Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json)
Hash identifier: olQEqXjaek1I5QkyLLKJHLm0Xdrgpma+3CeX5vc9AkA=
Subject key identifier: C2:EB:E9:D3:40:E6:40:46:C9:CD:33:BF:5A:18:39:F7:1F:CC:07:92
Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200
Certificate serial: 019E1F10F5FDF3D04A34B4E3E6830EF9C9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 02:01:05 +0000
Manifest this update: Wed 13 May 2026 02:01:05 +0000
Manifest next update: Thu 14 May 2026 02:01:05 +0000
Files and hashes: 1: VmSEi88h8EdX70CoZBoX1PGWIw4.roa (hash: cwT1GcadLbcYd+EhAmWFsga6gtnL8WtN6n2eRtcoP6o=)
2: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: xLotyWCvZ7se+QQOwVrkoZfQ0vp7mW6REpoRTsfGJ18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:f5:fd:f3:d0:4a:34:b4:e3:e6:83:0e:f9:c9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200
Validity
Not Before: May 13 02:01:05 2026 GMT
Not After : May 14 02:01:05 2026 GMT
Subject: CN=c2ebe9d340e64046c9cd33bf5a1839f71fcc0792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:32:05:b1:bd:f4:ba:ab:76:11:aa:12:44:
bd:70:80:0b:15:58:34:29:a9:7f:05:23:7b:ae:97:
56:90:cf:f0:d4:e2:9e:1a:3e:9d:4b:43:dc:78:54:
4b:be:d6:a5:4e:9c:d8:41:5b:5a:ef:06:ff:ee:ff:
77:1b:0c:7d:9e:a3:72:29:24:04:94:16:4b:db:f8:
12:06:51:c0:6c:3e:51:8e:fd:b4:06:1c:34:66:60:
72:25:47:66:ff:19:eb:9d:b1:9a:0c:74:12:3e:76:
c1:3e:f7:84:32:7b:5f:cd:cd:b2:cb:2c:25:e3:d2:
82:ea:0a:3d:32:c6:2d:ad:c0:9c:e7:2c:29:ae:69:
f1:c6:b0:c0:bf:7c:46:de:e9:e6:0b:43:9b:cb:1b:
a8:b4:f4:86:4c:9d:da:7c:54:87:38:ef:9b:cc:4f:
93:aa:3a:8d:6d:c3:7a:d7:b2:53:0f:0e:55:65:ab:
b1:4b:82:27:c4:28:a5:bb:79:cd:59:30:7e:1e:3f:
72:62:a7:df:95:7a:8c:de:dc:8b:69:5b:3b:f2:25:
6e:e2:37:3c:34:75:30:74:5b:0d:b0:b6:47:ad:07:
37:57:ba:ff:44:6e:ee:c6:dc:3e:2c:9d:a3:52:55:
fc:e3:f6:e3:89:84:11:95:78:72:31:cf:dc:6c:78:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EB:E9:D3:40:E6:40:46:C9:CD:33:BF:5A:18:39:F7:1F:CC:07:92
X509v3 Authority Key Identifier:
keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:01:85:cd:c8:8b:2b:ba:9e:99:b2:12:34:3c:a1:e7:1f:
9a:5e:f2:dc:a5:31:df:60:d2:34:cd:70:a8:b8:2b:16:21:65:
62:0a:ac:35:17:ea:1f:ee:c2:66:1d:c6:99:a5:b6:22:ba:35:
bd:fb:7c:d7:f4:dd:ea:fa:82:da:e8:5c:9e:e1:60:33:59:ed:
64:db:e3:9a:1e:a1:f3:94:ee:64:8a:9a:2d:27:2b:69:8b:a5:
96:cd:99:6a:3a:24:06:13:74:3b:57:ef:55:57:0e:8a:8d:b2:
44:b9:13:ec:8b:06:1f:cd:4c:9a:f6:b0:b3:8e:f7:0a:59:38:
2a:a5:2a:4d:86:c9:89:63:bb:4f:b4:53:c6:59:73:fb:32:41:
25:9e:cc:d3:69:8f:25:b6:96:99:90:a6:56:95:e7:53:dd:bf:
76:a7:a9:8f:04:5d:06:8d:c2:1d:13:de:b8:c6:cf:b1:a4:3a:
67:5d:c6:4a:3b:0b:68:b4:13:f7:3d:3b:8b:b0:e5:93:13:3d:
db:5a:df:71:c8:2f:0e:fc:42:d8:88:42:80:62:ee:52:da:02:
80:43:1d:e2:6e:01:71:b4:48:9d:d8:de:fe:0c:66:c4:16:73:
d0:22:39:69:92:24:e3:96:9a:f8:24:ed:1d:97:5e:9b:43:51:
f8:4c:67:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:31 2026 by rpki-client