Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File: aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier: ij9KzWA+e+U5QWxhpEcogn6r5QND1e7ayBgrFaDkwqI=
Subject key identifier: A1:8B:FC:7D:79:28:82:BD:2E:3D:15:21:08:18:2F:66:F7:95:7E:3C
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 01A0C4B31ECF319312DD2E91A93B50439E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 16:01:08 +0000
Manifest this update: Mon 21 Sep 2026 16:01:08 +0000
Manifest next update: Tue 22 Sep 2026 16:01:08 +0000
Files and hashes: 1: EkQkhKJ_sNE6YDY5_NSjttWqPLM.roa (hash: URYU2DYQDNmo4pbokTTSpTSIUEpJYsAmLWcKC4aBuSM=)
2: Wapc6Zx4OMN_VO0S67d5ibZ5710.roa (hash: Y3NNed793NnfHappH6bAqpYLngigkEFCr29UQdBuPQM=)
3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: MPkaBnXncKTdqklAofKULGHZ5j2zq2r+UBo4gMdn4HQ=)
4: hSf3ZUa57NiqIKit-To8EdPsDy0.roa (hash: R7EX/6t/qALCF+ePfTDdFNb0hOv2pQEkJJ56eE4gSNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:1e:cf:31:93:12:dd:2e:91:a9:3b:50:43:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Sep 21 16:01:08 2026 GMT
Not After : Sep 22 16:01:08 2026 GMT
Subject: CN=a18bfc7d792882bd2e3d152108182f66f7957e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:36:55:83:60:20:91:80:c5:38:76:d2:25:
0a:b1:45:97:ec:d4:da:a6:23:78:5c:ff:38:f2:5f:
fa:df:11:1a:98:09:02:52:18:23:ca:a4:91:ef:46:
f5:5d:92:c9:56:32:62:d3:6c:32:84:25:85:7c:b6:
2b:ea:25:0e:c0:01:62:12:0e:4d:9e:4a:40:4b:70:
62:ac:f5:38:5f:81:41:89:ac:8d:1e:a5:d8:1a:98:
e6:4f:8c:7c:c0:db:65:07:a7:13:69:73:f4:08:70:
4c:db:a4:ab:8b:08:9a:e4:ba:7e:aa:27:40:28:91:
79:36:60:25:97:52:9e:41:dd:62:24:6e:dd:36:88:
3a:33:16:b9:04:19:9a:9a:3b:c8:e3:d1:53:7b:7a:
0d:ff:8f:4e:46:ca:b5:1a:b2:f6:4d:8d:38:f6:2b:
97:00:80:ae:6d:ef:8f:da:7e:fa:32:82:be:bc:c5:
b8:34:b7:7a:e7:5b:2c:aa:94:47:d2:bf:c2:1b:69:
a9:4a:e8:d0:af:73:e5:d5:96:f1:44:f9:dc:99:6c:
31:41:4d:72:55:d7:9c:aa:13:e0:03:d5:69:ba:1b:
10:22:66:9d:d3:51:f8:a3:79:3b:4c:26:f7:6c:ec:
91:04:6b:d8:8d:e4:64:c8:fc:e4:94:14:00:74:6a:
d5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:FC:7D:79:28:82:BD:2E:3D:15:21:08:18:2F:66:F7:95:7E:3C
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:97:80:98:29:1b:86:a2:f1:70:40:e7:81:49:17:81:85:99:
d2:cb:53:9d:0f:6a:c5:68:b7:1b:9f:71:6b:61:fd:99:c7:f0:
52:a8:f0:5f:87:fe:45:ab:35:44:a0:e4:bc:05:d1:9c:17:1a:
7f:f6:36:74:3e:d9:5b:22:90:0f:46:d3:68:86:22:2b:14:9a:
8e:70:a1:93:02:ac:67:1b:da:37:89:92:a6:4b:38:a4:4e:b7:
8c:e3:c1:02:f9:4f:cb:c4:20:be:79:1f:7b:0d:33:27:a9:78:
81:3b:22:44:07:00:71:a8:06:dd:14:ee:3c:a2:ad:62:34:78:
c3:d1:16:d6:28:e0:70:44:74:c2:e5:e5:d3:83:c0:0f:07:9f:
2f:7c:2c:13:c6:cf:b0:50:f1:93:97:07:28:cb:89:20:92:23:
b1:e0:bc:14:39:c8:c3:75:a4:8d:ab:be:cc:29:51:da:4f:54:
bf:36:f8:85:fd:5e:9c:c4:a6:dd:5f:04:d6:da:8a:5f:1c:97:
3e:ad:fe:88:4b:5d:70:f2:69:63:37:38:22:37:ca:10:be:9f:
1e:b5:6c:0e:c7:bc:3a:68:5a:02:64:b0:e8:b2:64:6b:15:20:
2f:a8:13:2e:ad:7f:f6:0f:94:f4:a7:34:e6:1a:5a:1e:0b:72:
57:62:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:18 2026 by rpki-client