Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: /QMnQ2A0Yu5gwlupbaGWxkisOaAscI4XHMJQF3hM+Bs=
Subject key identifier: 01:73:63:47:72:EC:4C:C2:02:29:0A:CE:4F:53:07:23:D7:30:F5:BC
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 01A0CDB6448B15E84DD6A4716AF1659296CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0BC9
Signing time: Wed 23 Sep 2026 10:01:09 +0000
Manifest this update: Wed 23 Sep 2026 10:01:09 +0000
Manifest next update: Thu 24 Sep 2026 10:01:09 +0000
Files and hashes: 1: Wqs5JSkx7_0Orjd3NSN3cscazxs.roa (hash: l0alqd0AN6rhg4vGvxDTD+n/+usdmoBFuJFkQbyIonc=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: xOU4cXiA4zeqpIwgoia8UZeQ8mN6c6f5eTn4V2N7eAk=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:44:8b:15:e8:4d:d6:a4:71:6a:f1:65:92:96:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: Sep 23 10:01:09 2026 GMT
Not After : Sep 24 10:01:09 2026 GMT
Subject: CN=0173634772ec4cc202290ace4f530723d730f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:16:72:47:4b:2e:82:27:d3:d4:f9:19:6b:
50:ef:07:3f:27:44:c4:42:6c:6a:ef:e1:b9:3d:72:
ca:af:12:1a:b6:f2:26:9a:1b:03:fa:98:8f:8d:f4:
44:0a:b4:ed:b2:ad:91:e9:3f:01:e9:c4:40:76:bf:
15:53:89:bf:42:9b:8b:17:4a:9d:db:47:c8:df:0b:
6e:23:1f:9b:af:ba:ec:a9:56:12:a3:67:c3:0a:e1:
88:ac:db:4f:bb:db:ba:80:af:76:26:43:01:aa:cd:
42:78:34:3e:f3:3f:5f:dd:1e:80:99:c9:d5:b3:88:
15:2c:66:fe:eb:d4:53:06:0b:d7:27:02:f6:e0:89:
f4:9f:60:50:fd:3e:24:c6:24:49:17:75:a9:0f:08:
cc:30:63:0e:eb:67:e8:5a:0f:a9:82:ff:fa:42:1d:
50:39:16:3b:bf:94:d8:12:c6:30:8e:4a:5c:80:78:
61:7e:eb:8c:55:2c:dd:01:01:a9:6b:b7:c1:d4:30:
7c:45:48:08:b1:fd:0c:aa:03:07:c7:f2:c2:0a:c0:
10:a3:9b:a4:55:ec:c5:00:7c:b8:52:39:f0:cf:3a:
02:b9:17:73:98:ee:39:c6:f5:fb:c6:32:b9:bf:15:
b6:cc:bd:05:61:e6:ca:77:d3:09:40:74:25:26:dc:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:63:47:72:EC:4C:C2:02:29:0A:CE:4F:53:07:23:D7:30:F5:BC
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:84:03:18:d8:12:90:9c:c4:7a:6f:86:47:19:ff:48:45:3a:
80:c7:c5:70:93:f1:ba:86:99:16:ab:4e:db:85:05:2e:31:ff:
ce:b6:d4:f4:d4:6a:12:e1:43:89:88:ca:17:b0:76:f3:f4:92:
f3:28:82:ab:8a:ec:8b:f4:a2:d6:c9:13:c8:e2:06:4d:d9:fd:
51:50:da:5b:78:1a:54:32:ec:8a:74:35:5e:64:a1:12:dc:42:
59:e9:cc:98:fb:2d:56:a9:d5:2a:dc:20:09:8f:72:c9:23:59:
5a:70:01:7d:f5:d7:60:7d:8f:c4:03:12:92:83:0b:12:63:f1:
6e:55:66:d9:7a:63:fd:49:79:f5:ae:0b:f5:88:80:e7:18:e8:
14:1e:e8:b3:fd:78:94:d8:96:a3:98:ae:55:6d:93:4b:62:2e:
e9:96:17:bc:a8:78:06:67:6c:88:89:da:db:66:fb:a1:b9:e6:
9a:02:d1:df:8f:5b:ab:8f:06:31:6f:bf:3a:d5:16:1a:2a:d8:
ca:6e:d8:aa:4e:57:73:ca:11:0e:a4:16:a2:d8:49:79:31:f3:
98:58:83:90:cf:33:99:b6:4a:d2:f2:b8:2a:54:39:f8:a5:54:
96:e3:ba:ad:d2:5c:48:4c:d6:b3:c2:6d:4f:45:9e:7d:6c:3e:
ee:b8:a1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtkSLFehN1qRxavFlkpbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2Nzg2N2UwZTIwMjI0OGU3ZjVlM2NiZDU3NGJkMWEz
MmZlM2YwHhcNMjYwOTIzMTAwMTA5WhcNMjYwOTI0MTAwMTA5WjAzMTEwLwYDVQQD
EygwMTczNjM0NzcyZWM0Y2MyMDIyOTBhY2U0ZjUzMDcyM2Q3MzBmNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+jMWckdLLoIn09T5GWtQ7wc/J0TE
Qmxq7+G5PXLKrxIatvImmhsD+piPjfRECrTtsq2R6T8B6cRAdr8VU4m/QpuLF0qd
20fI3wtuIx+br7rsqVYSo2fDCuGIrNtPu9u6gK92JkMBqs1CeDQ+8z9f3R6AmcnV
s4gVLGb+69RTBgvXJwL24In0n2BQ/T4kxiRJF3WpDwjMMGMO62foWg+pgv/6Qh1Q
ORY7v5TYEsYwjkpcgHhhfuuMVSzdAQGpa7fB1DB8RUgIsf0MqgMHx/LCCsAQo5uk
VezFAHy4UjnwzzoCuRdzmO45xvX7xjK5vxW2zL0FYebKd9MJQHQlJtzA4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFzY0dy7EzCAikKzk9TByPXMPW8MB8GA1UdIwQY
MBaAFGlsZ4Z+DiAiSOf148vVdL0aMv4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEt
MWNiMWE4ZjgwMjM4LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYzA0NTMtN2U4Zi00MWIxLTg1ZDEtMWNiMWE4ZjgwMjM4
LzEvYVd4bmhuNE9JQ0pJNV9Yank5VjB2Um95X2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmYQDGNgS
kJzEem+GRxn/SEU6gMfFcJPxuoaZFqtO24UFLjH/zrbU9NRqEuFDiYjKF7B28/SS
8yiCq4rsi/Si1skTyOIGTdn9UVDaW3gaVDLsinQ1XmShEtxCWenMmPstVqnVKtwg
CY9yySNZWnABffXXYH2PxAMSkoMLEmPxblVm2Xpj/Ul59a4L9YiA5xjoFB7os/14
lNiWo5iuVW2TS2Iu6ZYXvKh4BmdsiIna22b7obnmmgLR349bq48GMW+/OtUWGirY
ym7Yqk5Xc8oRDqQWothJeTHzmFiDkM8zmbZK0vK4KlQ5+KVUluO6rdJcSEzWs8Jt
T0WefWw+7rihZQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:31:44 2026 by rpki-client