Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
File: AAeDpQgRvpLvroR8u1AXBoRHS8w.mft (raw, json)
Hash identifier: Qvabz0p7MEhw8fIUKf/fA5WWiE48hBTEC6uH8bkUp+I=
Subject key identifier: 55:FF:77:13:D9:A5:BB:05:B7:95:1F:15:41:74:24:60:45:DD:60:7D
Authority key identifier: 00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
Certificate issuer: /CN=000783a50811be92efae847cbb50170684474bcc
Certificate serial: 019F8F7F5F7A79523F97007C958F3F848DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:56 +0000
Manifest this update: Thu 23 Jul 2026 15:01:56 +0000
Manifest next update: Fri 24 Jul 2026 15:01:56 +0000
Files and hashes: 1: 09ONx1JAEFSVyl8QuOHfAL1GqRk.roa (hash: 8SkI6zA2uZDVv/cqiA4d/HF6r6rJ9SLykiFeZRrTxro=)
2: AAeDpQgRvpLvroR8u1AXBoRHS8w.crl (hash: 8oW9xI5J8ATGOMxB51HHbxflhHelPNaI7EslBG2eHhY=)
3: djEdq_IyqlZxFGQ5LAUHJATt1-U.roa (hash: lgvpCOomSarWZ6KVtAD88mpaPVpYu+f3+0KyOEVzSog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:5f:7a:79:52:3f:97:00:7c:95:8f:3f:84:8d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000783a50811be92efae847cbb50170684474bcc
Validity
Not Before: Jul 23 15:01:56 2026 GMT
Not After : Jul 24 15:01:56 2026 GMT
Subject: CN=55ff7713d9a5bb05b7951f154174246045dd607d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:05:fd:75:d4:4f:db:50:b0:53:b5:36:16:
45:ab:c3:b2:fc:3d:02:91:ca:87:01:01:27:28:65:
f1:08:34:b1:ea:a0:65:d8:ca:49:65:89:82:ad:05:
17:95:fb:0d:af:a1:00:1a:38:9f:4d:8d:f7:03:33:
48:38:93:02:9d:ae:f2:b0:93:26:ac:69:92:4d:3c:
56:31:ab:00:b5:7e:dc:70:9b:b0:17:97:e2:e2:66:
aa:13:b5:6f:eb:b7:dc:6f:de:1a:c2:79:37:b2:41:
5e:7f:d0:b9:ad:2f:d7:cb:20:b5:a7:d4:a8:8e:32:
07:de:78:86:73:11:cd:19:ba:75:3f:72:5c:ed:de:
ad:17:f1:9c:8a:60:3e:c5:8c:32:e6:78:a5:b2:5d:
cd:9b:7e:8e:33:08:d8:73:d0:89:66:07:1f:5a:7a:
42:7e:86:f1:c6:4e:2c:62:4a:5d:46:07:c1:1c:35:
1b:2c:74:5e:32:d3:c5:33:a2:be:55:4f:e3:a4:84:
d9:7b:7b:e8:ed:e4:ed:34:31:94:22:6f:e4:d6:bf:
31:e7:18:bc:8c:d0:f4:41:3e:f5:bf:dd:79:1f:5b:
91:b8:1f:df:c2:55:d9:cb:08:34:56:63:8a:f0:99:
28:2c:6d:27:8b:4a:1d:47:d1:ad:13:ce:3a:88:da:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:77:13:D9:A5:BB:05:B7:95:1F:15:41:74:24:60:45:DD:60:7D
X509v3 Authority Key Identifier:
keyid:00:07:83:A5:08:11:BE:92:EF:AE:84:7C:BB:50:17:06:84:47:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAeDpQgRvpLvroR8u1AXBoRHS8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/AAeDpQgRvpLvroR8u1AXBoRHS8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:67:85:49:46:ac:2d:30:6f:93:c7:98:7b:60:4d:f1:8a:8d:
05:7b:07:67:ac:8b:a8:f4:c2:e6:16:8e:c5:57:b8:29:6f:6a:
db:ae:83:b1:2e:12:c7:11:3c:ca:4f:11:d6:6c:43:be:6f:1a:
aa:5e:67:3b:12:b8:76:95:22:82:06:e5:15:ab:0d:24:ae:76:
17:28:38:43:06:73:70:54:a3:03:0f:a8:e7:c4:60:77:41:45:
f9:e6:b1:64:e9:be:03:9f:80:e2:9e:eb:d5:67:e7:e0:47:3a:
20:61:32:7a:08:86:2b:56:7d:e2:5e:64:4d:7d:9e:71:ff:5a:
ad:6e:48:12:67:1e:b3:8c:8e:15:db:e8:21:a4:13:60:6f:a7:
16:9e:f8:c2:45:17:ae:65:d7:de:3d:8b:0c:90:bf:f2:a1:0d:
4a:aa:c0:a3:b2:d0:34:db:45:27:2e:7c:74:46:cc:7c:ba:35:
9c:03:d9:a8:13:b9:09:12:a9:79:30:a6:1e:c4:38:bf:e4:94:
31:83:21:69:3c:c2:cc:3e:4b:eb:62:08:90:1e:06:32:ac:7b:
e3:a2:27:5d:b9:e3:b4:fb:96:91:da:54:e5:b1:10:ba:96:86:
4c:d6:30:d6:e5:58:ec:72:c5:37:27:ab:6a:e4:24:55:e4:62:
dd:96:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:24 2026 by rpki-client