Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json)
Hash identifier: dBXfq0l5U0qCzyKfCxcHcUhT57xVUfiZaD0u4RDLGAg=
Subject key identifier: FF:E1:5F:E8:DB:E1:AB:70:BA:6A:73:BC:E7:A2:5D:60:58:7A:BA:5F
Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249
Certificate serial: 01A13B9311E8AE956CA9D40CBD7C0BF409E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
Manifest number: 048B
Signing time: Wed 14 Oct 2026 18:00:56 +0000
Manifest this update: Wed 14 Oct 2026 18:00:56 +0000
Manifest next update: Thu 15 Oct 2026 18:00:56 +0000
Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=)
2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: YkgwiNRqg9usY4bBHW6SupbsyfzRd4VPYeHXajQGwx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:93:11:e8:ae:95:6c:a9:d4:0c:bd:7c:0b:f4:09:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249
Validity
Not Before: Oct 14 18:00:56 2026 GMT
Not After : Oct 15 18:00:56 2026 GMT
Subject: CN=ffe15fe8dbe1ab70ba6a73bce7a25d60587aba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:c1:f1:3d:fe:d3:7c:7f:e1:15:f9:bb:22:
ab:dd:3e:bf:29:0e:ea:bc:a5:01:32:04:47:92:f6:
76:b5:6c:41:51:b8:8b:9d:1d:d1:19:be:32:53:e1:
f7:c1:db:c9:91:68:5c:28:81:32:1f:fc:dd:9e:4b:
66:ee:41:64:bf:80:32:ee:14:12:67:dd:bb:ae:57:
45:2d:5c:57:c0:2c:f6:06:ba:31:7d:d2:02:b9:2f:
5a:d7:10:d5:e0:d7:93:3c:a1:82:fe:2a:a9:3a:34:
fb:5a:9f:c8:0b:f0:f9:c4:79:54:38:b8:c7:6b:03:
d1:b4:d8:05:61:42:99:4a:ef:59:72:6a:e3:6a:13:
75:27:aa:ee:4d:b4:0c:4a:7d:3d:6c:63:3f:cd:30:
ba:d3:df:8c:02:6b:7f:eb:35:91:40:4e:91:45:4c:
8e:a5:9d:91:36:fa:22:24:fe:06:5b:2e:14:a5:79:
ee:75:02:6f:ea:f5:e7:3b:92:d9:30:2d:22:2e:ef:
34:22:1b:ac:28:1c:24:5f:ca:fe:d7:cb:a0:01:70:
87:73:22:ba:5b:5c:d9:db:96:d6:d1:73:c7:bf:7e:
b7:ee:2e:41:42:d5:40:fd:65:29:d4:7c:8e:c0:ab:
8e:e6:6f:b9:d7:d3:c8:47:7b:22:3b:48:8e:ee:b7:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:5F:E8:DB:E1:AB:70:BA:6A:73:BC:E7:A2:5D:60:58:7A:BA:5F
X509v3 Authority Key Identifier:
keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ac:5f:f8:3f:d5:c2:a8:fc:36:3b:bd:f5:61:b8:9d:23:93:
a0:e8:09:70:cb:e7:9e:60:c7:7e:36:8d:42:45:3f:15:b0:03:
14:b1:01:d5:0c:80:9c:b1:29:90:a0:ec:6b:aa:88:ec:79:e4:
2c:c4:5c:c5:8c:6a:31:4e:32:b3:c8:6a:92:6d:32:5d:7b:10:
27:d4:d1:77:f9:45:39:a0:ee:ef:ed:d4:71:fe:80:ad:d8:94:
7d:0a:77:d5:d7:b2:e8:41:fc:bb:c9:20:10:27:15:b0:4f:72:
e3:a8:9d:be:f0:fc:8f:48:5b:5f:6c:2c:52:80:41:d3:fb:b2:
2c:dc:3c:32:4a:0d:3e:2f:5b:d2:44:51:8b:bb:8f:59:0f:52:
a9:46:5a:1e:97:49:06:df:28:6f:3e:de:16:be:ec:cc:9b:1f:
bc:1c:69:f9:3e:01:2d:f5:46:b8:47:a2:92:1b:5c:64:fb:6f:
2f:1e:ba:14:b7:a8:e0:9c:34:50:7e:29:d4:69:34:82:68:af:
11:0d:c0:f3:d6:01:f7:f0:bf:30:25:95:a6:c0:3e:de:10:1d:
b4:d7:d3:78:35:81:b9:67:87:b0:20:93:bb:92:7e:9e:ef:6f:
8e:ef:ff:e0:bb:8a:c2:00:93:3e:9b:df:c7:28:8a:a2:60:25:
61:3b:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:11:50 2026 by rpki-client