Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File: aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier: zzRIO7QlOgFo3DnbBBt6YxP7u6LHmfhkOMwRboye5FI=
Subject key identifier: 31:5A:F1:93:37:A0:B7:68:0C:74:B0:C9:D5:25:0B:12:F6:70:DE:FB
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 01A0FFB58DEF7DCC121C76C053276862FDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 03:01:23 +0000
Manifest this update: Sat 03 Oct 2026 03:01:23 +0000
Manifest next update: Sun 04 Oct 2026 03:01:23 +0000
Files and hashes: 1: DqpxxMPjiSQ9laP_ySepffCvlk8.roa (hash: aa8qqy86lAASIZeHc6KLaXJ1QeLKbYEq/R9968YDwxw=)
2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: YGPRgZLHgESYRpU9kq7W+qrQ7LNmvp16G8uzUqTHSN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:b5:8d:ef:7d:cc:12:1c:76:c0:53:27:68:62:fd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Oct 3 03:01:23 2026 GMT
Not After : Oct 4 03:01:23 2026 GMT
Subject: CN=315af19337a0b7680c74b0c9d5250b12f670defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:19:86:b0:a9:83:36:d5:20:92:3d:1f:fe:
b0:e1:a7:66:99:4a:68:a0:6c:51:8b:e2:4e:78:9a:
69:34:af:d7:d7:22:10:65:5e:b2:ab:88:2f:cc:12:
76:cb:4f:8b:a5:7b:b1:8a:a0:0b:e6:ac:79:4c:cd:
a5:7b:7b:4f:cd:89:31:30:9e:a2:89:31:c5:93:47:
be:e3:33:5e:61:a8:e9:d1:70:3e:04:19:aa:9b:a4:
35:81:32:4e:44:e2:3e:80:99:7b:a7:b6:66:d5:2b:
4a:49:d8:75:e7:fa:6d:49:a2:9d:71:95:32:c7:f4:
b2:9e:64:88:f8:db:03:5b:0a:19:e4:8e:34:9e:f4:
9f:ae:6b:8b:8b:a8:7c:23:88:9c:ff:0f:6b:d2:9c:
85:4e:f5:63:cb:f1:a3:5f:64:67:d7:33:64:87:d6:
d8:19:05:59:65:2a:a5:6e:ff:7c:5e:fb:e9:2b:90:
98:7c:84:80:7a:04:fe:33:96:49:2d:ff:29:64:32:
31:52:7f:b5:d2:6b:de:16:ae:69:f6:10:07:c5:b8:
f6:8c:3c:a4:1b:25:00:6b:71:33:7d:4a:6f:f9:3a:
b8:33:1d:fc:c2:53:b6:d5:e9:e1:a0:1d:4e:47:31:
87:f4:6f:d0:8b:51:55:d2:ac:72:99:7c:bb:6b:ca:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:F1:93:37:A0:B7:68:0C:74:B0:C9:D5:25:0B:12:F6:70:DE:FB
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:14:92:15:13:f1:32:fc:39:24:10:6c:99:c9:9c:b8:ca:e3:
20:ff:28:20:ff:24:eb:38:2c:4c:07:2c:c8:93:1a:68:1d:27:
ac:92:7b:22:27:5c:3b:d8:83:b6:2f:b4:37:d5:11:c0:09:35:
49:3b:e3:1e:30:82:fd:ab:18:71:5c:7f:00:3f:83:e1:1d:6d:
a5:ee:5d:21:94:e9:d3:27:a8:07:fe:ea:ba:13:2b:d8:d7:ad:
94:88:cd:fd:6d:7c:4c:97:78:7c:f7:a1:c8:9b:2e:60:ed:37:
08:09:29:2e:61:6b:a8:1e:ee:45:0c:67:fa:ef:ab:15:66:fb:
1f:c6:ed:be:5b:73:ee:4c:ee:3b:58:58:d8:91:47:c8:6a:19:
29:07:00:49:20:57:a8:54:4f:8a:26:36:f4:33:f8:5a:10:85:
4a:35:a1:5f:2c:d0:d0:bd:a6:d3:81:a9:32:47:0e:9b:42:c1:
e8:83:50:44:ed:6f:c6:5c:b1:15:32:ce:d3:b7:72:4d:4b:45:
c4:c4:72:6a:43:d8:f6:b4:2d:52:ac:47:ec:3e:31:f1:14:5b:
bc:0e:7f:0b:a7:87:0f:ba:31:74:aa:7b:ad:b8:c5:9e:54:1f:
88:2a:f8:ea:72:8c:05:a0:1b:d9:79:a5:ef:93:55:aa:b9:f7:
82:19:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:33:49 2026 by rpki-client