Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: UncZfvK7KazAA7yLfP+7kArT1DOF8wgwJMgfuCk3r8g=
Subject key identifier: 16:F4:46:9C:34:F9:DF:32:DE:22:52:3E:86:07:FB:6C:63:79:B5:C2
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 019F9436F98929A5B4B9D8DFA8C5B7D0045D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 16E1
Signing time: Fri 24 Jul 2026 13:00:58 +0000
Manifest this update: Fri 24 Jul 2026 13:00:58 +0000
Manifest next update: Sat 25 Jul 2026 13:00:58 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: 6ssBiUn3kvrm1QG25GWgueoE7B0M2TkUtuJtJay2dd8=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f9:89:29:a5:b4:b9:d8:df:a8:c5:b7:d0:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Jul 24 13:00:58 2026 GMT
Not After : Jul 25 13:00:58 2026 GMT
Subject: CN=16f4469c34f9df32de22523e8607fb6c6379b5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:f8:65:24:d4:b5:58:7e:fd:af:f2:76:b0:
bf:fc:65:56:0d:00:4f:c1:af:3c:c0:ff:c6:5f:58:
82:cf:33:9e:fa:25:21:b1:77:77:7c:0c:03:25:9e:
52:69:03:19:00:d8:34:b4:6d:22:6f:f5:10:dc:85:
d0:ff:8c:9e:87:1f:26:a4:11:8b:b3:e8:9d:85:35:
bf:26:9a:aa:3e:b3:b6:89:f1:d2:fe:8d:02:1c:db:
fa:c4:c4:d0:3b:e7:04:f7:c5:a6:1b:1f:18:3a:c7:
d0:52:8e:c3:89:c3:fd:01:d6:80:5f:e7:7b:0c:c3:
bb:d9:4b:7b:b1:c6:1e:95:6f:22:27:83:78:d4:51:
d9:d9:47:5f:f0:fe:cc:6e:4d:55:92:b8:cf:4e:1a:
76:13:4d:cb:fd:37:e3:b3:81:42:85:4f:72:a0:b7:
9b:e1:d6:0e:5d:89:f6:a9:e5:1a:87:6c:c7:0d:14:
43:f2:0d:7c:8f:be:63:8a:60:82:97:de:1b:02:47:
21:de:73:68:a9:4f:22:21:b8:8f:05:ec:b4:9a:14:
ad:9f:b0:bf:f7:ca:a9:05:ff:d1:4c:b5:60:fa:cf:
1f:96:52:89:dd:2a:05:35:fc:80:4a:0f:e5:65:45:
e9:ba:25:d8:40:71:16:e3:89:cb:19:16:7f:c8:ab:
4c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:46:9C:34:F9:DF:32:DE:22:52:3E:86:07:FB:6C:63:79:B5:C2
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:60:0f:9d:62:b3:70:31:2d:90:b4:fa:db:41:0a:7c:fd:76:
7e:dd:a7:f4:f5:5b:84:46:bf:29:44:68:3f:c9:5c:8a:55:76:
59:ec:b8:8d:e7:67:17:c8:b1:a3:aa:f3:9e:1c:65:56:fb:43:
25:15:5a:d4:35:08:70:20:b0:bd:c2:e2:7d:42:96:07:56:00:
37:b2:18:73:cd:04:98:76:8a:df:50:0b:39:9d:6b:73:8b:7f:
39:83:04:ea:86:0a:bc:3c:18:25:8d:37:bf:e4:0e:ca:da:39:
b3:3e:f7:73:49:71:eb:65:27:55:ae:9e:3e:50:3d:67:0d:3c:
8c:33:44:88:87:42:7b:42:b9:72:64:1b:28:78:1c:a4:5d:18:
6b:61:53:1b:5d:df:9a:01:cc:95:86:b1:40:a8:e4:df:2c:b4:
ff:12:c4:d1:96:d6:24:e0:e2:ce:8f:55:fb:ed:24:e7:36:bd:
4a:50:87:86:ac:4b:d4:ef:7f:64:43:b4:ab:64:63:8b:89:fa:
86:8a:d9:8d:c3:0e:fd:6d:ee:13:bf:2a:7b:31:04:25:3e:a0:
91:a2:d3:97:26:2e:39:22:32:45:a5:a0:0a:43:56:59:4d:a3:
15:9c:8e:d2:ce:61:af:ce:c5:e4:70:c3:41:a9:e1:ce:9a:c7:
a0:10:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:59:47 2026 by rpki-client