Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: iCDYQ/sbte4bpyc1PfM9fAhVwWugbvaHEdVf2R5VL68=
Subject key identifier: C7:1B:B8:13:96:69:F6:DC:1C:B4:96:31:AA:26:13:2A:F9:A6:46:3F
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 01A0D2DE12F144A874AB1AFDF8ACEF849D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0FD9
Signing time: Thu 24 Sep 2026 10:02:43 +0000
Manifest this update: Thu 24 Sep 2026 10:02:43 +0000
Manifest next update: Fri 25 Sep 2026 10:02:43 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: xhu9Hj2DsjsAR078Oj7/SORi1Vs7syngGl4VF5d9qLs=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:12:f1:44:a8:74:ab:1a:fd:f8:ac:ef:84:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Sep 24 10:02:43 2026 GMT
Not After : Sep 25 10:02:43 2026 GMT
Subject: CN=c71bb8139669f6dc1cb49631aa26132af9a6463f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:39:e0:c3:d9:9d:74:51:9c:b0:0e:c0:6a:60:
46:f9:ff:e4:b7:44:91:41:c9:75:e4:7a:40:0f:25:
bf:35:b3:2f:40:ba:3f:83:d1:e1:71:e3:c2:78:20:
52:33:ab:b6:b7:26:4c:ba:3e:a8:85:2b:3c:f3:9c:
65:9a:01:00:3a:16:30:d8:99:19:5e:03:8d:3f:54:
15:6a:c6:a9:be:0f:78:e0:1f:2c:42:39:98:9e:cc:
11:c0:ed:30:9c:37:cf:e1:9c:cd:41:3a:ff:66:3a:
52:8b:8c:39:56:2e:c2:01:e6:f6:f4:7e:41:f9:d5:
f9:c4:21:1d:27:90:7a:c7:60:55:2c:13:4c:44:d4:
d1:b8:c3:56:7e:7c:a3:d6:39:a4:36:68:d5:01:2d:
46:0f:2a:ab:35:74:2f:51:7d:e9:bf:9c:58:94:54:
6b:90:54:a2:7f:b4:28:a3:84:84:1f:2d:eb:bd:72:
74:fa:ff:4b:55:df:0f:5a:ac:65:c8:e1:a2:b0:7e:
a4:0b:a1:6b:d0:ea:f1:e3:6b:f9:48:88:25:07:1f:
7e:d5:c6:e1:a3:e1:9a:13:c8:11:ea:60:e4:2f:ea:
16:a1:e8:e1:2f:a6:a2:b0:c8:04:50:e5:08:00:10:
96:6d:16:84:8c:3c:74:2a:f5:18:d9:26:16:8a:c0:
3e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:B8:13:96:69:F6:DC:1C:B4:96:31:AA:26:13:2A:F9:A6:46:3F
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:71:8f:81:fe:c2:86:29:c1:83:f8:24:53:b3:43:37:e8:7a:
51:af:53:3e:0d:ef:44:ed:47:99:1c:4a:59:9a:4f:7b:b0:82:
7e:02:c0:50:a7:e4:d4:7c:27:f7:ea:08:20:d6:24:a4:ea:cb:
6d:5d:d5:cb:a2:b4:81:0b:29:e8:dc:b5:3b:e1:09:d9:12:f3:
8e:ff:1e:92:ec:3a:73:de:8d:15:43:95:d8:30:14:95:14:23:
d0:fa:17:5b:8f:a9:11:d2:f7:1e:ae:da:56:d4:a1:b8:04:59:
52:48:45:a0:44:0f:ef:48:4f:5e:42:35:59:84:74:45:4b:28:
60:1f:19:e6:29:5d:d4:83:3b:d2:9a:5f:78:af:aa:8e:e2:1a:
ae:50:0e:d9:fe:d1:1c:8c:a9:0e:a6:25:9d:e0:ad:47:01:cd:
92:62:cf:ab:8a:df:e3:10:2e:cf:32:f0:37:ae:71:f6:f6:e0:
94:cc:24:e4:70:79:dd:52:dd:b4:5d:e1:72:ae:d7:b2:40:e4:
55:f3:6f:d1:08:90:09:ee:38:2f:3e:a8:d8:9c:ad:39:bb:fb:
ee:36:3e:8a:c7:93:5e:c6:c4:d0:f6:30:fa:5e:f4:47:ae:72:
27:0e:71:f5:5e:e1:1e:ac:56:7a:f9:63:2f:c6:44:05:10:d9:
7a:22:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:48:50 2026 by rpki-client