Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
File: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft (raw, json)
Hash identifier: EJrzt5FdxvZAVfxj03T4vyCyW82a4FuntOBKRuBRQaE=
Subject key identifier: 29:A4:52:0D:1C:B2:17:7B:B7:84:42:BE:7E:04:9E:A4:E5:34:9F:2D
Authority key identifier: 68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
Certificate issuer: /CN=68a8e93d3f590f4450d1db3c2074598244353e93
Certificate serial: 01A0D42601638AFC2C8F0A90D5D373FBD54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
Manifest number: 1A7A
Signing time: Thu 24 Sep 2026 16:00:55 +0000
Manifest this update: Thu 24 Sep 2026 16:00:55 +0000
Manifest next update: Fri 25 Sep 2026 16:00:55 +0000
Files and hashes: 1: aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl (hash: iyBqH/VuvlpWZ6Aj/Z5E//+GZXthkfoNBwmDWUtnDoY=)
2: hhcQ4L4aAqCfBr5TSN1Ool48lA8.roa (hash: SQ1vYGdBYZkb25PtDITYpjzEq+82KcEcQFwySA/C4GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:01:63:8a:fc:2c:8f:0a:90:d5:d3:73:fb:d5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a8e93d3f590f4450d1db3c2074598244353e93
Validity
Not Before: Sep 24 16:00:55 2026 GMT
Not After : Sep 25 16:00:55 2026 GMT
Subject: CN=29a4520d1cb2177bb78442be7e049ea4e5349f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:df:8a:ef:90:2f:b6:6f:28:8d:b5:37:92:
87:06:c3:0b:bd:f6:ec:67:a0:d6:90:51:e5:26:ae:
87:9c:b7:c0:aa:cf:e1:c5:76:68:64:d2:73:36:f7:
4e:4c:dc:64:42:29:6f:ef:be:cc:5c:71:a6:b9:34:
c9:40:a6:7c:a3:6e:95:dc:85:0f:c1:9d:05:14:71:
77:8e:2b:78:89:5c:72:b5:e1:73:46:e2:05:a6:40:
46:43:77:f4:0f:49:dd:d2:18:cf:d0:cb:44:dc:b9:
d8:db:aa:cc:77:99:67:97:31:55:b4:12:90:94:a6:
fe:6b:cf:c0:bd:c5:94:df:63:9f:ed:85:28:b1:69:
b7:34:b9:22:77:d1:56:ec:79:bb:ef:4a:b8:58:1c:
43:8f:b8:dc:6b:f9:2c:04:2a:57:48:20:89:75:fc:
19:5c:a9:fa:72:9d:13:26:60:29:87:90:31:09:e4:
45:e0:83:14:a6:69:f8:6a:10:5f:9f:7a:55:0f:fa:
82:8c:d3:ee:5c:7b:32:03:e7:25:60:db:d8:a6:62:
ba:33:8a:cf:70:40:be:c7:24:8f:a4:01:db:af:ed:
f7:8d:86:8a:01:81:2a:5b:eb:ac:b7:31:cb:9d:67:
77:43:23:74:db:08:b8:b9:bc:7e:24:46:b5:f0:7c:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:52:0D:1C:B2:17:7B:B7:84:42:BE:7E:04:9E:A4:E5:34:9F:2D
X509v3 Authority Key Identifier:
keyid:68:A8:E9:3D:3F:59:0F:44:50:D1:DB:3C:20:74:59:82:44:35:3E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bb3b29-81e5-45a2-81ec-25dd4cbb3698/1/aKjpPT9ZD0RQ0ds8IHRZgkQ1PpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cb:25:57:2f:d9:a2:20:a8:1a:2f:0d:23:e4:c6:6f:f5:fc:
70:48:5e:fc:67:9a:de:38:72:38:5d:d3:df:7c:b6:b6:a9:ac:
06:ab:d1:9b:4b:06:27:1f:8d:95:e9:d0:c9:3f:75:82:a4:2e:
c3:c9:dd:19:72:de:34:75:9b:02:ce:9b:0f:f9:fc:c9:bd:bf:
e7:24:bc:ab:68:ce:d5:98:22:94:33:6b:8a:94:5e:bc:cf:75:
9d:95:b0:9b:14:77:bd:f8:4a:09:a9:32:06:20:27:cb:15:94:
ae:0d:49:ae:38:77:83:58:4f:b0:54:d5:b8:50:e6:fd:6a:56:
cd:0d:d6:c5:b0:2b:33:04:d5:57:c8:d5:9b:a2:5a:e3:10:4b:
b6:9a:aa:96:e8:21:10:87:ac:1c:45:51:31:fb:da:89:c7:77:
63:a3:5a:19:95:03:3c:f4:f1:6c:fc:30:a7:c7:e4:d6:84:33:
15:dc:2f:de:97:c7:bd:51:9c:f5:1c:de:d0:7d:19:f9:09:06:
7e:9f:b5:75:85:cf:b8:dd:c3:97:32:00:04:dd:d6:24:63:0e:
eb:26:04:fe:7f:c3:48:71:b0:fe:f1:d5:d3:bf:f7:7c:59:09:
28:7c:d1:d1:a7:1f:db:b9:d6:22:47:12:97:32:5f:33:f5:54:
b2:0b:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:41:10 2026 by rpki-client