Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier: wxjFiM7m9jDZItLO+6iTVjvvn1PEvTVGLKTELtyviLo=
Subject key identifier: 5B:9D:8B:D7:FF:24:17:B4:5A:33:73:FD:66:D5:4B:19:C9:1A:E4:B4
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial: 019F9059F56239A8ADEFAFF3350F0379834B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number: 0F32
Signing time: Thu 23 Jul 2026 19:00:42 +0000
Manifest this update: Thu 23 Jul 2026 19:00:42 +0000
Manifest next update: Fri 24 Jul 2026 19:00:42 +0000
Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: 41Nsinbrmwy4XT5fyFtys0MKcrFiFQCOPdBDE4nQ/7E=)
2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f5:62:39:a8:ad:ef:af:f3:35:0f:03:79:83:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Validity
Not Before: Jul 23 19:00:42 2026 GMT
Not After : Jul 24 19:00:42 2026 GMT
Subject: CN=5b9d8bd7ff2417b45a3373fd66d54b19c91ae4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:32:9e:77:82:ca:b6:9a:cd:bd:f7:21:7b:fd:
78:aa:06:c6:a3:b5:38:67:61:5f:08:ce:d1:94:68:
f6:35:94:82:6a:1d:99:34:5d:9c:0c:f6:80:95:e7:
44:bb:06:8c:23:b2:47:33:72:f0:5b:37:55:d5:d7:
29:31:3e:74:26:c2:f8:e4:4c:52:2b:ce:dd:ff:0d:
2e:bd:86:d6:cb:fe:7d:d2:96:de:dc:a6:20:35:9b:
4f:92:71:63:43:d5:23:73:7b:e1:a7:d8:ca:e2:8d:
a7:08:27:5d:47:ef:b7:f7:93:6d:12:90:16:8d:d5:
1e:1f:e4:7f:e1:c9:ab:73:fc:6a:73:b7:0a:9c:3b:
01:f9:a9:d0:60:b9:a4:c8:4c:ec:ab:92:10:ce:54:
24:cd:85:2f:14:a1:c8:22:19:76:95:50:b5:47:c5:
14:8f:0c:3c:40:39:e0:86:b9:67:0b:31:2d:2c:9e:
79:20:b4:a1:e2:f1:3a:4f:ea:b1:52:ef:94:b2:c1:
a1:76:18:66:86:d1:8b:a3:32:59:73:4d:c0:33:e8:
51:05:7b:3a:39:81:f9:c6:f2:79:5d:95:17:00:0a:
ae:e0:9a:4d:9e:5d:4b:8d:c9:05:19:21:1d:5a:d0:
f5:6a:41:a7:10:b1:e0:e1:e7:b1:84:7f:8d:da:86:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9D:8B:D7:FF:24:17:B4:5A:33:73:FD:66:D5:4B:19:C9:1A:E4:B4
X509v3 Authority Key Identifier:
keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9c:a9:a7:d7:a9:70:39:06:f7:a5:54:c7:05:76:f7:4a:43:
01:ec:ba:2e:05:8c:9b:14:75:76:dc:27:df:65:94:5d:1c:cd:
35:8b:e1:9a:11:b4:6a:4b:8d:fe:e4:38:68:cf:43:30:f5:c0:
7b:63:f2:fc:bc:fc:52:79:0d:41:55:b8:a2:ec:b1:0b:3d:0e:
81:a7:21:8d:35:7f:04:ef:3c:40:1a:84:46:e4:dd:02:f2:2a:
a0:0f:9e:5c:d2:85:71:d6:ab:a3:15:c5:9a:da:65:07:e0:da:
7a:52:35:b1:19:3b:60:7f:05:ea:5a:13:cf:a3:09:22:16:a7:
8e:d4:e7:12:b3:5f:c3:d9:30:45:1f:14:c5:6e:f2:76:60:18:
f8:0a:5b:46:f0:d8:54:c9:30:8e:64:ae:1c:a2:c7:83:44:a9:
ad:5e:5e:0c:bd:66:f6:38:ed:70:7a:a2:8d:5f:bb:8d:7b:ed:
45:c9:f8:03:fa:57:82:f2:e1:71:10:52:b1:2d:3d:40:35:90:
8c:9d:22:fd:79:92:e7:0e:06:55:f5:21:d1:a2:5c:3c:db:0f:
07:85:7a:ec:ba:32:b7:d8:50:bf:a0:bd:36:a6:d2:79:b3:03:
1f:6b:ef:a4:24:83:a2:df:20:3f:06:8f:66:18:09:f3:34:c8:
c3:38:8b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:01 2026 by rpki-client