Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
File: aVJaNi6HcFoewCLRZWDydtWc7h0.mft (raw, json)
Hash identifier: KuiFWNJCgEBiOVW2Jhe8l085vbgLeTZepja2Mouc5bI=
Subject key identifier: 5A:6C:AA:1D:D7:B9:FF:B8:D7:93:60:2E:92:E8:DB:44:93:DE:9C:9C
Authority key identifier: 69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
Certificate issuer: /CN=69525a362e87705a1ec022d16560f276d59cee1d
Certificate serial: 01A0C9D91FC3868D3CA256FED530771B6929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
Manifest number: 0C41
Signing time: Tue 22 Sep 2026 16:00:44 +0000
Manifest this update: Tue 22 Sep 2026 16:00:44 +0000
Manifest next update: Wed 23 Sep 2026 16:00:44 +0000
Files and hashes: 1: Exw1Qk2SWzacP5BYuop4G0zGR9w.roa (hash: LJscICsI9uW5FgqiZjcGqJLPX1UQnMp+ey99OzItE9c=)
2: aVJaNi6HcFoewCLRZWDydtWc7h0.crl (hash: McNTq+WWIqO5C//7gL0TfS2XjEdY/WiQpEWxo9chxrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:1f:c3:86:8d:3c:a2:56:fe:d5:30:77:1b:69:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69525a362e87705a1ec022d16560f276d59cee1d
Validity
Not Before: Sep 22 16:00:44 2026 GMT
Not After : Sep 23 16:00:44 2026 GMT
Subject: CN=5a6caa1dd7b9ffb8d793602e92e8db4493de9c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:f6:39:04:f8:4e:ec:91:5f:fe:78:16:de:
0c:9e:10:d6:0a:db:83:bc:33:be:6f:21:f0:36:c9:
a1:ec:a9:6c:ea:66:c9:6c:ef:89:c6:4e:a7:a5:27:
3d:67:1c:47:29:7c:87:de:e1:13:bc:df:55:51:cf:
10:0f:e0:7e:96:b2:e9:f3:d1:e5:d9:9e:6a:4c:44:
f9:69:42:c7:01:d4:66:7d:74:1e:72:d4:17:dd:a9:
ef:c5:69:2c:89:b7:38:01:5d:01:ba:cb:57:b3:6e:
12:d4:ee:87:e7:17:77:43:64:e0:d5:93:75:d7:e1:
cf:d5:96:03:85:53:1b:02:6e:6f:f4:bc:78:6e:ee:
23:3e:f7:bb:dd:da:3e:41:da:89:4f:fe:aa:8f:f5:
74:91:ed:3f:26:4f:49:92:d2:2f:fd:ee:b9:21:2c:
d2:4c:a9:b7:d9:1d:3c:99:99:a8:18:a0:9d:25:30:
8d:9b:4d:77:f1:1a:d8:20:7c:64:5e:d2:5b:5d:be:
5a:01:ae:a6:94:c3:92:90:09:0e:1a:5e:09:22:f2:
31:93:f4:51:16:42:33:d3:af:9e:d1:cf:4a:1f:87:
28:62:5d:5f:87:21:7b:e4:33:8c:ed:66:f1:cd:13:
e3:45:a2:87:30:cd:9a:6c:61:f5:2d:a7:1c:cf:8b:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:AA:1D:D7:B9:FF:B8:D7:93:60:2E:92:E8:DB:44:93:DE:9C:9C
X509v3 Authority Key Identifier:
keyid:69:52:5A:36:2E:87:70:5A:1E:C0:22:D1:65:60:F2:76:D5:9C:EE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVJaNi6HcFoewCLRZWDydtWc7h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/30cd87-f375-4b93-8d39-65d6ca3f49d8/1/aVJaNi6HcFoewCLRZWDydtWc7h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:17:e0:62:2b:72:2d:0b:bd:73:f8:e9:4a:85:38:54:93:6b:
db:1b:a9:78:79:e8:a2:81:b2:e5:f9:c4:50:b3:84:06:cd:6c:
c2:61:55:30:6e:2b:72:7b:61:99:25:8a:af:f3:c5:12:bc:04:
41:20:56:cc:17:94:07:fd:3b:19:ff:b8:78:d9:21:77:c0:e1:
f6:00:f7:33:23:6c:bf:d3:e7:6a:d9:0a:9f:ea:5f:e8:b9:c5:
26:fa:6e:61:3b:dc:13:18:c2:29:7c:43:a0:1b:72:2c:c2:e9:
73:7f:c6:48:3c:70:22:25:3e:42:26:0c:fa:5a:ad:83:11:96:
15:56:97:35:d5:3d:93:c6:c8:34:af:56:fe:9b:af:3d:6b:56:
f7:b9:d5:b2:6f:cc:eb:56:67:66:77:52:a8:95:70:88:f1:54:
74:c1:9a:21:5e:08:db:75:b7:83:58:e4:3e:59:66:20:bd:ff:
82:29:a7:53:af:cc:71:a1:1a:36:2b:85:38:47:8b:a1:e4:48:
95:39:69:47:eb:d5:e3:52:0b:54:12:22:6f:ac:d7:b6:a0:9d:
e3:0f:20:b5:d4:c7:56:dc:b5:93:3a:11:f1:b4:0c:ce:74:eb:
22:fa:ad:a0:f6:d9:2e:04:f4:5e:81:aa:55:89:1d:53:ea:68:
a5:e3:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:24:28 2026 by rpki-client