Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
File: aK8jteBWV7foypaQC_n6OP2SNJ8.mft (raw, json)
Hash identifier: +yMOTE7SxNgurao3gKyc1/UI1SwngIT9IyrteJ1U4ns=
Subject key identifier: 4A:E8:25:D5:F1:AB:01:4D:06:33:B8:8A:79:D4:6B:E8:27:C1:81:22
Authority key identifier: 68:AF:23:B5:E0:56:57:B7:E8:CA:96:90:0B:F9:FA:38:FD:92:34:9F
Certificate issuer: /CN=68af23b5e05657b7e8ca96900bf9fa38fd92349f
Certificate serial: 01A0C10CD7D1C2C4F8E9CAD46C085E264DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
Manifest number: 0135
Signing time: Sun 20 Sep 2026 23:00:39 +0000
Manifest this update: Sun 20 Sep 2026 23:00:39 +0000
Manifest next update: Mon 21 Sep 2026 23:00:39 +0000
Files and hashes: 1: 2McywBJYbv6sSIEH3ac9iaDUde0.asa (hash: dSyQOPoAPQUvKcSYeLQJ1H53CLWVO61BXDha8+8J7VM=)
2: aK8jteBWV7foypaQC_n6OP2SNJ8.crl (hash: m8prsQrlkaA0QUgl223UxZ3CUlfAV+zNd9Z64bEZPKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:d7:d1:c2:c4:f8:e9:ca:d4:6c:08:5e:26:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68af23b5e05657b7e8ca96900bf9fa38fd92349f
Validity
Not Before: Sep 20 23:00:39 2026 GMT
Not After : Sep 21 23:00:39 2026 GMT
Subject: CN=4ae825d5f1ab014d0633b88a79d46be827c18122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:ff:38:82:00:28:b6:35:c7:b7:45:c8:13:
6f:8d:86:08:ad:c0:76:15:83:b1:07:3b:9e:53:9c:
3f:47:0a:80:00:cf:37:ff:20:dd:a2:8b:c4:cc:d0:
ce:c3:d3:b1:5a:90:a4:17:65:3f:a0:fb:31:fe:04:
25:75:ae:8f:c8:1c:ce:53:2d:81:96:55:29:19:3e:
0c:56:a9:1f:d3:9a:9a:a1:10:36:53:c3:4c:cf:5d:
1f:b3:da:66:56:f9:54:d3:65:e2:9d:93:25:20:b1:
2a:4b:f8:08:fe:8c:cc:36:a0:88:58:32:ea:83:4e:
64:48:59:93:d3:39:71:af:bc:aa:9a:00:61:92:e5:
e9:00:55:a6:b7:03:60:6f:73:e5:ef:6c:04:34:66:
48:67:86:af:19:d4:10:40:7b:3d:58:bf:be:19:6f:
30:e7:30:55:47:b4:e9:b5:92:5b:7d:7a:32:94:af:
b4:fd:5f:8a:ee:ff:be:0d:6c:cb:cd:cc:00:5b:9f:
6f:90:fc:75:ec:fe:8b:f2:f6:f3:8b:d0:c0:92:df:
bc:7c:b3:d2:9a:21:a2:52:c9:2f:5b:8d:76:81:81:
98:f9:31:b7:a0:9b:4e:69:54:f4:cd:67:3f:91:78:
c8:4d:49:86:e4:5f:ea:96:1b:c2:ac:89:b4:3e:42:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E8:25:D5:F1:AB:01:4D:06:33:B8:8A:79:D4:6B:E8:27:C1:81:22
X509v3 Authority Key Identifier:
keyid:68:AF:23:B5:E0:56:57:B7:E8:CA:96:90:0B:F9:FA:38:FD:92:34:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aK8jteBWV7foypaQC_n6OP2SNJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed6f3c-fb27-4179-ade6-8ce41b173f3c/1/aK8jteBWV7foypaQC_n6OP2SNJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:72:09:b5:d9:ea:06:bc:0a:ad:5f:f2:c9:17:50:30:05:e9:
76:53:16:d2:36:0a:bc:fc:d7:1e:91:ff:a6:c2:a5:3e:ae:26:
d9:50:e4:98:aa:f1:42:e5:71:0a:02:03:a0:9c:60:06:25:fd:
99:5e:32:47:f3:a4:75:09:ce:20:d4:1b:06:5f:d5:32:4c:ef:
db:67:6d:f8:3a:27:e3:03:e1:77:e8:cb:c2:a6:5e:37:a0:ec:
4c:09:29:ec:7b:e1:b6:de:82:4a:b7:00:8f:80:91:a8:7e:b8:
21:aa:0b:e6:8d:b2:ec:ed:5b:32:28:97:ee:8b:90:07:e3:47:
04:2f:5f:3d:90:fd:92:23:e9:9e:0a:92:49:e4:4d:3f:29:38:
8a:35:88:91:d9:d7:d9:bd:d8:74:e6:09:13:3b:ec:e8:90:23:
28:a2:d9:76:17:92:c3:4b:27:ae:5d:cd:cf:0a:f1:0b:53:c2:
c5:25:9d:bc:fb:b3:7b:24:d7:c7:88:44:29:ac:63:e1:5a:a6:
45:24:28:25:e6:1d:0d:15:8e:ea:ee:1c:a7:ef:40:22:d6:d0:
b4:52:f5:ff:40:14:3f:1b:d6:a1:41:ce:62:a4:eb:1c:87:3d:
7d:01:db:0e:b0:b4:9d:72:36:8b:0b:05:88:c4:49:e6:96:62:
bf:68:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:30:18 2026 by rpki-client