Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
File: AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft (raw, json)
Hash identifier: qfxwmniYQZiZhKa3A7Tk5N1a9herlGy/+ypHBM6UWaU=
Subject key identifier: D7:F7:14:9B:A9:1B:3D:41:CF:17:0B:A2:0E:DD:35:55:7F:31:33:19
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Certificate issuer: /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial: 01A0C3D7096D4571B11D701E7119DBD4051A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
Manifest number: 1106
Signing time: Mon 21 Sep 2026 12:00:44 +0000
Manifest this update: Mon 21 Sep 2026 12:00:44 +0000
Manifest next update: Tue 22 Sep 2026 12:00:44 +0000
Files and hashes: 1: AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl (hash: qnXZohrd/aZNtfu+96oC1VA0QcXJhWn8JBvAdjsTKeI=)
2: NwTnA5e7wr-U_MMwFPC2DoOmCk0.roa (hash: KGPawungpMUVZBS2QyhWuSqDsxcDEXQmXtvekIh8Gno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:09:6d:45:71:b1:1d:70:1e:71:19:db:d4:05:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Validity
Not Before: Sep 21 12:00:44 2026 GMT
Not After : Sep 22 12:00:44 2026 GMT
Subject: CN=d7f7149ba91b3d41cf170ba20edd35557f313319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:59:62:10:c4:b6:63:b6:d9:2b:78:1a:b2:
25:06:38:ad:5a:b4:c3:fa:29:9a:db:05:d4:d9:30:
43:80:24:db:5e:00:c0:cf:f2:3b:d0:a3:8e:87:4c:
dc:27:66:7d:c9:5c:50:61:26:b2:02:d4:71:e4:8e:
a5:01:ef:ee:48:97:6c:38:6e:25:36:c0:c9:9d:39:
df:e0:00:3c:ee:87:c1:ad:9b:cd:c2:91:da:26:18:
95:77:f9:f6:e0:04:4f:51:f9:8a:61:5d:cb:d7:38:
fa:5c:da:34:31:6b:94:6f:2b:7f:1a:5a:c5:8b:38:
ed:60:b1:32:bf:71:64:54:ef:78:e6:85:13:7d:f3:
ac:54:c1:93:2e:1d:2a:9a:35:cf:c8:bf:21:a4:c6:
2e:4a:d9:87:93:05:9e:fa:8d:d4:de:b7:4a:6e:ee:
ae:f9:fb:7d:77:c3:15:f6:b7:10:52:25:59:4e:1c:
ff:30:8d:72:4d:f5:87:21:ff:e5:42:68:9d:89:a1:
a1:1d:b9:75:92:79:07:c3:fa:4e:e9:96:19:db:3e:
7c:24:49:72:49:60:00:98:97:51:78:51:05:a1:bd:
5d:51:82:84:89:2f:dd:d2:14:c9:6e:95:a0:c7:a8:
e4:32:bb:26:80:ef:0d:bc:13:4e:55:4e:03:37:6b:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:14:9B:A9:1B:3D:41:CF:17:0B:A2:0E:DD:35:55:7F:31:33:19
X509v3 Authority Key Identifier:
keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7c:0c:44:88:e0:60:60:b4:71:fc:b4:04:ca:3e:e5:1d:05:
2c:00:8d:ca:e5:ad:65:d6:13:2b:7f:c3:e3:91:08:96:1d:eb:
b4:97:fb:6a:c5:5f:bb:cd:49:4d:4f:42:7d:74:61:ef:95:60:
12:86:9b:bc:7e:d4:93:76:9f:22:1f:90:23:82:da:e6:7d:18:
2d:2b:ec:79:94:ad:80:34:ef:27:cc:52:c8:59:d8:47:cf:e2:
e0:16:55:cb:1d:7e:c4:c3:b8:35:58:c8:71:8d:0f:f1:4d:5a:
ca:ab:ef:28:76:43:fc:30:b3:4a:3a:0d:3b:98:ef:b5:43:fe:
02:da:c0:9d:12:ef:73:a4:82:43:55:2f:dc:52:42:e1:df:8d:
01:fe:ec:df:2e:9f:32:f6:cf:b6:7d:93:1e:c2:20:b1:f9:32:
d1:af:be:f8:a6:da:40:e4:57:92:41:ea:ed:d7:22:11:04:72:
d6:83:f0:36:85:3a:50:d3:8e:33:a3:5b:52:2c:6e:76:a7:d3:
8b:aa:a5:c5:be:e8:85:76:df:8e:1d:68:6b:bf:78:1f:ba:d4:
b8:79:43:78:e1:ed:7f:c5:96:ca:ac:1c:35:ab:a4:c9:5e:f7:
27:60:c3:0b:1b:e7:ee:e6:92:c7:51:dc:69:49:f1:4b:61:76:
3d:bf:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:03:58 2026 by rpki-client