Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: 4+A3ZWODg1O8dPOT1Lt+zNX/cdEvXm5KPPl2tgds0ZU=
Subject key identifier: C7:B5:52:10:F3:9D:96:A1:E9:BF:F5:5B:ED:C5:57:2F:8D:52:75:72
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 01A0CA7DCC457FBFD6EE352E378F5BF706EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 1A75
Signing time: Tue 22 Sep 2026 19:00:36 +0000
Manifest this update: Tue 22 Sep 2026 19:00:36 +0000
Manifest next update: Wed 23 Sep 2026 19:00:36 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: tiAMTGikxKvWcy0dr/LzdvYM/IVtYH04BhmUk1LDyag=)
2: hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa (hash: SQ1vYGdBYZkb25PtDITYpjzEq+82KcEcQFwySA/C4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:cc:45:7f:bf:d6:ee:35:2e:37:8f:5b:f7:06:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Sep 22 19:00:36 2026 GMT
Not After : Sep 23 19:00:36 2026 GMT
Subject: CN=c7b55210f39d96a1e9bff55bedc5572f8d527572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a3:f8:56:8a:be:f3:62:5f:af:8b:11:57:00:
2c:6b:ff:8a:bc:a7:4f:3d:91:51:cc:db:06:89:9d:
0f:f5:7c:01:ed:76:ef:eb:31:70:21:71:e0:b5:a3:
ae:32:bc:98:01:6b:84:54:09:08:41:fb:08:95:9f:
71:b1:a2:14:9e:56:24:d0:2e:5c:0e:7f:7e:2e:c3:
de:d0:0a:e1:d3:10:5d:38:a2:ce:fd:0f:23:f6:1f:
89:69:38:09:08:92:80:04:1a:16:b2:83:08:a6:29:
d2:33:05:d2:83:f5:36:ef:a2:fc:31:ef:27:4e:01:
e4:f0:10:5b:ad:6f:c8:c2:ad:d6:8e:46:91:2a:29:
06:76:8b:64:5f:03:c6:98:9d:ea:d8:5a:ae:a5:5a:
70:eb:79:40:c5:5b:3a:17:7a:9c:e6:90:e3:82:7d:
2f:eb:f8:fc:8e:ed:71:56:3f:7b:8b:ed:92:1f:a2:
45:e6:74:ef:24:f6:0b:b2:bf:05:3c:b0:ff:90:f1:
9a:a1:92:c4:c0:a8:31:0e:08:82:d8:7e:72:0a:75:
ce:c3:a4:59:21:92:fe:81:d6:fd:4e:67:c3:a7:d8:
4f:51:14:31:72:ac:7c:0b:ee:5f:f5:16:ae:86:7d:
b8:c1:cf:af:88:dc:92:eb:c4:98:9c:15:32:f7:a9:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:52:10:F3:9D:96:A1:E9:BF:F5:5B:ED:C5:57:2F:8D:52:75:72
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:d6:9d:e2:7b:a3:c9:80:bb:f6:10:84:1f:6e:ee:4c:a6:
d8:89:9e:12:47:b2:75:03:a1:ca:0d:8a:0f:4d:54:3d:2c:16:
1c:51:6b:79:cb:6f:b4:88:45:f0:07:78:b1:5d:60:4d:99:63:
de:a6:19:77:77:6b:be:bd:1d:c5:8c:27:7a:c4:60:46:25:07:
48:3f:83:80:b1:3c:e4:6e:cc:4d:ff:6e:4f:a0:8d:0e:87:d0:
cf:6f:77:91:30:e8:0d:24:9f:4c:a5:b4:d1:03:b9:d4:12:92:
4f:24:7e:c4:2d:cb:f3:35:3b:0d:59:06:f9:c2:10:50:4c:85:
0c:7a:d1:80:18:a0:5d:1f:18:99:8e:8e:1e:f7:ce:92:b8:b4:
11:a6:41:e5:e1:9e:3c:94:5d:7b:d7:3f:bd:30:c9:ee:df:57:
e5:66:f9:56:2c:8e:48:e6:ef:c1:ff:7e:46:b2:9e:0c:cf:86:
ad:32:95:65:60:41:1e:68:bd:8b:e6:55:7b:1c:2a:79:e1:a6:
7d:d5:87:ae:aa:03:ce:0e:50:56:e7:ba:10:63:6e:48:db:27:
40:88:ab:84:ee:ba:64:6f:6a:59:d4:d5:7a:de:67:b5:ef:4e:
6a:34:64:f4:93:23:59:cc:ed:51:5f:23:91:84:94:21:04:73:
24:8a:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:11:02 2026 by rpki-client