Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: KQzzi7lM1DwI2+cDHV7pOWDPRejp0efCfxNu2N14Lm0=
Subject key identifier: 69:3D:27:0D:DD:94:2D:23:C4:1A:69:0B:88:D5:16:68:02:27:55:45
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 019E1DFE97E04C5CA6C7C47033C074ADBCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 0921
Signing time: Tue 12 May 2026 21:01:24 +0000
Manifest this update: Tue 12 May 2026 21:01:24 +0000
Manifest next update: Wed 13 May 2026 21:01:24 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: w1FJ887nxuwp+XvEPcd+2MHkAjdu7YmSXpca2g3fAP8=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:97:e0:4c:5c:a6:c7:c4:70:33:c0:74:ad:bc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: May 12 21:01:24 2026 GMT
Not After : May 13 21:01:24 2026 GMT
Subject: CN=693d270ddd942d23c41a690b88d5166802275545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:ac:6b:8d:8f:15:03:54:18:bf:85:7b:9d:
fd:cb:97:fd:fd:a5:61:8a:32:11:61:c7:60:e8:7a:
1e:d5:16:9f:b1:ff:c8:8f:d8:d5:23:ee:2c:ba:1d:
2f:73:1d:01:8a:0a:29:86:2c:6e:8e:e6:06:67:a6:
ea:10:07:0b:8a:77:98:d8:1e:da:f7:b4:e9:a6:02:
6b:4a:2b:86:54:5b:36:6b:bb:74:62:85:cf:76:71:
48:d5:0f:85:7c:53:04:c7:7a:ea:a2:13:c4:90:2a:
36:2d:73:97:36:91:7d:b4:90:09:a1:ec:1e:b5:63:
b3:e0:99:5c:76:aa:3d:f9:2e:2f:e8:ee:38:5f:62:
d2:ee:83:1a:bf:44:f2:62:96:03:7a:6f:f2:de:4f:
1b:88:7c:e2:e9:a0:d7:e2:09:af:27:72:03:56:79:
1a:01:c3:a7:40:e7:ea:d9:ec:b3:a6:42:94:80:c1:
93:06:ad:82:e6:f2:16:c0:e5:0c:82:94:be:79:df:
26:ec:02:af:09:ec:a9:3d:d4:e7:4f:0a:c7:71:01:
5a:a2:f8:ef:6e:21:d2:36:bc:6f:a6:28:da:f4:e2:
a2:c4:09:1f:3b:2e:f6:40:98:db:1d:9c:6b:5c:c7:
80:ac:04:a9:2a:ab:f8:14:2c:29:f7:d0:13:f9:b3:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:27:0D:DD:94:2D:23:C4:1A:69:0B:88:D5:16:68:02:27:55:45
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b4:04:a5:1a:e3:a6:d0:3a:53:b1:8b:28:d0:67:19:71:ea:
48:05:b5:7f:e4:3b:cd:ee:7f:7b:08:5b:95:6c:ea:82:f7:a1:
b2:5a:35:b0:48:41:e7:a5:ad:a3:19:57:3f:4e:85:eb:06:24:
e8:d3:1d:e4:8f:2c:92:05:37:96:08:0a:5f:78:cf:52:72:f2:
a4:7f:e6:18:aa:95:a2:21:08:be:ac:29:b7:b1:70:2e:09:63:
ea:e0:6a:88:25:a6:d1:f8:6b:ae:b1:fa:a5:43:51:3c:ff:ac:
9e:19:58:21:52:0a:64:14:db:ca:ae:dd:2c:e3:2a:36:93:d0:
0a:05:a5:ad:5b:d2:6a:8f:88:b4:88:ff:f9:8d:ad:5d:43:14:
4a:4d:e1:21:59:1b:08:2f:da:f4:bb:00:b7:1b:86:40:46:f8:
8e:1a:08:c1:0b:52:6e:a8:bf:28:95:3a:7e:5c:b1:3b:28:dd:
93:99:42:4b:7f:90:c3:62:d4:45:aa:14:ec:7e:0e:bc:b1:b2:
2b:5c:c7:44:88:5d:94:ce:69:eb:e3:6f:a1:69:2f:40:82:fe:
1d:94:63:b7:28:9a:40:a9:37:7e:2d:04:9f:ce:9c:19:e8:0f:
14:69:ed:5c:85:69:94:22:14:6e:96:ae:3d:ce:ae:9c:a1:bc:
8e:b0:50:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:44 2026 by rpki-client