Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
File: aJcB3urxZgFE8reb0IFyiE8aIT0.mft (raw, json)
Hash identifier: DtgBavwsoFRSDmvAHVx1oDkK0+qpwTDkBWMSZlRmlng=
Subject key identifier: 5B:CC:D6:E7:63:12:89:59:7A:8A:DA:9B:9F:18:34:DD:AF:A1:26:7A
Authority key identifier: 68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
Certificate issuer: /CN=689701deeaf1660144f2b79bd08172884f1a213d
Certificate serial: 01A1423AE082815161D81E053A5E593EAB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
Manifest number: 2C
Signing time: Fri 16 Oct 2026 01:01:57 +0000
Manifest this update: Fri 16 Oct 2026 01:01:57 +0000
Manifest next update: Sat 17 Oct 2026 01:01:57 +0000
Files and hashes: 1: 7DUIwilmDr5d02W6GI1qHAXlta4.roa (hash: MCwAkHYqe+E9E6tOIK6u+A6dJHIEtiQJRoXay7j/EDU=)
2: aJcB3urxZgFE8reb0IFyiE8aIT0.crl (hash: 6aVVw78LO+0dp7jytXq/k/+E/C1wAzLrjqGD3A+U7rc=)
3: hCqXIkjbw87o9qfRLbkk1mdWapc.roa (hash: ZY4JgYleWv7cv0Tm1hwdUrWJ73gQ3ixshl4F9GJhYqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 01:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:e0:82:81:51:61:d8:1e:05:3a:5e:59:3e:ab:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689701deeaf1660144f2b79bd08172884f1a213d
Validity
Not Before: Oct 16 01:01:57 2026 GMT
Not After : Oct 17 01:01:57 2026 GMT
Subject: CN=5bccd6e7631289597a8ada9b9f1834ddafa1267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:63:aa:15:d0:f9:52:2f:50:02:a6:31:e5:
67:b5:0c:9b:23:60:27:66:94:69:7a:b3:25:4c:3a:
4e:87:f4:06:94:1a:4a:12:da:43:03:53:c3:77:13:
94:ae:d0:19:fe:ab:0c:ce:bc:ff:fd:f3:78:b2:da:
7d:e8:50:ac:76:ca:f4:7c:09:0f:32:2f:94:ef:21:
b1:eb:9f:a4:48:14:00:3c:aa:ab:1d:41:91:c1:29:
97:3a:2d:cd:70:e7:5e:d4:86:cf:3e:95:c9:80:03:
ac:f0:21:e9:34:16:aa:2d:a9:54:7a:22:ed:c8:1c:
0f:e4:23:a6:17:57:66:fe:92:d5:2a:51:5f:5f:48:
ca:bc:58:fa:d9:c1:ed:fc:58:cb:b6:e8:81:8b:39:
b2:22:e4:c4:3b:b8:81:65:cc:0b:30:8a:d7:65:7c:
21:93:96:ec:d5:24:50:29:ce:04:aa:48:e4:77:4b:
9d:a6:74:ea:e4:57:c4:5c:0c:da:9d:05:c5:0e:35:
b8:62:76:1b:81:23:f0:3f:97:fc:2a:dd:b3:33:85:
ed:6b:b3:b3:2c:40:11:ef:a8:6b:ff:17:9b:a1:94:
51:93:dd:bc:66:96:63:fb:b8:66:75:11:f6:06:fa:
b3:cb:65:ea:2d:2f:1f:da:ab:a1:b6:2e:0c:01:ed:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CC:D6:E7:63:12:89:59:7A:8A:DA:9B:9F:18:34:DD:AF:A1:26:7A
X509v3 Authority Key Identifier:
keyid:68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:29:de:58:6f:49:1d:78:aa:22:09:30:97:95:d7:ea:36:cf:
85:8f:3b:17:04:d4:d5:22:9b:44:7f:5d:d3:88:82:fc:21:07:
04:a2:c3:63:76:9d:60:92:d7:e4:69:af:86:88:39:e9:27:c4:
06:05:b4:dd:40:d2:5b:d6:b6:ed:e8:e6:7e:a1:d7:ea:3f:dd:
33:99:06:72:74:4c:46:55:71:41:eb:a1:b6:3a:16:5f:17:32:
26:fa:43:d1:e2:57:93:29:f3:62:5a:b7:8b:f7:7c:ac:3a:43:
a2:92:3d:90:4e:2b:73:1b:31:63:bb:7c:6d:57:5a:b4:03:04:
10:c8:43:c4:98:3f:c3:4e:a0:d6:6b:31:5b:95:f5:31:42:00:
80:56:6e:e1:c1:1b:5b:12:92:9c:12:cc:ba:5e:a9:2a:4f:8d:
8b:2a:5b:5d:06:aa:4d:cf:06:58:84:bb:5a:ad:1a:0b:7b:ac:
a0:90:4a:8c:ac:19:6d:85:64:6f:9a:4e:94:67:4b:e4:ef:a3:
4a:88:a0:8d:99:7e:78:27:e5:02:fa:c7:7e:41:c5:e6:98:81:
d3:b9:63:ad:48:10:5c:d9:c1:3a:2e:d0:62:35:76:31:cc:8f:
0e:42:02:a5:e7:c0:fb:db:2a:68:e1:6d:6c:e1:db:b1:35:12:
49:44:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 12:37:49 2026 by rpki-client