Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
File: aTddinP2XuMh63wI24OAslhkuRI.mft (raw, json)
Hash identifier: kdg5xCNbX6rE0d534gllSkjbJoDwmQgnw3bna39kPCM=
Subject key identifier: E1:F0:4A:F4:5D:DE:ED:1A:E8:0C:3A:B0:4D:12:16:9F:F2:1F:51:31
Authority key identifier: 69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
Certificate issuer: /CN=69375d8a73f65ee321eb7c08db8380b25864b912
Certificate serial: 01A0BD67111CD0C601F98BB1B783C1412495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
Manifest number: 0238
Signing time: Sun 20 Sep 2026 06:00:43 +0000
Manifest this update: Sun 20 Sep 2026 06:00:43 +0000
Manifest next update: Mon 21 Sep 2026 06:00:43 +0000
Files and hashes: 1: KAS5oJnMRBLN3CMFfME2h-Rh7mU.roa (hash: LS/iW/nevmUgfZkUxmuVR5hiIsYE32zEMVLICjYAf/4=)
2: aTddinP2XuMh63wI24OAslhkuRI.crl (hash: wm362t710qWCeL1UHVBojNEX5nrWec1B2TrSNmWQpto=)
3: rQM6hcyKgdO32uWWqq-FwzbquX0.asa (hash: zP7bH4dme0HxeY/+twvXjeQeEdIkjoodZuLEIhQlKzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:67:11:1c:d0:c6:01:f9:8b:b1:b7:83:c1:41:24:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69375d8a73f65ee321eb7c08db8380b25864b912
Validity
Not Before: Sep 20 06:00:43 2026 GMT
Not After : Sep 21 06:00:43 2026 GMT
Subject: CN=e1f04af45ddeed1ae80c3ab04d12169ff21f5131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:fb:c7:4c:ac:98:00:e0:1f:9d:8f:e5:63:
1b:19:bb:94:10:1a:7c:bc:4f:b8:85:23:b5:b3:de:
b3:39:f5:e4:d4:12:4a:a3:83:e7:e3:f5:f6:0e:a6:
d2:f4:cc:be:19:e4:0c:8f:83:0c:e5:ec:16:98:b5:
8c:b1:83:80:3d:a8:03:bd:12:b6:88:8f:77:42:52:
4b:d9:00:25:0b:4b:d9:dc:f1:7f:42:6b:3c:4c:79:
3c:9c:0d:2a:e8:0c:2e:db:34:65:fc:ac:6c:23:2b:
8c:0e:d7:da:d6:2f:8e:57:90:1a:ac:98:a9:b6:59:
7c:c9:8f:9d:c5:86:4a:d3:c4:e8:33:82:12:44:7f:
e5:36:99:6b:24:0e:ba:13:0f:a6:1e:c9:d8:e3:45:
67:a1:04:cf:b0:c5:77:dd:76:5f:9d:f4:85:1b:3e:
74:40:6f:2b:af:97:60:e3:85:1b:37:81:05:19:cd:
9d:83:25:9a:c4:d6:59:b1:bb:ba:a2:ef:b8:4f:07:
13:45:21:2e:25:7f:51:6e:1a:bd:69:3b:ff:cf:fd:
c6:04:13:cd:99:78:ef:a1:81:12:9f:d8:bb:ac:97:
e8:6b:53:11:0d:3d:87:3e:6c:3f:32:cb:2b:8b:7e:
c4:20:a9:d3:35:9e:b9:68:6c:1e:26:00:29:7f:01:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:4A:F4:5D:DE:ED:1A:E8:0C:3A:B0:4D:12:16:9F:F2:1F:51:31
X509v3 Authority Key Identifier:
keyid:69:37:5D:8A:73:F6:5E:E3:21:EB:7C:08:DB:83:80:B2:58:64:B9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aTddinP2XuMh63wI24OAslhkuRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/516d35-5711-49a6-8ca0-55ff65f6bc12/1/aTddinP2XuMh63wI24OAslhkuRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a2:8d:b8:36:82:7c:ef:70:70:02:ef:fd:07:b6:07:f7:13:
8c:43:50:3c:60:d3:02:b3:4e:4c:3e:90:a3:dc:a2:1e:92:1d:
03:c9:1c:5a:70:4a:19:e4:54:9d:af:9b:c8:4f:53:28:aa:3b:
08:df:41:b4:2d:08:9e:24:70:cc:43:05:8e:3e:bc:f7:b1:3d:
38:04:e0:1a:3e:82:4c:cb:9a:a8:82:4a:bc:21:1f:de:9d:23:
35:f2:a6:d0:8c:38:f1:7b:ca:fa:d5:b1:0e:82:69:a7:ef:56:
0c:82:85:69:4f:9f:2e:83:d0:9e:5a:0c:87:5f:e2:22:f8:11:
3d:a6:13:ba:66:9f:89:64:d6:63:e5:56:28:85:f0:b5:18:ea:
09:17:63:37:94:d0:b7:ea:d7:cf:bd:6a:f1:8a:9f:5e:d1:15:
d4:cd:d4:a7:bf:8b:0c:9d:8b:ad:8d:9b:71:46:75:03:b9:9a:
c8:6c:17:20:74:14:5b:db:54:ac:a5:a5:b7:44:38:b7:70:a4:
22:4b:b5:73:eb:73:98:45:cd:d2:1a:f9:af:98:9e:ed:a9:5b:
74:4f:68:eb:90:45:62:7b:5e:bc:77:95:b6:84:c9:45:4e:e9:
9d:90:e3:c8:57:d7:be:22:b8:f2:29:6d:01:65:4a:69:fc:45:
75:3b:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:04:10 2026 by rpki-client