Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
File: aVu9VCkSpm_uajQSijqM9wl9xps.mft (raw, json)
Hash identifier: rK2Qx0+dO4qwABhGXwR3jHeXxMsOZKBXYVvqGbCpTyw=
Subject key identifier: BB:33:D4:8E:95:46:5B:13:22:67:30:02:0F:BD:6F:77:9A:4A:DF:60
Authority key identifier: 69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
Certificate issuer: /CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Certificate serial: 019F92B62287C78A8C83020F31B7BC8561A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
Manifest number: 09E2
Signing time: Fri 24 Jul 2026 06:00:37 +0000
Manifest this update: Fri 24 Jul 2026 06:00:37 +0000
Manifest next update: Sat 25 Jul 2026 06:00:37 +0000
Files and hashes: 1: aVu9VCkSpm_uajQSijqM9wl9xps.crl (hash: UrR9rlCu0MiR8ESlFSoG0AtVm3/ReOuhAHQMaC9WjCU=)
2: kD6KbG2HjbabIdgR62fkFbl77WA.roa (hash: zAnnRMEkzTArkloWuwnMCm7SOof7tWB+G0YPKyy3r8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:22:87:c7:8a:8c:83:02:0f:31:b7:bc:85:61:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=695bbd542912a66fee6a34128a3a8cf7097dc69b
Validity
Not Before: Jul 24 06:00:37 2026 GMT
Not After : Jul 25 06:00:37 2026 GMT
Subject: CN=bb33d48e95465b13226730020fbd6f779a4adf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:6e:04:5a:56:e8:f9:69:10:9e:16:93:9b:
90:2e:ce:41:df:83:b2:f2:e2:f2:64:34:0d:6c:67:
b9:5d:45:b2:40:9a:23:42:d6:0f:1e:59:c6:8a:0e:
36:bf:d8:bf:c6:82:45:a0:59:47:ee:4b:95:b4:49:
f3:d9:a6:21:6c:44:54:b9:d9:99:79:e9:63:e0:95:
eb:50:3a:7e:db:7e:89:e5:2f:6a:f0:1f:4a:3e:8a:
6e:25:bd:b7:dd:31:eb:ee:ad:94:c5:97:47:cf:d9:
91:f9:33:ba:b0:7e:2d:7d:14:99:97:94:4b:e9:65:
81:6b:7b:76:87:5f:20:cd:4a:ec:13:ee:94:b5:47:
be:df:3f:b3:37:a5:ed:9c:10:1c:da:7d:76:9d:ce:
d3:9a:4e:55:2b:f9:ef:6b:6d:84:bd:1e:c3:7a:fd:
1f:57:40:dd:0b:e8:83:de:86:a6:26:84:ef:af:81:
ed:2a:33:aa:1e:72:c6:44:c0:8b:27:21:1d:34:5a:
d5:45:11:ca:5a:f1:6b:8d:2c:61:2c:69:c5:5e:9b:
ca:9b:19:8f:4f:1c:69:b8:e8:46:54:79:a7:78:7d:
1c:c4:53:f4:95:3b:03:85:36:d6:bf:2a:f5:32:c1:
0a:34:2b:01:ac:9c:48:5f:ee:26:95:a7:37:6c:59:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:D4:8E:95:46:5B:13:22:67:30:02:0F:BD:6F:77:9A:4A:DF:60
X509v3 Authority Key Identifier:
keyid:69:5B:BD:54:29:12:A6:6F:EE:6A:34:12:8A:3A:8C:F7:09:7D:C6:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVu9VCkSpm_uajQSijqM9wl9xps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd9fd4-ccc5-43d6-9d58-9816c67a9262/1/aVu9VCkSpm_uajQSijqM9wl9xps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0b:07:b6:96:ca:07:3b:f4:ca:ae:40:1c:75:21:e9:53:f6:
ad:58:7a:52:a7:d0:c2:07:0a:6f:86:ed:a7:ed:cb:82:6b:ff:
74:d3:f9:28:4f:54:68:7a:b7:25:e6:fe:93:df:77:a6:9a:61:
48:99:1f:36:63:39:7b:da:17:5f:ba:c1:8d:24:9c:b2:c8:53:
f5:49:48:aa:cb:cb:15:f5:6a:be:fd:72:d0:02:3f:27:8b:9e:
63:a8:55:3a:17:c6:37:4f:a2:97:07:e9:9b:f6:58:57:1b:7e:
67:5b:e7:9d:73:d9:82:32:0f:28:5a:7e:9f:c2:80:33:c0:a1:
b4:b1:79:91:2b:fe:9d:75:9f:ad:a1:2c:b6:e1:a6:35:b6:c9:
e1:11:03:5d:fb:7c:90:f6:4e:72:6b:16:0a:90:a1:7a:77:0f:
9b:fe:a3:5d:7f:ee:6b:a4:a4:6e:1a:73:1a:23:fa:ca:99:b6:
f7:0a:4e:8b:b3:ac:4b:0f:9e:8c:f9:c7:40:f5:2b:a0:c1:4a:
49:c1:fb:b4:ac:5e:fa:a7:31:e5:38:43:77:22:6b:f1:fd:37:
88:01:19:a4:4d:3f:97:e0:83:b1:5d:90:01:9f:e0:96:d9:13:
09:0b:32:e5:9f:a7:69:90:5a:b7:bc:09:1f:2d:c7:2e:9d:48:
0b:e6:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:47 2026 by rpki-client