Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
File: aEZbnPs2jGnssOP-o7VCupxzAfQ.mft (raw, json)
Hash identifier: qAMyoZQT9m5os0pOuaoOBdd9wX/UNwITgo2TwlxstSY=
Subject key identifier: E4:F7:27:6B:47:D5:A6:16:9E:BE:8F:DF:F3:70:44:E9:7D:79:BD:49
Authority key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
Certificate issuer: /CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Certificate serial: 01A1DF4CB430EA235E4A1970E9F08F16B684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
Manifest number: 1811
Signing time: Sun 15 Nov 2026 13:01:48 +0000
Manifest this update: Sun 15 Nov 2026 13:01:48 +0000
Manifest next update: Mon 16 Nov 2026 13:01:48 +0000
Files and hashes: 1: aEZbnPs2jGnssOP-o7VCupxzAfQ.crl (hash: KDPuyuGVffg0EK7JCDjjb51m4WxbZCe3E7NsziYAOhU=)
2: c0z-_U_7s_3lnaiWBwRIuVlkh7c.roa (hash: EAYr21bopytQdXh3mLIBfLUMzK/qGgq6jONJ7Pmqm+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:b4:30:ea:23:5e:4a:19:70:e9:f0:8f:16:b6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4
Validity
Not Before: Nov 15 13:01:48 2026 GMT
Not After : Nov 16 13:01:48 2026 GMT
Subject: CN=e4f7276b47d5a6169ebe8fdff37044e97d79bd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:b1:a2:d5:3c:ff:0e:13:e0:06:0b:de:06:
81:02:92:84:18:74:9b:d1:a4:2c:0e:2c:65:d9:4b:
2c:f4:7e:ea:27:00:3a:87:bf:c2:fd:ea:b3:19:90:
f4:0b:6b:57:d6:78:68:7d:bd:95:3a:cb:2e:22:7a:
22:f6:0b:bb:56:24:95:c1:a5:cf:02:57:01:02:dc:
69:76:7d:45:62:38:97:3e:27:a9:8d:18:82:86:38:
76:a0:6f:69:cf:0d:19:62:ae:37:fa:9f:d8:44:0a:
14:90:40:8c:5d:32:f4:19:1a:f3:21:33:58:e2:43:
f9:40:d4:7f:65:eb:ca:ca:2a:29:6e:5f:f6:8c:54:
c2:fa:29:7f:58:ec:95:1b:5b:b2:4f:be:89:26:ac:
b4:81:23:5c:02:15:52:20:40:0b:bd:42:1b:16:7d:
68:9d:12:55:e2:2c:ce:f1:1a:22:c1:be:1d:d2:2c:
54:db:fb:bc:3d:41:f2:51:1d:dc:30:49:ca:1a:6d:
10:1e:90:8f:f9:19:b7:34:47:70:8e:38:ff:20:04:
a0:d6:67:4c:46:2d:ac:af:fb:12:a8:e4:b5:97:32:
c8:ee:6c:e1:d4:a0:06:a9:3e:7d:7e:74:de:fe:f0:
84:f2:e3:59:ad:71:9c:7e:2a:88:8a:e0:04:f7:14:
d9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F7:27:6B:47:D5:A6:16:9E:BE:8F:DF:F3:70:44:E9:7D:79:BD:49
X509v3 Authority Key Identifier:
keyid:68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:7c:d2:32:5e:49:48:7f:a9:63:3a:ec:2a:3f:57:58:6b:
7d:97:39:19:e8:6d:bb:ae:14:2d:f8:09:d5:8e:52:03:e5:96:
58:2c:33:4d:d2:00:1f:f0:ee:4f:29:38:57:e9:00:88:5f:68:
57:4f:17:4c:49:40:e2:fa:c6:4b:ba:7a:44:10:81:c3:0c:7a:
ac:bd:20:90:42:0e:9d:c9:04:ca:bc:77:26:6b:d3:d2:10:57:
88:b1:9b:61:01:96:2c:f1:c3:66:f9:33:4f:46:a0:7d:34:38:
a1:83:49:02:6e:74:09:57:e6:1f:2e:11:7e:d7:cd:d1:c5:4a:
c9:ce:2d:41:fe:c7:23:02:36:f6:a7:8a:49:90:86:6a:ed:f5:
b2:7c:63:29:50:0b:90:63:de:7b:14:e4:6d:da:0c:77:c5:7d:
d0:0a:50:dc:40:2e:c8:6f:d9:d4:ab:e8:ca:39:5b:1f:17:04:
7f:43:b7:3c:e1:e2:a4:d3:36:c1:7d:2b:73:83:3a:69:f7:6a:
1a:84:6c:37:e5:70:8a:ae:2a:c4:ad:0d:71:ec:25:c1:90:4d:
93:c7:83:78:1d:90:8d:7d:d2:31:c1:3a:8f:4f:4a:b5:39:d1:
61:84:e7:1c:35:bc:f4:11:9c:9f:6a:b7:31:ae:04:65:55:61:
26:10:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:38:49 2026 by rpki-client