Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
File: aa24Jfn9vKDNfHkB3reiKuF5fAY.mft (raw, json)
Hash identifier: cVVr9ysopba6S9VNgH/rw8qmTU2PbxrOhL9aBOXKDmA=
Subject key identifier: 26:C2:77:E6:EF:D9:4B:A4:F5:4C:DA:D6:85:8D:C4:8D:B6:A1:9D:1B
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 01A130D8ACFC08C56E97E6486F84D067F917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
Manifest number: 17B8
Signing time: Mon 12 Oct 2026 16:01:08 +0000
Manifest this update: Mon 12 Oct 2026 16:01:08 +0000
Manifest next update: Tue 13 Oct 2026 16:01:08 +0000
Files and hashes: 1: YlYRZ37O-pzL7R_8WiFUYYasSE0.roa (hash: pASfCwUDt1iiJW6IS3OTekooh+sWxZnThm/3hjuqE+0=)
2: aa24Jfn9vKDNfHkB3reiKuF5fAY.crl (hash: wNbwKoaOcV8N9c3JcLg2vZ6Hwf2OD34ifIBOaeBzR5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:ac:fc:08:c5:6e:97:e6:48:6f:84:d0:67:f9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Oct 12 16:01:08 2026 GMT
Not After : Oct 13 16:01:08 2026 GMT
Subject: CN=26c277e6efd94ba4f54cdad6858dc48db6a19d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:12:22:c9:1f:f9:06:0e:64:ce:5e:79:dc:
13:51:86:ae:a4:7d:29:94:c6:97:af:b8:21:24:b6:
68:f7:97:4c:4c:49:55:dc:c1:6b:e7:48:bb:87:e7:
a4:a0:13:6a:46:e4:4e:8d:db:ce:50:29:bb:82:e8:
fd:f0:d7:a0:50:bc:2d:56:90:a3:7e:da:5a:41:5a:
bb:6c:ff:3d:55:c5:57:3a:41:6b:a0:56:25:fa:4f:
3b:33:a9:5f:ea:b5:e7:e9:a7:3d:35:d5:83:07:c7:
01:2e:ac:4c:d5:37:9b:69:8b:0e:8e:35:5a:4d:87:
f4:85:6b:f6:1a:66:f1:a0:c3:fd:da:d9:14:e0:eb:
04:71:1d:9b:a3:28:77:11:e2:9a:f9:d1:55:bb:51:
20:ca:bc:50:a9:4b:8f:14:ce:5e:ee:3a:dc:3a:6e:
10:c0:c4:39:75:61:3c:00:61:36:8f:f8:1f:d3:37:
e3:21:36:3f:28:ff:0f:6f:69:db:9a:fe:f7:cf:3d:
05:ac:41:0b:5b:11:33:9b:16:86:9e:a8:c6:4c:e0:
d7:77:07:fa:0c:ee:26:db:1a:3e:31:8c:8d:db:ac:
78:93:fb:02:c7:30:1f:ec:ce:84:25:60:10:97:a4:
d0:04:22:c0:a5:1c:bd:1f:cd:eb:36:bd:c3:b7:96:
6d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C2:77:E6:EF:D9:4B:A4:F5:4C:DA:D6:85:8D:C4:8D:B6:A1:9D:1B
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:2a:a4:d9:a9:95:e5:36:fc:21:b7:e3:79:17:b9:1f:4b:
88:36:59:34:1b:c3:69:65:55:fb:fe:e7:af:3b:3b:43:51:10:
36:78:56:a7:7a:2b:6f:c1:f6:a3:16:67:8b:da:fe:c7:22:8f:
a5:5f:45:30:b6:84:8c:af:66:06:9a:a1:38:0e:31:f2:26:51:
df:5f:d6:48:46:60:ac:0a:b8:7c:ed:57:aa:5d:64:c4:fd:36:
3d:16:67:d9:28:ef:ee:1f:d7:8f:6f:81:4b:03:99:6e:3b:a0:
45:4f:6c:79:e4:14:bb:a1:19:99:ec:d0:d9:42:8b:96:a2:d4:
4b:d4:ea:28:12:f3:28:38:b8:86:69:72:c3:b0:45:d0:1f:28:
32:da:96:65:cb:46:f7:6c:9b:4a:be:66:19:16:06:bd:99:96:
a8:b2:8d:35:42:42:e4:12:72:fd:90:b4:77:8e:89:de:a2:b4:
84:c9:bc:8b:ca:44:c0:dc:bf:68:c9:e7:6b:c6:4f:7b:87:ab:
aa:27:a9:06:32:d5:19:7a:b6:20:16:8e:40:a7:32:2f:b3:67:
79:8f:67:c4:b6:b9:19:3e:6a:cd:81:5f:63:7d:07:d7:5e:bc:
9d:f5:90:4d:e2:03:21:19:4a:40:d4:00:6e:b3:0b:f8:8d:2e:
18:f1:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:20:05 2026 by rpki-client