Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File: aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier: M/sQb4/VHg3XjdrhWG8+L/CHwPLYV5Yy5C47UpQXe2s=
Subject key identifier: EA:3A:1E:4F:D1:66:97:B2:36:68:3D:C4:5E:E0:01:DA:40:B5:B2:D4
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer: /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial: 01A0CD115E3B5E34127B8B7A14CC670FEA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number: 19FC
Signing time: Wed 23 Sep 2026 07:01:02 +0000
Manifest this update: Wed 23 Sep 2026 07:01:02 +0000
Manifest next update: Thu 24 Sep 2026 07:01:02 +0000
Files and hashes: 1: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: yyhHlBV1vem+w2ZGOG+UC817hTFOM8ElLKISBT916U0=)
2: hEk7NXMz_9tjphRF_f-2BiYVxl4.roa (hash: YzdcSrHbAL6AdxaXBrwECMdGtQJ8+zIyV5HDkXK31kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:5e:3b:5e:34:12:7b:8b:7a:14:cc:67:0f:ea:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Validity
Not Before: Sep 23 07:01:02 2026 GMT
Not After : Sep 24 07:01:02 2026 GMT
Subject: CN=ea3a1e4fd16697b236683dc45ee001da40b5b2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:58:69:30:c0:d9:68:a7:0c:b6:eb:5d:28:
33:58:fe:8e:6a:99:90:ad:91:10:7a:4f:cd:fd:39:
84:06:6a:d8:df:fa:77:ba:b5:cf:33:f6:00:9d:d3:
57:6d:cc:c6:3f:db:f7:80:15:49:57:05:ee:5c:14:
c7:4d:c6:89:5d:54:82:07:7a:31:4c:fe:0d:ce:18:
77:59:6e:05:a3:90:dd:39:e6:31:81:fb:5f:15:fc:
01:71:8c:5b:a5:f5:63:59:e5:4d:3b:cd:a1:31:0c:
ff:8b:0e:01:ba:ad:fa:a9:13:00:5d:f1:db:07:84:
30:35:b4:46:b6:7f:b7:05:6e:d1:40:76:84:ae:98:
1f:73:7b:b5:c1:f8:86:10:d5:2f:a4:0e:97:7e:70:
28:1e:cc:97:60:b5:88:6c:73:20:c5:2e:e1:1f:ac:
a4:8d:7b:d0:96:c7:4a:e5:80:e1:11:42:2c:cb:3c:
ac:8c:fa:70:1b:ff:4a:fa:35:59:af:d5:64:f2:90:
8a:07:ed:10:a4:fc:2a:87:1c:50:da:61:90:1e:b8:
6c:88:87:41:e8:79:57:6b:f0:b9:47:ba:f5:a8:ca:
ef:ce:23:7d:f8:58:69:2c:3f:30:a8:0b:0f:16:83:
1e:ef:be:fe:79:2c:aa:bf:94:4b:95:46:f5:00:6c:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3A:1E:4F:D1:66:97:B2:36:68:3D:C4:5E:E0:01:DA:40:B5:B2:D4
X509v3 Authority Key Identifier:
keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b7:a0:55:5d:ea:4e:bd:f3:e6:f9:67:c8:7f:7d:11:c1:0f:
3f:c1:f4:4a:3b:f6:8c:09:1b:25:6b:af:7d:8d:b3:c8:ca:b3:
b5:c3:e0:e5:b2:0e:64:99:95:d3:a5:c1:38:e8:67:5f:3a:81:
4b:a1:17:e7:2b:79:04:35:a7:f6:30:24:f1:f5:cd:10:70:b3:
c5:f0:c0:c6:1c:67:a2:b1:1e:76:08:0c:7f:cc:a8:b6:83:c5:
6a:ef:82:c3:6d:0d:67:a7:8d:0c:e3:e7:9f:7b:77:8d:7d:1f:
bc:a9:d1:9a:26:bd:7a:6f:88:bd:0d:c4:dd:00:95:2a:1e:7d:
d5:cc:42:f0:14:92:08:21:9b:9f:f0:9f:a2:7f:13:3c:d1:b4:
03:e7:97:b7:32:4e:c0:46:e9:d9:fb:b4:7a:91:77:f4:8a:3d:
5e:d1:77:1b:dc:29:bb:e7:47:eb:62:3c:7b:34:d3:41:ab:c9:
69:46:73:fe:45:52:0b:41:06:75:c0:37:ec:26:52:18:87:cc:
48:ad:c4:d4:92:55:63:38:75:e2:6c:e2:83:c1:85:2a:c6:df:
db:24:f7:78:17:63:e5:4f:60:3c:5c:46:cb:22:bc:d7:81:32:
0f:38:18:dd:ae:68:ad:da:95:5e:e0:67:4b:7c:13:42:b3:c0:
18:1e:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:35:54 2026 by rpki-client