Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: c/hWm7gmtlJA0Xf9xoFxBiSCj9tsdyv2Sgi18/c38xc=
Subject key identifier: 00:A9:CB:92:69:9F:A9:78:92:FB:41:8C:FA:64:27:84:49:CD:7A:89
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 019EC17FC1E0C8D079BCEC4D727357660D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 0131
Signing time: Sat 13 Jun 2026 15:00:35 +0000
Manifest this update: Sat 13 Jun 2026 15:00:35 +0000
Manifest next update: Sun 14 Jun 2026 15:00:35 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: mtg7oCQEgiHLjLH8REekjsmfiICpz4gZKCZpGS8rBZM=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:c1:e0:c8:d0:79:bc:ec:4d:72:73:57:66:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Jun 13 15:00:35 2026 GMT
Not After : Jun 14 15:00:35 2026 GMT
Subject: CN=00a9cb92699fa97892fb418cfa64278449cd7a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:b7:87:f9:16:6f:1d:26:71:f5:a9:f1:24:
49:4d:f5:d4:32:94:63:40:44:7a:d5:ad:7f:33:bc:
e8:70:67:c4:bb:a8:1d:d7:7d:5a:01:6e:2a:df:81:
fa:13:11:d4:6e:54:63:48:c7:53:6a:07:d6:33:62:
9a:8a:bd:69:25:30:94:69:b1:42:89:1e:ef:fc:29:
5e:ea:66:a6:61:03:4e:75:93:a7:ee:57:e4:61:20:
aa:b3:b4:72:3a:69:28:97:4b:40:12:73:79:f6:f8:
22:7c:9d:aa:b0:64:79:04:b1:5a:f0:93:2e:a4:10:
f5:b1:74:06:81:02:31:c7:42:de:0c:17:4c:33:07:
b3:19:ec:35:fe:5f:14:94:78:66:97:cf:ba:89:e2:
c5:1d:46:29:c1:bc:a2:47:92:dc:01:be:4a:c1:8a:
71:1a:fd:74:e0:d7:47:83:6e:02:32:12:2c:d9:de:
ca:f3:bc:5c:82:91:b2:d9:17:c0:82:0e:c9:f1:53:
31:a7:a1:e1:6c:e9:0e:d1:ca:21:9f:43:16:da:7a:
60:76:8a:f0:bf:49:00:10:2f:1c:64:63:6a:7e:00:
8c:1f:6b:1f:16:41:e8:82:6b:fa:43:19:1b:e1:14:
66:3c:6a:1f:03:2d:bf:7b:66:0e:47:55:20:2f:ce:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A9:CB:92:69:9F:A9:78:92:FB:41:8C:FA:64:27:84:49:CD:7A:89
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:50:52:57:30:4f:07:89:bc:a8:ac:09:d2:13:67:0d:9c:
35:2d:6b:ad:46:bf:63:68:65:9b:64:09:40:f8:ad:de:f9:8d:
4d:5b:d9:39:c2:db:6f:1a:41:46:d5:42:3f:2e:64:c8:2e:f4:
d2:7a:14:0b:e5:8e:90:c0:80:d8:c9:23:d2:63:54:7c:69:d6:
12:48:08:bf:9d:8c:53:69:65:8c:a1:34:17:3d:c4:df:98:e6:
f2:e5:6d:ac:a1:96:31:bd:a7:1a:75:07:05:5d:b6:22:1b:c1:
fb:ce:a2:8f:93:1d:6e:aa:92:ff:63:ff:93:74:2e:8e:17:6b:
a1:4e:51:d2:7c:af:16:a2:83:ea:9e:38:6e:36:ef:c8:bb:39:
9e:62:ab:73:f2:c9:3d:25:38:1c:0d:2c:33:d7:7c:e0:1b:ef:
ba:33:4b:3c:a8:29:c5:bb:8c:f2:55:ce:39:54:a9:a0:f0:31:
4a:65:6a:85:f6:5a:db:07:8c:56:19:03:e4:e1:30:f0:6d:93:
26:8a:69:97:14:5d:bf:ea:29:16:d0:a7:bc:17:79:5c:4c:6c:
19:09:ee:07:7e:d6:23:72:23:89:10:eb:de:8f:05:cb:7b:5e:
29:b7:17:74:cf:e0:f1:d4:77:e4:f5:71:3b:a7:f4:6f:fc:34:
77:ee:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:46 2026 by rpki-client