Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
File: aQQsHyen14YkdQhwI9yXwzMPc8Y.mft (raw, json)
Hash identifier: q8rYCWwcqJG1rD70WbY59d2yqCT/u16v66v4aL2Ijoo=
Subject key identifier: CD:2D:A7:5A:8C:6A:A4:D6:7C:D7:C1:58:23:2F:3E:70:E9:DA:99:1C
Authority key identifier: 69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
Certificate issuer: /CN=69042c1f27a7d7862475087023dc97c3330f73c6
Certificate serial: 019F92EDE703E98BCB7B4DF25CAE8FB85683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
Manifest number: 1291
Signing time: Fri 24 Jul 2026 07:01:32 +0000
Manifest this update: Fri 24 Jul 2026 07:01:32 +0000
Manifest next update: Sat 25 Jul 2026 07:01:32 +0000
Files and hashes: 1: A2OoFVjt4hM-sMjMfHiUnzrNv-M.roa (hash: 6nA7grwYfCC8F9QlWfwY7V2uHRishBzwFCKkdr7sz1A=)
2: Z-DruXNSD3ojQuyP0eX2dyvzUPw.roa (hash: lMQFG5A2ZEM00HvhF0MbgWXroNtVKP+zZ/D7DoKQ2cs=)
3: aQQsHyen14YkdQhwI9yXwzMPc8Y.crl (hash: jKTFNcN1SR6y/u6QeNjeFA4XgScIGdKQ1+czEIM8wyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e7:03:e9:8b:cb:7b:4d:f2:5c:ae:8f:b8:56:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69042c1f27a7d7862475087023dc97c3330f73c6
Validity
Not Before: Jul 24 07:01:32 2026 GMT
Not After : Jul 25 07:01:32 2026 GMT
Subject: CN=cd2da75a8c6aa4d67cd7c158232f3e70e9da991c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:46:7c:92:79:08:0f:ca:76:64:3e:99:e4:
ae:56:db:a7:33:d7:b9:29:35:5a:a2:93:de:55:76:
ee:11:d9:84:90:d1:f9:8e:c8:f2:48:89:99:3f:95:
ff:39:50:93:47:9d:42:dc:97:41:f3:6f:fa:5d:3c:
09:54:40:fd:cf:a3:73:56:de:fe:19:cc:36:e0:94:
94:f2:26:58:8e:64:ff:ec:39:cd:0a:2e:dd:14:6e:
7c:dd:d0:84:0e:9d:17:5c:e7:b5:ec:8c:ad:79:b4:
59:01:3a:72:15:00:24:2b:e2:22:74:7a:b6:c8:a5:
ab:a1:68:90:38:aa:5f:b2:7a:36:85:90:6a:e3:0b:
64:dd:52:41:34:51:16:b8:e3:31:92:de:47:0b:df:
23:79:54:41:3c:c5:df:e0:54:2c:1b:74:c7:8a:de:
f7:df:29:88:9b:d9:da:f8:2b:91:9a:b4:e9:a1:bb:
8b:02:cb:c9:2b:b1:84:98:70:7a:7d:2b:35:af:63:
06:8d:93:6f:7c:9b:18:99:a4:b7:db:11:02:c0:64:
ce:0d:32:da:1a:97:4b:0b:4b:05:66:92:50:05:fe:
87:98:13:e9:59:68:d5:8c:88:38:24:cb:47:b7:7d:
e5:6d:a2:d4:aa:42:29:de:49:71:03:3c:c1:a6:b9:
14:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2D:A7:5A:8C:6A:A4:D6:7C:D7:C1:58:23:2F:3E:70:E9:DA:99:1C
X509v3 Authority Key Identifier:
keyid:69:04:2C:1F:27:A7:D7:86:24:75:08:70:23:DC:97:C3:33:0F:73:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQQsHyen14YkdQhwI9yXwzMPc8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4ae64b-f73e-408c-b4a8-cbb3d635d82f/1/aQQsHyen14YkdQhwI9yXwzMPc8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:d4:84:e2:9d:f3:ec:ad:65:97:2d:5e:f8:c9:f3:bf:3c:
ce:6c:06:2d:25:e5:40:f9:6e:c3:22:c9:cc:34:26:92:35:df:
29:e3:ca:2f:9f:4e:8e:b8:cd:42:7b:87:a9:66:60:ec:63:87:
d6:b8:b1:ef:19:e2:ab:f2:f8:bd:35:fc:1a:4a:af:e7:57:75:
4d:e8:ac:ab:a8:db:c4:a3:33:67:72:45:b7:bb:80:6b:07:e3:
ec:b8:19:e6:4f:e9:a2:ad:00:a9:7a:3a:45:34:80:54:9a:40:
fa:e9:98:cc:13:32:98:41:a2:0f:c6:10:f6:83:8b:76:66:06:
f1:55:bb:da:b9:55:45:ae:95:df:0f:29:08:cd:60:f0:a8:35:
d8:66:ef:c5:4a:c2:b9:9a:3d:2d:a4:6c:f2:c2:22:42:62:4e:
96:91:b6:8f:04:d4:98:c0:38:df:d6:f4:af:2a:97:d7:48:6d:
a8:2b:c0:5e:78:39:c4:03:c6:40:3e:60:16:21:78:26:f6:e3:
f8:ec:19:3e:b4:35:45:dd:c7:3a:3a:13:ed:19:36:45:78:b6:
73:ad:28:0a:2b:b7:c0:aa:38:92:9b:80:8f:83:fc:64:39:51:
fe:bc:2e:10:12:59:1e:2b:3a:02:d9:8a:dc:02:3b:55:a1:66:
24:f4:ce:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:10:30 2026 by rpki-client