Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.mft (raw, json)
Hash identifier: NjuvLhXf0zb5HjlVHVEFSQoPDv1JhRw8GJUHF0fVvG8=
Subject key identifier: 4E:D7:0D:0A:02:6F:20:E3:BF:1D:7C:3B:92:00:CF:4B:36:C6:A4:52
Authority key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
Certificate issuer: /CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Certificate serial: 01A0C8585450AFC5B031D9A45B703055A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
Manifest number: 0993
Signing time: Tue 22 Sep 2026 09:00:26 +0000
Manifest this update: Tue 22 Sep 2026 09:00:26 +0000
Manifest next update: Wed 23 Sep 2026 09:00:26 +0000
Files and hashes: 1: 1aqcEWV9iipUzmcoFLa9uXlhiDA.crl (hash: kvmfQiurLyrcIYYuSkrsgmXe3fQnVM3qe/TCPvBDt3k=)
2: 2QaZAgQ2BxUVFfg1aWYDEr7yowE.roa (hash: mrwPNewhrXBRjZ3xbz9XepEm0Cy1szvH8RFKVrkr1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:54:50:af:c5:b0:31:d9:a4:5b:70:30:55:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830
Validity
Not Before: Sep 22 09:00:26 2026 GMT
Not After : Sep 23 09:00:26 2026 GMT
Subject: CN=4ed70d0a026f20e3bf1d7c3b9200cf4b36c6a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:80:c8:76:9f:f5:d5:c0:9f:59:02:01:90:
5e:c0:de:f9:da:3f:8a:11:d4:78:fe:ee:be:d8:83:
9d:4c:5a:9e:3d:08:f7:ea:80:8d:38:5a:be:dd:e8:
f3:2c:33:12:aa:ab:f0:58:0c:c1:99:7e:0e:a8:9b:
67:7c:8d:c4:eb:7d:21:68:7b:03:98:de:f0:3c:43:
9c:04:74:e8:31:4d:b3:1c:a7:d8:9d:b5:49:e2:c0:
23:ce:e0:39:a4:b9:cf:20:94:8f:d5:bb:a5:45:05:
b1:b3:49:77:9f:f5:68:09:73:9d:75:47:36:b2:04:
e6:0a:01:3b:ed:e7:e4:ca:c2:f1:c2:e5:0b:9c:97:
8b:dd:69:8b:d8:56:70:3b:bf:6b:94:86:a9:e0:fb:
d0:93:46:b7:dc:95:e1:40:38:70:f8:f5:92:e9:ea:
54:18:d9:f1:6c:77:19:06:d9:63:51:4c:90:cf:63:
0a:54:82:f5:6d:71:79:1c:a2:53:89:84:ec:22:f6:
92:d1:ba:d9:b2:9f:6a:b3:67:cf:25:50:8f:ae:3b:
e0:f8:27:96:3c:61:72:43:55:f6:eb:89:08:d1:04:
ee:b3:f8:1f:e0:18:07:a1:75:0f:63:5d:21:2b:9c:
fd:44:b5:67:e3:c4:79:8e:f8:bf:77:29:97:70:f3:
8e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:0D:0A:02:6F:20:E3:BF:1D:7C:3B:92:00:CF:4B:36:C6:A4:52
X509v3 Authority Key Identifier:
keyid:D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:10:0e:a3:90:8c:eb:0b:1b:7b:67:41:41:13:65:26:57:
84:4d:51:26:3c:1b:26:50:ae:f0:74:c4:8a:81:71:ba:87:fd:
03:96:00:68:93:ab:91:a8:28:0c:9e:a2:7a:2c:90:02:c5:89:
e0:d9:dd:59:2c:d3:ea:7e:36:0f:8f:49:87:cc:fb:f9:8f:e1:
87:b0:31:32:12:1d:78:bd:f4:43:90:48:32:64:7e:34:32:cb:
50:5c:72:07:19:fe:ca:46:7d:69:cb:35:c0:ed:96:f9:19:88:
d5:d2:18:b6:fa:f0:f8:5a:a6:33:d8:52:27:2f:28:53:73:ee:
e5:0a:9b:48:6f:19:63:79:c2:47:4c:5d:05:aa:9a:b5:5f:7b:
62:ac:7a:56:ee:1f:5b:48:99:e8:01:82:d5:ce:69:35:35:89:
dc:01:e6:d6:38:11:b0:42:cd:61:67:dd:cb:55:b2:72:66:49:
e0:d5:dc:07:5e:01:ba:6d:01:ca:bb:7f:b1:7f:ec:12:45:42:
87:4d:e3:4d:68:65:03:2b:46:a1:0c:cc:c9:30:e6:b6:f8:56:
0e:18:71:6b:93:a9:8b:34:6c:2c:6a:c0:90:44:81:cf:1f:0e:
6a:c9:46:19:44:1a:77:0a:fa:1a:f1:35:5a:61:bf:85:a4:26:
d2:2c:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:16:37 2026 by rpki-client