5b:23:77:
d2:cd:7e:74:fb:e0:63:5a:e6:e0:79:3a:54:4f:0e:76:c4:3d:
54:b7:ba:26:13:d5:2f:51:ab:29:46:7a:96:0b:61:0c:24:61:
68:53:06:7a:e9:cf:82:fd:ad:af:13:fd:c9:7e:3e:25:a1:04:
a9:e8:75:6c:dc:8a:72:d5:32:58:a0:e9:13:7c:b3:d7:a7:4b:
d6:4e:bf:93:26:17:34:c3:de:27:88:99:fb:1d:f1:a6:19:2d:
af:49:b6:c2:85:ac:f2:9f:d1:8b:42:5a:53:dc:92:e0:33:d5:
5b:40:58:65:80:85:ce:4d:fc:44:34:c3:67:b2:c6:bc:10:64:
13:ad:4e:de:48:d7:30:23:7e:1a:a2:c7:99:82:ce:23:db:0f:
43:3d:d0:c6:08:3f:c8:28:d3:f5:d4:31:18:56:5c:4c:fb:3f:
df:ae:b3:ca:2e:eb:67:78:5c:9e:6c:21:55:69:bc:a9:06:b8:
6e:5c:89:5b:45:20:99:62:55:25:93:8f:34:ea:02:0a:f0:b3:
47:bb:e4:14:8d:ce:8e:9a:c5:a0:23:3e:1a:3a:86:cc:d7:67:
b1:37:1f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:18 2026 by rpki-client