Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
File: AEcY56Jj6-RedwZzkkHsbWrljnQ.mft (raw, json)
Hash identifier: fEv+46GNJ2QK5VXfIe53fjWjtGaZ867V8xgSawZZA0g=
Subject key identifier: 75:A9:E9:AD:63:BB:C4:56:7E:9A:58:81:F8:51:E5:81:32:31:BB:64
Authority key identifier: 00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
Certificate issuer: /CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Certificate serial: 019F90C83A0A435912B7FA8EA64126DEC91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
Manifest number: 16C3
Signing time: Thu 23 Jul 2026 21:01:08 +0000
Manifest this update: Thu 23 Jul 2026 21:01:08 +0000
Manifest next update: Fri 24 Jul 2026 21:01:08 +0000
Files and hashes: 1: AEcY56Jj6-RedwZzkkHsbWrljnQ.crl (hash: 1SQw1+wpVNUXbXO4T0vuk5E3wuYoT/CxjoT3ZEapfiQ=)
2: fuzFacJNaiVRrJ_GlGY2C6GBS6M.roa (hash: C5oZSE4o23c6OxxwxdkDVpPrg7ORDnBnQBKmM1UexSA=)
3: w-2M5_JOL4GzA4Ev0I2EWaVkWZo.roa (hash: pBaSGdEGyqlnbAKaIgPv0sjHgyvY6jyifJForUGJVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:3a:0a:43:59:12:b7:fa:8e:a6:41:26:de:c9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004718e7a263ebe45e7706739241ec6d6ae58e74
Validity
Not Before: Jul 23 21:01:08 2026 GMT
Not After : Jul 24 21:01:08 2026 GMT
Subject: CN=75a9e9ad63bbc4567e9a5881f851e5813231bb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:75:63:4a:18:d4:27:14:5b:cc:11:2d:78:
10:73:f3:4c:e9:ba:4a:6f:ce:43:77:5b:64:aa:26:
08:35:a8:2e:e5:7b:97:49:a8:cf:50:2c:e5:0d:ab:
b8:a5:eb:fd:e1:08:a1:07:16:66:3b:1a:9e:72:85:
8f:50:45:2a:c6:83:97:ce:72:9f:fe:ef:1d:44:c3:
a9:6e:d9:c8:46:ea:ce:d2:ec:63:11:83:a2:a3:0d:
06:d6:6d:80:2e:65:90:5c:c1:3a:40:9f:e9:4d:d9:
f0:01:aa:66:b2:e0:e6:2b:51:4a:a0:68:79:b7:6c:
e5:1e:42:3d:a6:7d:4e:74:23:f0:12:23:e2:ee:e6:
0e:d6:38:06:2b:b0:fe:a9:ac:84:93:03:a6:7f:a3:
9b:6c:d3:06:54:c1:73:4f:e2:76:a2:af:4b:ba:7a:
0a:0b:ed:d4:c4:07:5e:a3:89:56:45:6a:10:46:90:
2a:36:06:48:34:2a:b3:85:b3:9f:b8:1f:59:24:1c:
39:1a:74:99:d0:08:99:a1:fa:fe:58:03:7a:ea:74:
04:94:d5:0c:0b:9f:6e:b6:33:c7:0c:5c:76:b8:3d:
82:d4:03:03:84:e5:0b:36:c4:f8:03:f5:d6:5f:37:
8f:a1:f1:92:43:63:a7:2e:d7:81:de:45:a9:e0:db:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A9:E9:AD:63:BB:C4:56:7E:9A:58:81:F8:51:E5:81:32:31:BB:64
X509v3 Authority Key Identifier:
keyid:00:47:18:E7:A2:63:EB:E4:5E:77:06:73:92:41:EC:6D:6A:E5:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEcY56Jj6-RedwZzkkHsbWrljnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/3eecf8-eb04-41ce-a9f6-3a91a613a407/1/AEcY56Jj6-RedwZzkkHsbWrljnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:13:54:42:3e:fa:6b:96:b8:b8:75:07:a4:1e:d7:04:65:48:
50:6b:42:ca:01:ac:13:7b:fc:5d:33:e8:5b:81:c4:ca:dc:03:
1e:9b:28:c9:33:c7:13:92:51:8c:7b:e9:18:be:bc:1a:51:d0:
ab:f2:35:f9:df:80:e0:d5:a5:fc:04:23:af:24:7f:d1:67:52:
b1:d5:72:18:ab:f5:3c:97:f7:dd:31:5f:17:ff:68:8c:73:96:
ca:b3:7b:6d:37:9b:77:cb:7b:d8:29:4c:0f:2d:f2:47:9b:ee:
2b:e0:58:b6:5c:f5:af:62:67:2b:d9:50:a6:28:1c:4d:3d:f0:
09:64:7f:e6:85:95:e5:43:f2:07:6b:5b:3c:7c:2b:17:ad:e5:
dd:34:2c:4a:5e:8c:5b:97:0c:de:52:ae:72:5a:33:8c:2e:67:
d1:d6:77:92:55:35:ef:6b:9d:51:f0:a9:95:e2:18:7a:79:9b:
e1:38:a9:ec:a7:c2:c3:4e:2e:9c:0a:2a:34:82:b8:0a:97:02:
ac:f7:92:b7:5b:24:91:b1:c4:c5:bc:b5:63:d9:83:bf:db:d4:
cd:d1:1a:1b:45:3e:03:e3:93:33:9b:a4:7c:5a:a9:d5:c4:b8:
52:88:87:61:62:ba:40:83:27:53:d1:b4:ab:4c:cb:f6:4c:3d:
ad:bb:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:57 2026 by rpki-client